website / browser extension loader

[evilsocket]

Implement a selenium based loader to profile websites and possibly browser extensions. Something like:

Dockerfile

FROM python:3.10-alpine

# install chromedriver
RUN apk update
RUN apk add chromium chromium-chromedriver

ENV PYTHONUNBUFFERED 1
RUN pip install --upgrade pip
RUN pip install selenium

WORKDIR /app
COPY dyana.py .
COPY main.py .

ENV DISPLAY=:99

ENTRYPOINT ["python3", "-W", "ignore", "main.py"]

settings.yml

description: Opens a website in an headless browser.
network: true

args:
  - name: url
    description: URL to open.
    required: true

main.py

import argparse
import json
import shutil
import time

from selenium import webdriver
from selenium.webdriver.chrome.service import Service

from dyana import Profiler  # type: ignore[attr-defined]

if __name__ == "__main__":
    parser = argparse.ArgumentParser(description="Run an Python file")
    parser.add_argument("--url", help="URL to open", required=True)
    args = parser.parse_args()
    profiler: Profiler = Profiler()

    try:
        chrome_options = webdriver.ChromeOptions()
        chrome_options.add_argument("--no-sandbox")
        chrome_options.add_argument("--headless")
        chrome_options.add_argument("--disable-dev-shm-usage")
        chrome_options.add_argument("--window-size=1920,1080")

        driver = webdriver.Chrome(options=chrome_options, service=Service(shutil.which("chromedriver")))
        driver.implicitly_wait(10)

        profiler.track_memory("after_load")

        driver.get(args.url)

        time.sleep(10)
        # el = self.driver.find_element(By.CLASS_NAME, 'header__logo')
        # el.click()
        profiler.track_memory("after_request")

        # driver.quit()

        # profiler.track_memory("after_driver_quit")

    except Exception as e:
        profiler.track_error("chrome", str(e))

    print(json.dumps(profiler.as_dict()))

[GangGreenTemperTatum]

quick update: debugging DNS behavior as i have a working PoC and doing some follow-up evaluation and testing at the moment