Reconnaissance & Security Testing
Fake Filler
A form filler that fills all form inputs (textboxes, textareas, radio buttons, dropdowns, etc.) with fake and randomly generated data.
TruffleHog
Sniffing out credentials.
Click-jacking
Adds a red border to all webpages vulnerable to click-jacking and missing X-Frame-Options header.
Email Extractor
Automated Email Extraction Tool which extracts email addresses from web pages and auto-saves them.
retire.js
Scans websites for vulnerable JavaScript libraries.
Beautifier & Minify
Minifies and beautifies CSS, HTML, and JavaScript code, making large codebases easier to analyze during penetration testing.
ModHeader
Add and modify HTTP request headers and response headers.
User-Agent Switcher and Manager
Spoof browser information such as browser type and operating system.
KNOXSS Community Edition
Tool for XSS (Cross-Site Scripting) discovery.
NoScript Security Suite
Allows potentially malicious web content to run only from trusted sites. Protects against XSS and other web exploits.
BuiltWith
Website profiler that identifies technologies used on a webpage.
Modify Header Value
Add, modify, or remove headers for requests on desired domains.
Hunter: Find Email Addresses in Seconds
Find email addresses from anywhere on the web with one click.
Max HackBar
Firefox add-on version of HackBar.
HackBar
A HackBar alternative for Firefox written using WebExtensions.
Cookie-Editor
Create, edit, and delete cookies for the current tab.
Open Multiple URLs
Open a list of URLs and optionally extract URLs from text.
DotGit
Checks whether a .git directory is exposed on visited websites.
Shodan.io
Retrieve information gathered by Shodan, such as open ports, server location, etc.
Wappalyzer
Detects technologies used on websites, including CMSs, frameworks, analytics tools, servers, and more.
HackTools
Browser extension providing cheat sheets and tools useful for web application penetration testing.
PwnFox
Firefox/Burp Suite extension providing useful tools for security auditing.
Flagfox
Shows the country location of a website’s server and provides tools such as WHOIS, translation, site safety checks, and more.
Firefox Multi-Account Containers
Separate browsing identities into different containers.
FoxyProxy Standard
Automatically switches proxy servers based on URL patterns.
Privacy, Utilities & Productivity
Temp Mail – Disposable Temporary Email
Temporary disposable email addresses to protect against spam, bots, and phishing.
Broken Link Checker
Finds broken (404) and redirected links (301, 307, 308) on the current page.
JSON-formatter
Quickly formats JSON documents with indentation and line breaks.
APK Downloader
Downloads APKs directly from the Google Play Store without using Google Play.
Altair GraphQL Client
Feature-rich GraphQL client.
YesWeHack VDP Finder
Indicates whether visited sites have vulnerability disclosure programs.
iMacros for Firefox
Automates repetitive browser tasks through recording and playback.
Firefox Relay
Creates email aliases that forward to your real inbox.
HTTP Header Live
Displays, edits, and sends HTTP headers.
DuckDuckGo Privacy Essentials
Tracker blocking, cookie protection, private search, email protection, HTTPS upgrading, and more.
ClearURLs
Removes tracking elements from URLs.
Bitwarden – Free Password Manager
Secure and free password manager.
Web Archives
View archived versions of web pages using services like Wayback Machine, Archive.today, Google cache, Bing cache, and Yandex.
Don’t Track Me Google
Removes Google’s link-conversion/tracking mechanism and speeds up search result loading.
Search by Image
Reverse image search using Google, Bing, Yandex, Baidu, TinEye, and others.
Privacy Badger
Automatically learns to block invisible trackers.
uBlock Origin
Efficient wide-spectrum content blocker.
uMatrix
Point-and-click control over scripts, iframes, ads, and other requests.
Decentraleyes
Serves local versions of common web libraries to reduce tracking and improve privacy.
Privacy Settings
Manage Firefox privacy settings from a toolbar panel.
Terms of Service; Didn’t Read
Shows information about website terms and privacy policies.
Temporary Containers
Automatically opens websites in disposable containers to isolate cookies, storage, and other site data.
xBrowserSync
Secure, anonymous browser bookmark synchronization without requiring an account.
ClearURLs
Removes tracking parameters from URLs.