Browser Extensions

PwnFow

GitHub - yeswehack/PwnFox: PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.GitHub

KNOXSS

KNOXSS Community Edition – Get this Extension for 🦊 Firefox (en-US)addons.mozilla.org

Dom Logger ++

GitHub - kevin-mizu/domloggerpp: A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.GitHub

Config files:

GitHub - matanber/domlogger-configs: Useful configurations for the DomLogger++ extensionGitHub

Wappalyser

FoxyProxy

Cookie-Editor

DotGit

DotGit – Get this Extension for 🦊 Firefox (en-US)addons.mozilla.org

HackBar

Different version - Not the same payload

HackBar – Get this Extension for 🦊 Firefox (en-US)addons.mozilla.org

HackBar – Get this Extension for 🦊 Firefox (en-US)addons.mozilla.org

EvalVillain

GitHub - swoops/eval_villain: A Firefox Web Extension to improve the discovery of DOM XSS.GitHub

Bishop Vulnerability Scanner

Bishop Vulnerability Scanner - Chrome Web Storechromewebstore.google.com

Penetration Testing Kit

OWASP Penetration Testing Kit - Chrome Web Storechromewebstore.google.com

S3BucketList

S3BucketList - Chrome Web Storechromewebstore.google.com

Interesting Books

Interesting Books

Disclaimer: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.

• The Web Application Hacker’s Handbook The go-to manual for web app pentesters. Covers XSS, SQLi, logic flaws, and more

• Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities Learn how to perform reconnaissance on a target, how to identify vulnerabilities, and how to exploit them

• Real-World Bug Hunting: A Field Guide to Web Hacking Learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery.

Support this Gitbook

I hope it helps you as much as it has helped me. If you can support me in any way, I would deeply appreciate it.