HackTools++

HackTools++: Repeater, Intruder, Decoder, and Scanner in DevTools. Capture, edit, and replay HTTP requests for testing.

HackTools++ turns Chrome DevTools into a complete web-app security testing workbench — no proxy setup, no desktop app, no account. Just open DevTools and test. ⚡ CORE TOOLS • Repeater — capture any request the page makes, then edit and replay it instantly. • Intruder — fuzz parameters with payload lists and attack modes (sniper, cluster bomb), with grep-match, diffing and filtering. • Race — fire synchronized request bursts to test race conditions. • Intercept — hold outgoing requests before they reach the server and Forward, edit, or Drop each one (Burp-style — powered by Chrome's own debugger, no external proxy). • Collaborator — built-in out-of-band (OOB) testing via ProjectDiscovery Interactsh. Generate DNS/HTTP payloads and catch callbacks to find SSRF and blind RCE/XXE/SSTI. 🔍 RECON & SCANNING • Security Scanner — automated checks on captured traffic. • Secret Scanner — flags exposed API keys and tokens (AWS, GitHub, Stripe & more). • Tech Detector — fingerprints frameworks, servers and libraries. • WordPress Audit — core/plugin/theme and endpoint checks. • Decoder — Base64, URL, Hex and JWT encode/decode. 🔒 PRIVATE BY DESIGN Everything runs locally in your browser. No accounts, no telemetry, nothing leaves your device. 👤 BUILT FOR Penetration testers, bug-bounty hunters, and security-minded developers who want fast, in-browser testing without heavy tooling. ⚠️ For authorized security testing only. Only test systems you own or have explicit permission to assess.