#browser

XnlReveal
XnlReveal

A Chrome browser extension to show alerts for several hidden elements.

Built With
Built With

Find out what websites are Built With.

caido
caido

A lightweight web security auditing toolkit.

SharpCookieMonster
SharpCookieMonster

Extracts cookies from Chrome.

cookie_crimes
cookie_crimes

Read local Chrome cookies without root or decrypting.

HackBrowserData
HackBrowserData

Decrypt passwords/cookies/history/bookmarks from the browser.

LaZagne
LaZagne

Credentials recovery project.

s3cXSSer
s3cXSSer

This extension will help you to detect GET/POST based XSS vulnerability in any website easily.

Invoke-PowerThIEf
Invoke-PowerThIEf

An Internet Explorer post exploitation library.

Tamper Data
Tamper Data

View and modify HTTP requests before they are sent.

Tamper Dev
Tamper Dev

Allows you to intercept and edit HTTP/HTTPS requests and responses.

Spy Extension
Spy Extension

This Chrome extension will read literally everything it can.

Fiddler Everywhere
Fiddler Everywhere

Web debugging proxy for MacOS, Windows, and Linux.

PwnFox
PwnFox

A Firefox/Burp Suite extension that provide usefull tools for your security audit.

autochrome
autochrome

A shiny new copy of Chromium that will bring colors in your hunt.

DotGit
DotGit

An extension for checking if .git is exposed in visited websites.

postMessage-tracker
postMessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack).

PostMessage_Fuzz_Tool
PostMessage_Fuzz_Tool

A PostMessage fuzzing extension for Chrome.

S3BucketList
S3BucketList

Firefox plugin that lists Amazon S3 Buckets found in requests.

DOM based XSS finder
DOM based XSS finder

Chrome extension that finds DOM based XSS vulnerabilities.

Tracy
Tracy

Assists with finding all sinks and sources of a webapp and display the results in a nice way.

XSS Radar
XSS Radar

A Chrome extension for fast and easy XSS fuzzing.

Wappalyzer
Wappalyzer

Identify technologies on websites.

BeEF
BeEF

The Browser Exploitation Framework is a penetration testing tool that focuses on the web browser.

KNOXSS
KNOXSS

Online XSS tool with demonstration of vulnerability.