Now since I'm looking for the function which validates if a user is Pro or Free, I'll be searching for the word Pro inside the JS file. From the looks of it, it seems the application logic is inside app.js. Going to the Sources tab, I can see a partial directory structure of the extension. Let's fire up the Chrome debugger to look deeper into the source to see where the actual validation is happening. I already checked my Burp to see if Pro validations are being done on any API endpoint but couldn't find any which probably means that it's happening somewhere in the source code on the client-side. When this extension is installed for the first time, a screen like this will be shown in a new tab after signing up and logging inĪnd when we try to create a Nested Collection from the sidebar, in the free account, an error like this will be shown which I'll be bypassing soon. I'll start with installing the extension normally from the Chrome store. You can still find its other extension in the Chrome store which is not vulnerable. This is what I'll be bypassing today.įirst of all, this is an unlisted Extension and it can't be searched in Google Chrome extensions anymore. One of the most useful features in their paid plan is creating nested collections for bookmarks. The paid plan comes with some extra features which you can find on their website. Raindrop features two plans, one is free and the other one is paid. This will be saved in your browser's extension as well as on Raindrop's Web app because the same API is being used to interact with the application.

So how this extension works is you add it to your Google chrome, and then bookmark any of your pages using this extension. On top of all that, it's completely open sourced at which attracted me towards using it. It also has one of the nicest web interfaces at. Raindrop is one of the most famous Bookmark manager apps that's being used by more than 100,000+ users according to its Chrome Extension page here. I'll be explaining how I exploited Raindrop's Google Chrome extension to use their premium services for free. In this post, I'll be talking about an extension called Raindrop, which is one of those neat Bookmark managers for Google chrome, and believe me, it works really well in increasing productivity and keeping a track of things in an organized way. Google chrome extensions are a bundle of multiple JavaScript, HTML, and CSS files, much like a web app but inside your browser and interacting with the pages or providing functionalities to enhance your browsing experience.

Best google chrome hack extensions