happycog / cloudbleed-history-analyzer

A Mac app that checks your Chrome history for Cloudbleed
MIT License
4 stars 0 forks source link

Cloudflare Vulnerability History Analyzer

Download Latest Version (OSX / macOS only)

On February 17, 2017, the "Cloudbleed" security bug was discovered. This bug affected Cloudflare's CDN product, which is used by millions of websites. For any websites that use Cloudflare, it is possible that users' private data may have been exposed to the public, including passwords, personally identifiable information, credit card numbers, etc. That data was also stored in search engine caches for some time after the bug was discovered, greatly amplifying the impact of this bug. Read more about Cloudbleed on Wikipedia.

We recommend you change your password for any site that uses Cloudflare. This tool will analyze your Chrome browser history and report which sites you have visited that use Cloudflare so you can change your passwords.

This tool does not share your browser history with any third-parties. The source code is available on GitHub.

Limitations: This tool only works on default Chrome profiles. It doesn't scan other browsers. It can also only identify sites showing in your browsing history and that currently use Cloudflare to serve the content on the root URL of the hostname.

Warranty

This application and code have no warranty of any kind. If you find a bug, please contact us. It's provided completely as-is; if something breaks, you lose data, or something else bad happens, the author(s) and owner(s) of this plugin are in no way responsible. We also can't guarantee completeness; this list is a starting point of information that may be affected. It's almost certainly not exhaustive.

Development

Built with Electron. Requires Node / NPM, NVM is supported.

npm install
npm run dev

Credits

App and code by @abenjaminsmith, idea from @mrw, proof of concept by @kamaljoshi.

License

View the license here.