From 8d2f3fc1e49b7c110ca0702da3701a8be3351083 Mon Sep 17 00:00:00 2001 From: moamen Date: Tue, 14 Apr 2026 15:42:08 +0200 Subject: [PATCH] docs: update README and manifest for cross-browser support - Change Chrome extension to browser extension throughout - Add Chrome Web Store and Firefox Add-ons install links - Add Firefox badge to README header - Update architecture section with Firefox manifest and build script - Update installation instructions for both browsers --- README.md | 50 ++++++++++++++++++++++++++++++-------------------- manifest.json | 2 +- 2 files changed, 31 insertions(+), 21 deletions(-) diff --git a/README.md b/README.md index 0308118..26a0672 100644 --- a/README.md +++ b/README.md @@ -5,12 +5,13 @@

KeyFinder

- Passive API key and secret discovery for Chrome + Passive API key and secret discovery for Chrome and Firefox

- + + @@ -18,7 +19,7 @@


-KeyFinder is a Chrome extension that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. +KeyFinder is a browser extension for Chrome and Firefox that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. ## What It Detects @@ -57,7 +58,7 @@ Additionally, **Shannon entropy analysis** is applied to detect random high-entr ## Features - **Zero dependencies** - Pure vanilla JavaScript, no jQuery, no external libraries -- **Manifest V3** - Built for modern Chrome with service worker architecture +- **Manifest V3** - Built for modern Chrome and Firefox with service worker architecture - **Passive scanning** - Runs automatically on every page load - **Custom keywords** - Add your own search terms to scan for - **Dashboard** - Professional results page with filtering, sorting, and search @@ -68,12 +69,11 @@ Additionally, **Shannon entropy analysis** is applied to detect random high-entr ## Installation -### From Release (Recommended) +### Chrome +- [Install from Chrome Web Store](https://chromewebstore.google.com/detail/keyfinder/oogbljkilkfgdlkbmajlolpanilnnkim) -1. Go to [Releases](https://github.com/momenbasel/keyFinder/releases) and download the latest `.crx` file -2. Open Chrome and navigate to `chrome://extensions` -3. Enable **Developer mode** (top right toggle) -4. Drag and drop the `.crx` file onto the page +### Firefox +- [Install from Firefox Add-ons](https://addons.mozilla.org/en-US/firefox/addon/keyfinder-original/) ### From Source @@ -81,10 +81,16 @@ Additionally, **Shannon entropy analysis** is applied to detect random high-entr git clone https://github.com/momenbasel/keyFinder.git ``` -1. Open Chrome and go to `chrome://extensions` +**Chrome:** +1. Go to `chrome://extensions` 2. Enable **Developer mode** 3. Click **Load unpacked** and select the `keyFinder` folder +**Firefox:** +1. Go to `about:debugging` > "This Firefox" +2. Click **Load Temporary Add-on** +3. Select `manifest.firefox.json` from the `keyFinder` folder + ## Usage 1. **Install** the extension @@ -104,22 +110,26 @@ Default keywords: `key`, `api_key`, `apikey`, `api-key`, `secret`, `token`, `acc ``` keyFinder/ - manifest.json # MV3 manifest - popup.html # Extension popup UI - results.html # Findings dashboard + manifest.json # Chrome MV3 manifest + manifest.firefox.json # Firefox MV3 manifest + popup.html # Extension popup UI + results.html # Findings dashboard js/ - background.js # Service worker - storage and message handling - patterns.js # 80+ secret detection regex patterns - content.js # Page scanner - DOM, scripts, network interception - popup.js # Popup logic - results.js # Dashboard logic with filtering and export + background.js # Service worker - storage and message handling + patterns.js # 80+ secret detection regex patterns + content.js # Page scanner - DOM, scripts, network interception + interceptor.js # XHR/Fetch hooking and window global scanning + popup.js # Popup logic + results.js # Dashboard logic with filtering and export css/ - popup.css # Popup styles - results.css # Dashboard styles + popup.css # Popup styles + results.css # Dashboard styles icons/ icon16.png icon48.png icon128.png + scripts/ + build.sh # Build Chrome and Firefox zip packages ``` ## Disclaimer diff --git a/manifest.json b/manifest.json index 19585d7..4c28c8c 100644 --- a/manifest.json +++ b/manifest.json @@ -1,6 +1,6 @@ { "name": "KeyFinder", - "description": "Passively discovers API keys, tokens, and secrets leaked in page scripts, DOM, network responses, and browser storage.", + "description": "Passively discovers API keys, tokens, and secrets leaked in page scripts, DOM, network responses, and browser storage. Available for Chrome and Firefox.", "version": "2.0.0", "manifest_version": 3, "action": {