Extensions

Essential browser extensions for security testing and bug bounty hunting

Greb

Easily capture and manipulate form parameters, URL parameters, and form data.

TruffleHog

Find hidden API keys and secrets in websites

FoxyProxy

Essential proxy management for Burp Suite and other MITM applications

Wappalyzer

Identify technologies, CMS, and frameworks used by websites

Temp Mail

Quick access to temporary email services

Hunter.io

Extract all email addresses from websites, useful for report submission

HackTools

Collection of useful payloads and tools for penetration testing

Cookie Editor

Advanced cookie management with security flag detection

WebRTC Disable

Protect VPN IP from WebRTC leaks

Link Gopher

Extract all domains and links from websites and Google results

FindSomething

Discover hidden parameters and secret keys

DotGit

Find exposed .git repositories for potential P1 information disclosure

Open Multiple URLs

Open multiple sites simultaneously

uBlock Origin

Block ads and trackers for cleaner testing

Dark Reader

Dark mode for better night-time hunting

User-Agent Switcher

Test sites with different user-agent strings

Retire.js

Identify vulnerable JavaScript libraries

Page Translator

Translate websites to your preferred language

WaybackURLs

Fetch URLs from Wayback Machine archive

Shodan

View hosting details, IP ownership, and open services for websites

EXIF Viewer Pro

Extracts metadata from images directly in the browser.

Google Translate

Translates entire web pages into different languages.

Wayback Machine

Fetches archived versions and URLs from the Internet Archive.

SponsorBlock

Skips sponsored segments and intros on YouTube.

EndPointer

Extracts and analyzes sensitive URLs and endpoints.

YesWeHack VDP Finder

Detects vulnerability disclosure programs (VDPs) of websites.

S3BucketList

Detects Amazon S3 bucket URLs from network requests.

D3coder

Provides encoding/decoding tools such as Base64, ROT13, and URL encoding.

Mitaka

Searches IPs, domains, URLs, and hashes across OSINT platforms.

Vortimo

OSINT tool for scraping, bookmarking, and analyzing web content.

Toggle JavaScript

Enables or disables JavaScript quickly for security testing.

IP Address and Domain Information

Displays IP, hosting provider, WHOIS, and geolocation data.

JSON Formatter

Formats and highlights raw JSON data for readability.

HackBar

Tool for manual security testing like XSS and SQLi payloads.

Fake Filler

Auto-fills forms with realistic dummy data for testing.

Code Formatter

Beautifies JSON, CSS, and JavaScript for easier inspection.