Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: KhanHack

CRITICAL RISKRemoved from Chrome Web Store

KhanHack

ID: hajdfibhjapfjcoihgkfeldfihodjekk

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.3.3

Size

1.24 MB

Rating

4.3/5

Reviews

Users

9,000

Type

Extension

Updated

May 24, 2024

Publisher Contextual Analysis

Trusted

Author: BlazerView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,746

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

The KhanHack Extension Used To View All Answers Easily!

Introducing the KhanHack, an extension which shows you the answers to lessons and any type of quiz on the official non-affiliated Khan Academy® website, its simplistic UI design lets you clearly see the answers to problems and cheat without having to actually do the problems and quizzes at all. This extension works by grabbing the answers that are sent from the server and putting them on the awesome interface for you to see! How to use: 1. Simply install the extension. 2. Go to any assignment and the hack/cheat script will activate. 3. Then the KhanHack will display the quiz answers in the top right hack menu. 4. Have fun flying though your lessons!!! ✌️ Note: The KhanHack will not work if you are already in a lesson and you choose to activate it, if you do you must reload the page and activate it then before you get into any lessons or quizzes. If you have any issues feel free to contact the developers in the KhanHack Discord -> (https://discord.gg/N5SCTJ8wm6) Disclaimer: KhanHack is an unofficial tool and is not endorsed by or affiliated with any educational institution, including Khan Academy™. All trademarks belong to their respective owners. Khan Academy™ is a trademark of Khan Academy® Inc.

User Growth

Showing data from Jan 23, 2024 to Jun 02, 2024

Versions

+1136.26%(+8,272 users)

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 32 ratings+2 (7%)

Average Rating

Current: 4.31 / 5.0+4.31

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3 Code review	5

Extension Version	Code Review Findings
1.3	5

Files with findings

3 distinct paths — top paths by unique finding count:

inject.js2
manifest.json2
injector.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	high	injector.js (line 1)	Content script injects a <script> element pointing at the extension's bundled inject.js into the page's DOM. This deliberately bypasses the content-script isolated world so inject.js runs in the page's main JS context…	1.3
2	Network Interception	high	inject.js (line 48)	Monkey-patches the global window.fetch to intercept responses from Khan Academy's /getAssessmentItem endpoint, clone them, and extract correct-answer data (numeric-input answers, radio choices, expression forms, dropd…	1.3
3	Unauthorized Data Collection	high	manifest.json (line 27)	A content script (content_script.js) is registered to run at document_start in all frames on <all_urls>. The referenced file is not present in the analyzed bundle (and the declared service_worker background.js is also…	1.3
4	Code Injection	medium	inject.js (line 5)	Builds a large HTML blob containing a <script> tag and assigns it via innerHTML, then appends to the document. While inline <script> tags inserted via innerHTML are not executed by the browser, the pattern is still a …	1.3
5	Privilege Escalation	medium	manifest.json (line 8)	The manifest lists baseline access scoped to khanacademy.org, but advertises optional_host_permissions for https:/// combined with optional declarativeNetRequestWithHostAccess and tabs. If those optional permissions…	1.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


${e}`	-	http://${e}`
www.xfa.org	/schema/xci/	http://www.xfa.org/schema/xci/
www.xfa.org	/schema/xfa-connection-set/	http://www.xfa.org/schema/xfa-connection-set/
www.xfa.org	/schema/xfa-data/	http://www.xfa.org/schema/xfa-data/
www.xfa.org	/schema/xfa-form/	http://www.xfa.org/schema/xfa-form/
www.xfa.org	/schema/xfa-locale-set/	http://www.xfa.org/schema/xfa-locale-set/
ns.adobe.com	/xdp/pdf/	http://ns.adobe.com/xdp/pdf/
www.w3.org	/2000/09/xmldsig	http://www.w3.org/2000/09/xmldsig#
www.xfa.org	/schema/xfa-source-set/	http://www.xfa.org/schema/xfa-source-set/
www.w3.org	/1999/XSL/Transform	http://www.w3.org/1999/XSL/Transform

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

amazingly helpful, i would always use this, my teacher is totally not gonna find out !

X_GHOST·31 May 2024

not working

jim wong·25 May 2024

Working like it said it would.

Jessica Chen·21 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

KhanHack

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews