5 items
HackTools++: Repeater, Intruder, Decoder, and Scanner in DevTools. Capture, edit, and replay HTTP requests for testing. HackTools++ turns Chrome DevTools into a complete web-app security testing workbench — no proxy setup, no desktop app, no account. Just open DevTools and test. ⚡ CORE TOOLS • Repeater — capture any request the page makes, then edit and replay it instantly. • Intruder — fuzz parameters with payload lists and attack modes (sniper, cluster bomb), with grep-match, diffing and filtering. • Race — fire synchronized request bursts to test race conditions. • Intercept — hold outgoing requests before they reach the server and Forward, edit, or Drop each one (Burp-style — powered by Chrome's own debugger, no external proxy). • Collaborator — built-in out-of-band (OOB) testing via ProjectDiscovery Interactsh. Generate DNS/HTTP payloads and catch callbacks to find SSRF and blind RCE/XXE/SSTI. 🔍 RECON & SCANNING • Security Scanner — automated checks on captured traffic. • Secret Scanner — flags exposed API keys and tokens (AWS, GitHub, Stripe & more). • Tech Detector — fingerprints frameworks, servers and libraries. • WordPress Audit — core/plugin/theme and endpoint checks. • Decoder — Base64, URL, Hex and JWT encode/decode. 🔒 PRIVATE BY DESIGN Everything runs locally in your browser. No accounts, no telemetry, nothing leaves your device. 👤 BUILT FOR Penetration testers, bug-bounty hunters, and security-minded developers who want fast, in-browser testing without heavy tooling. ⚠️ For authorized security testing only. Only test systems you own or have explicit permission to assess.
Jul 19, 2026
rating_count is the Chrome Web Store ratings count, not a written-review count.
Media assets
Screenshots and videos on the listing.
Has promo video
Whether the listing includes at least one video.
Languages
Declared language locales.
Developer website
Listing exposes a developer website URL.
Contact email
Listing exposes a contact email.
Keyword in name
Case-insensitive substring match in the name.
Keyword in description
Case-insensitive substring match in the description.
Keyword occurrences in description
Count of case-insensitive occurrences in the description.
Category user-count percentile
Share of same-category extensions with fewer users (null if unknown).
These are transparent listing completeness / keyword signals, not a prediction of Chrome Web Store search ranking.