Is PPTWork safe?

Question

Is PPTWork safe?

Accepted Answer

PPTWork is high risk. When you open the extension popup, the popup script reads the extension's stored Redcoolmedia user key and sends a GET request to stream.redcoolmedia.net/api/pptworkb-h.php. Observed dynamic-analysis evidence and the shipped code show that the popup expects the server to return XXXXX/YYYYY/ZZZZZ-delimited history records, then renders the returned page URLs as clickable links in the popup. When you use the popup file manager in Presentation editor PPTWork for PPT slides, the extension can list, upload, download, and delete files through Redcoolmedia filemanager.php endpoints. Those file operations are tied to the same persistent pseudonymous user ID used by the extension.

Is Presentation editor PPTWork for PPT slides safe?

Findings