cookie-session-sentinel-x

"A lightweight Manifest V3 Chrome Extension for real-time cookie auditing, local/session storage security scanning, unencrypted JWT decoding, and XSS vulnerability assessment."

🍪 Cookie & Session Inspector Pro (Security Assessment Tool)

Cookie & Session Inspector Pro is an advanced browser security extension designed for penetration testers, bug bounty hunters, and web developers to audit session health, inspect cookie flags, decode JWT tokens, and spot sensitive data exposures in real-time.

---

🔥 Key Features

• 🍪 Live Cookie Audit:
  • Categorizes active domain cookies.
  • Highlights insecure flags automatically (Missing HttpOnly, Missing Secure, SameSite attributes).
• 🛡️ Local & Session Storage Vulnerability Scanner:
  • Detects unencrypted sensitive data (passwords, tokens, keys) in localStorage & sessionStorage.
  • Flags JWTs exposed to potential XSS attacks.
• 🔓 Client-Side JWT Analyzer:
  • Instant Base64 parsing and structural breakdown of JSON Web Tokens (Header & Payload) without sending data to external servers.
• ⚡ Zero Remote Dependencies:
  • Runs entirely on client-side native Chrome APIs (chrome.cookies, chrome.scripting).
  • Requires no API keys or external backend servers.

---

🛠️ Project Structure

cookie-session-inspector/
├── manifest.json        # Manifest V3 Configuration
├── background.js        # Background Service Worker for Cookie Querying
├── content.js           # Injected Script for Storage & XSS Vulnerability Scanning
├── popup.html           # Modern Inter-font UI with Tabbed Interface
├── popup.js             # Core Controller (Cookie Audit, JWT Decoder & Scanner)
└── popup.css            # Dark Cyberpunk Inspired Stylesheet
----

**⚠️ Legal Disclaimer**
DISCLAIMER: This tool is strictly intended for educational purposes, ethical security testing, and authorized auditing. The developer assumes no responsibility or liability for misuse or unauthorized assessment activities.