学习

ID: pdkhfkjcfgiemfbnabpdffjhfmocokbg

Supported Languages

🇨🇳Chinese (Simplified)

🇺🇸English

Extension Info & Metadata

Status

Active

Version

3.0.9

Size

0.08 MB

Rating

5.0/5

Reviews

Users

5,000

Type

Extension

Updated

Jun 2, 2023

Publisher Contextual Analysis

Author: ttgladView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

A helper for xuexi.cn

学习强国浏览器插件，自动阅读、观看视频、每日答题、每周答题、专项答题，每日45分！

User Growth

Showing data from May 30, 2022 to May 29, 2023

Versions

-20%(-1,000 users)

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 40 ratings+1 (3%)

Average Rating

Current: 4.95 / 5.0+4.95

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium2

Low1

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0.5 Code review	6

Extension Version	Code Review Findings
3.0.5	6

Files with findings

4 distinct paths — top paths by unique finding count:

background.js3
js/xuexi/answer.js1
js/xuexi/location.js1
js/xuexi/redirect.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	critical	background.js (line 44)	The background script reads the `token` authentication cookie from the active xuexi.cn tab and persists its raw value into extension local storage under the key `loginToken`. This constitutes session credential harves…	3.0.5
2	Credential Theft	high	background.js (line 261)	The extension re-injects the previously harvested authentication token back into the xuexi.cn cookie jar when opening a new study window. This demonstrates that the credential extraction in `startRun()` is part of a d…	3.0.5
3	Privilege Escalation	high	js/xuexi/answer.js (line 12)	The `slideVerify()` function programmatically synthesizes a full mouse drag sequence (mousedown → repeated mousemove → mouseup) to automatically solve the platform's CAPTCHA slider challenge with randomized coordinate…	3.0.5
4	Code Injection	medium	js/xuexi/redirect.js (line 1)	This content script injects a message listener into every page matching `://.xuexi.cn/*` that unconditionally calls `window.location.replace(message.url)` with any URL supplied by the background script. Because `loc…	3.0.5
5	Obfuscation	medium	background.js (line 332)	On installation, `env` is set to `"idc"` (line 544), which causes `logMessage()` to silently suppress all console output. The comment `// 打印日志` (print log) and the branch condition mean that in production mode the ext…	3.0.5
6	Tracking	low	js/xuexi/location.js (line 6)	This script continuously captures and stores the user's screen position (`screenLeft`, `screenY`) and viewport dimensions on every window resize event. While the data is written to local extension storage rather than …	3.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.xuexi.cn	-	https://www.xuexi.cn
pc.xuexi.cn	/points/my-points.html	https://pc.xuexi.cn/points/my-points.html
pc-proxy-api.xuexi.cn	/delegate/score/days/listScoreProgress	https://pc-proxy-api.xuexi.cn/delegate/score/days/listScoreProgress?sence=score&deviceType=2
www.xuexi.cn	/lgdata/	https://www.xuexi.cn/lgdata/
pc.xuexi.cn	/points/login.html	https://pc.xuexi.cn/points/login.html
pc.xuexi.cn	/points/exam-practice.html	https://pc.xuexi.cn/points/exam-practice.html
pc.xuexi.cn	/points/exam-weekly-list.html	https://pc.xuexi.cn/points/exam-weekly-list.html
pc.xuexi.cn	/points/exam-paper-list.html	https://pc.xuexi.cn/points/exam-paper-list.html
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
github.com	/ttglad/learning	https://github.com/ttglad/learning

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

大佬才是救苦救难的菩萨，每天节约了我们几十分钟。

陈

陈幻羽·27 Oct 2025

https://github.com/ttglad/learning Github链接

Starry Starry Night·9 Sept 2024

作者的github的主页链接是否可以发一个

peng wu·15 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

学习

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating