Showing posts from September 11, 2016

First of all thank you for your time to rivew my post!! I just want to use this opportunity to introduce codedforum WhatsApp group.
Were you can meet experts, webmasters, coders, bloggers designers
and many more you can drop your number in the comment box to join the group since our group invite link isn't available. Thank you.

Mozilla Firefox is one of the most secured web browsers in the world.

Did you ever dream that we could

use Firefox to hack like a pro?

Firefox, like other browsers, has a feature called an add-on. Add-ons provide additional functionality to your browser.

There are thousands of Firefox add-ons available for Mozilla, but Hackingloops brings you the best and most effective hacking add-ons.

In short, we are listing the most popular Firefox add-ons that hackers can use. This list of 11 add-ons varies from information gathering tools to attacking tools.

All these add-ons are available for free and can be downloaded from the
Mozilla add-on website.

Read on to see what Hackingloops has brought you this time.

1•Tamper Data

Tamper data is a great tool to view and modify HTTP/HTTPS headers and post parameters. We can alter each request going from our machine to the destination host with this. It helps in security testing web applications by modifying POST parameters. It can be used in performing XSS and SQL Injection attacks by modifying header data. Add Tamper data to Firefox:

Download here

2. Firebug

Firebug is a nice add-on that integrates a web development tool inside the browser. With this tool, you can edit and debug HTML, CSS, and JavaScript live on any webpage to see the effect of changes. It helps while analyzing JS files to find XSS vulnerabilities. It’s a very helpful add-on for finding DOM based XSS for security testing professionals.Add Firebug to your browser:

Download Here

3. Hackbar

Hackbar is a simple penetration tool for Firefox. It helps in testing simple SQL injection and XSS holes. You cannot execute standard exploits but you can easily use it to test whether or not vulnerability exists. You can also manually submit form data with GET or POST requests. It also has encryption and encoding tools. Most of the time, this tool helps while testing XSS vulnerability with encoded XSS payloads.

It also supports keyboard shortcuts to perform various tasks. I am sure most people in the security field already know about this tool. Hackbar is mostly used in finding POST XSS vulnerabilities because it can send POST data manually to any page you like. With the ability to manually send POST form data, you can easily bypass client side validations. If your payload is being encoded at client side, you can use an encoding tool to encode your payload and then perform the attack. If the application is vulnerable to XSS, I am sure you will find the vulnerability with the help of the Hackbar add-on to Firefox browser.

Download Here

4. Cookies Manager

Cookie Manager is one of the greatest tools ever created. Using this tool you can actually play with cookies. You can alter almost every cookie using this tool. You can use Cookies Manager to view, edit, and create new cookies. It also displays extra information about cookies, allowing you to edit multiple cookies at once and backup/restore them.Add Cookies Manager to Firefox:

Download Here

5. NoScript

No Script add-on is greatness beyond imagination. With this tool, you can monitor each and every script running on a website; you can block any of the scripts and see what each script actually does. But this add-on is for experts, newbies will face problems using this. Note: If you are testing XSS, HTTPS header modifications, or Injection attacks on any website, you need to disable this plugin first because it will block your efforts.Add NoScript to Firefox:

Download Here

6. Grease Monkey

Grease Monkey is the counter part to NoScript, its function is the exact opposite of Noscript. We use Noscript to block scripts and GreaseMonkey to run them. It allows you to customize the way a web page displays or behaves by using small bits of JavaScript. Add Grease Monkey to Firefox:

Download here

7. User Agent Switcher

User Agent Switcher adds a one-click user agent switch to the browser, along with a menu and tool bar button. Whenever you want to switch the user agent, use the browser button. User Agent add-on helps in spoofing the browser while performing an attack.Add User Agent Switcher to Firefox:

Download Here

8. CryptoFox

CryptoFox is an encryption or decryption tool for Mozilla Firefox. It supports most of the available encryption algorithms so you can easily encrypt or decrypt data with supported encryption algorithms. This add-on comes with dictionary attack support to crack MD5 cracking passwords. Although it hasn’t always had great reviews, it works satisfactorily.Add CryptoFox to Firefox:

Download Here

9. SQL Inject Me

SQL Inject Me is another nice Firefox add-on used to find SQL injection vulnerabilities in web applications. This tool does not exploit vulnerabilities but displays their existence. SQL injection is one of the most harmful web application vulnerabilities, it can allow attackers to view, modify, edit, add, or delete records in a database. This tool sends escape strings through form fields and searches database error messages. If it finds a database error message, it marks the page as vulnerable. Hackers can use this tool for SQL injection testing.Add SQL Inject Me to Firefox:

Download Here

10. XSS ME

Cross Site Scripting is the most common web application vulnerability. This add-on is incredibly useful for detecting XSS vulnerabilities in web applications. XSS-Me is used to find reflected XSS vulnerabilities from a browser. It scans all forms of the page, and then performs an attack on selected pages with pre-defined XSS payloads. After the scan is complete, it lists all the pages that rendered a payload, and may be vulnerable to XSS attack. Then, you can manually test the web page to determine whether or not the vulnerability exists.Add XSS ME to Firefox:

Download Here

11. Passive Recon

Last but not the least, Passive Recon is an information gathering tool.Passive Recon provides information security professionals the ability to perform “packetless” discoveries of target resources utilizing publicly available information. It gathers information in the same manner as DnsStuff tool, available on backtrack.Add PassiveRecon to Firefox:

Download Here

That’s all for today.

I hope you’re enjoying your journey towards becoming a Professional Hacker. Have fun! Keep reloading our home page for more updates!!

Ads:- start investing on edinar-io today and make cool 20% of your income every month . edinar is an opportunity for the poor and the rich. Edinar rewards every one, edinar earns every one.

The poor remains poorer, because they see very opportunity as scam. While Tue rich becomes richer because they will see the opportunity, make a deep research on it and start their investment. Contact edinar affiliates USA branch @+14243594575 Thank you !!

Always feel free to contact us through the comment box. Your comment will be auto approved immediately and replied.

CDF

Showing posts from September 11, 2016

10+ Firefox Addons a Hacker Must Have and Implement

Trending Post

10+ Firefox Addons a Hacker Must Have and Implement

Archive