Is TwSearch - X/Twitter Search Result Export safe?
TwSearch replays the user's X/Twitter credentials to page through search results and export detailed profile data for every account found.
The extension captures the authorization and CSRF headers from the user's Twitter/X search requests and stores them locally, then uses the session's ct0 cookie and a public web-client token to call X's private GraphQL search API directly. For each account surfacing in a search, it pulls extended profile fields such as bio, location, follower/following counts, and DM eligibility, not just tweet text, and compiles this into the exported results. All requests use the user's own authenticated session; no separate third-party server is involved.
Who publishes itenthe lam - 1 other listing from the same operator, none carrying a finding
enthe lam - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.7.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on twitter.com
*://*.twitter.com/*
Read and change your data on x.com
*://*.x.com/*
Store data in your browser
storage
Watch every request your browser makes
webRequest
Store an unlimited amount of data in your browser
unlimitedStorage
Where it sends data
Destinations our analysis observed TwSearch - X/Twitter Search Result Export contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- x.comwidely used
TwSearch - X/Twitter Search Result Export sends data to x.com. A widely used service: 37 other extensions we have analyzed send data here.