Izegrar i yiminig Firefox
  • Isiɣzaf
  • Isental
    • I Firefox
    • Imawalen & ikemmusen n tutlayin
    • Ismal nniḍen n tunigin
    • Izegrar i Android
Qqen
Taskant n HackBar

HackBar sɣur 0140454

A browser extension for Penetration Testing

4.5 (2 reviews)4.5 (2 reviews)
1 446 yiseqdacen1 446 yiseqdacen
Ilaq-ak·am Firefox i useqdec n usiɣzef-a
Sader Firefox syen awi isiɣzaf
Sader afaylu

Asiɣzef aɣefisefka

Tuṭṭfiwin n wegdil
Ɣef usiɣzef agi
## Contributor

- 0140454
  - GitHub: https://github.com/0140454
- lebr0nli
  - GitHub: https://github.com/lebr0nli
- boylin0
  - GitHub: https://github.com/boylin0
- HSwift
  - GitHub: https://github.com/HSwift

## How to open it?

1. Open "Developer tools" (Press F12 or Ctrl+Shift+I)
2. Switch to "HackBar" tab
3. Enjoy it

## Features

* Load
  * From tab (default)
  * From cURL command

* Supported
  * HTTP methods
    * GET
    * POST
      * application/x-www-form-urlencoded
      * multipart/form-data
      * application/json
  * Request editing mode
    * Basic
    * Raw
  * Custom payload
  * For more information, please visit https://github.com/0140454/hackbar/blob/master/README.md

* Auto Test
  * Common paths (Wordlist from dirsearch included)

* SQLi
  * Dump all database names (MySQL, PostgreSQL, MSSQL)
  * Dump tables from database (MySQL, PostgreSQL, MSSQL)
  * Dump columns from database (MySQL, PostgreSQL, MSSQL)
  * Union select statement (MySQL, PostgreSQL, MSSQL)
  * Error-based injection statement (MySQL, PostgreSQL, MSSQL)
  * Dump in one shot payload (MySQL)
    * Reference: https://github.com/swisskyrepo/PayloadsAllTheThings
  * Dump current query payload (MySQL)
    * Reference: https://github.com/swisskyrepo/PayloadsAllTheThings
  * Space to Inline comment

* XSS
  * Vue.js XSS payloads
  * Angular.js XSS payloads for strict CSP
  * Some snippets for CTF
  * Html encode/decode with hex/dec/entity name
  * String.fromCharCode encode/decode
  * Helper function for converting payload with `atob`

* LFI
  * PHP wrapper - Base64

* SSRF
  * AWS - IAM role name

* SSTI
  * Jinja2 SSTI
    * Flask RCE Reference: https://twitter.com/realgam3/status/1184747565415358469
  * Java SSTI

* Shell
  * Python reverse shell cheatsheet
  * bash reverse shell cheatsheet
  * nc reverse shell cheatsheet
  * php reverse shell/web shell cheatsheet

* Encoding
  * URL encode/decode
  * Base64 encode/decode
  * Hexadecimal encode/decode
  * Unicode encode/decode
  * Escape ASCII to hex/oct format

* Hashing
  * MD5
  * SHA1
  * SHA256
  * SHA384
  * SHA512

## Shortcuts

* Load
  * Default: Alt + A

* Split
  * Default: Alt + S

* Execute
  * Default: Alt + X

* Switch request editing mode
  * Default: Alt + M

## Third-party Libraries

For more information, please visit https://github.com/0140454/hackbar#third-party-libraries
Rated 4,5 by 2 reviewers
Qqen akken ad ternud tazmilt i usiɣzef-agi
Ulac tazmilt akka tura

Amḍan n yitran yettwasekles

5
1
4
1
3
0
2
0
1
0
Ɣeṛ akk 2 n iceggiren
Tisirag akked yisefkaIssin ugar

Yesra tisirag:

  • Sewḥel agbur ɣef yal asebter
  • Ldi ifeccka n tneflit akken ad tkecmeḍ ar isefka-ik deg iccaren yeldin

Tisirag tifrayanin:

  • Kcem ɣer isefka-inek deg ismal web meṛṛa
Ugar n telɣut
TigIseɣwan n uzegrir
  • Asmel n tallelt
Lqem
1.2.8
Teɣzi
1,75 MB
Aleqqem aneggaru
8 μήνες πριν (29 Δεκ 2024)
Taggayin i ilan assaɣ
  • Taneflit Web
  • Tabaḍnit & Taɣellist
Turagt
Akk izerfan ttwaḥerzen
Amazray n Lqem
  • Wali akk ileqman
Rnu ar tegrumma
Mmel azegrir-a
Tizmilin n tuffɣa n 1.2.8
* Update dependencies
Ugar n isiɣzaf sɣur 0140454
  • Ulac tazmilt akka tura

  • Ulac tazmilt akka tura

  • Ulac tazmilt akka tura

  • Ulac tazmilt akka tura

  • Ulac tazmilt akka tura

  • Ulac tazmilt akka tura

Ddu γer usebter agejdan n Mozilla

Izegrar

  • Γef
  • Ablug n yizegrar Firefox
  • Tanemselt ɣef usiɣzef
  • Tarbaɛt n ineflayen
  • Tasertit i yineflayen
  • Ablug n temɣiwent
  • Anmager
  • Azen-d abug
  • Aḍris n ucegger

Iminigen

  • Desktop
  • Mobile
  • Enterprise

Ifarisen

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Tabaḍnit
  • Inagan n tuqqna
  • Usḍif

Ala ma yettwammel akken-nniḍen, agbur n usmel-agi yella ddaw n turagt Creative Commons Attribution Share-Alike v3.0 neɣ ileqman imaynuten.