Item logo image for HackTools++

HackTools++

4.7(

3 ratings

)
Item media 4 (screenshot) for HackTools++
Item media 1 (screenshot) for HackTools++
Item media 2 (screenshot) for HackTools++
Item media 3 (screenshot) for HackTools++
Item media 4 (screenshot) for HackTools++
Item media 1 (screenshot) for HackTools++
Item media 1 (screenshot) for HackTools++
Item media 2 (screenshot) for HackTools++
Item media 3 (screenshot) for HackTools++
Item media 4 (screenshot) for HackTools++

Overview

HackTools++: Repeater, Intruder, Decoder, and Scanner in DevTools. Capture, edit, and replay HTTP requests for testing.

A lightweight security testing toolkit inside Chrome DevTools, including Repeater, Intruder, Decoder, Scanner, Tech Detector, and OWASP Finding. Features - DevTools Panel: Custom "HackTools++" tab in Chrome DevTools - Request Capture: Captures all HTTP/HTTPS requests from the active tab - Request List: Method, URL, status code, and time with search and filters - Request Editor: Edit method, URL, headers, and body before replaying - Response Viewer: Pretty (JSON), Raw, Headers, and Timing tabs - AI Assist: Mock endpoint analysis and security test suggestions - Intruder: Fuzzing/brute-force attacks with payload positions (§marker§) and payload lists - Decoder: Encode/decode Base64, URL, Hex, HTML entities, and JWT - Tech Detector: Passive technology + version detection with local CVE mapping - OWASP Finding: OWASP-focused findings view for XSS, SQLi, IDOR, and JWT

Details

  • Version
    1.0.0
  • Updated
    March 2, 2026
  • Offered by
    kumarsachin1642001
  • Size
    962KiB
  • Languages
    English
  • Developer
    Email
    kumarsachin1642001@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data. To learn more, see the developer’s privacy policy.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Related

FindSomething

4.6

Find interesting things in the webpage's source code or JavaScript

HackBar

4.2

A browser extension for Penetration Testing

Clickjacking Detector

0.0

Quickly detect websites vulnerable to clickjacking attacks, keeping you safe from hijacked clicks.

S3BucketList

3.5

S3BucketList automatically scans network requests made by your browser to detect Amazon S3 bucket URLs

EndPointer

5.0

An endpoint parser and extractor with many flexible features

Retire.JS

5.0

Scanning website for vulnerable js libraries. Icon by studiomx

JS Recon Buddy

5.0

Analyze page scripts for bug bounty reconnaissance.

Shodan

4.5

The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open.

Trufflehog-PingPwn

0.0

Detects potential exposed secrets on web pages.

Hack-Tools

4.6

The all in one Red team extension for web pentester

rep+

5.0

rep+ - Capture, modify, and replay HTTP requests in Chrome DevTools with AI-powered security analysis.

Medium Unlock

4.5

Unlimited Access to Medium Articles.

FindSomething

4.6

Find interesting things in the webpage's source code or JavaScript

HackBar

4.2

A browser extension for Penetration Testing

Clickjacking Detector

0.0

Quickly detect websites vulnerable to clickjacking attacks, keeping you safe from hijacked clicks.

S3BucketList

3.5

S3BucketList automatically scans network requests made by your browser to detect Amazon S3 bucket URLs

EndPointer

5.0

An endpoint parser and extractor with many flexible features

Retire.JS

5.0

Scanning website for vulnerable js libraries. Icon by studiomx

JS Recon Buddy

5.0

Analyze page scripts for bug bounty reconnaissance.

Shodan

4.5

The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open.

Google apps