红雨滴情报助手

d3coder

Encoding/Decoding Plugin for various types of encoding like base64, rot13 or unix timestamp conversion This extension enables you to encode and decode selected text via the context menu. This reduces the time you spend on looking up values and gives you more time to concentrate on the important things of development. The context menu this extension enables is customizable through the options page. To get there either click on the item or go to Wrench -> Tools -> Extensions -> d3coder options. Via the popup you are able to choose between four message types: alert the result, adding a DIV-element to the bottom of the page, via console.log() or replacing the selected text on the page. You can also deactivate functions(e.g. if you don't need them and want to free the space they use). The current version has implemented the following en-/decoding functions:

Shodan

The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open. The Shodan plugin for Chrome automatically checks whether Shodan has any information for the current website. Is the website also running FTP, DNS, SSH or some unusual service? With this plugin you can see all the info that Shodan has collected on a given website/ domain.

HackBar

A browser extension for Penetration Testing * Supported * HTTP methods * GET * POST * application/x-www-form-urlencoded * multipart/form-data * application/json * Request editing mode * Basic * Raw * Custom payload * For more information, please visit https://github.com/0140454/hackbar/blob/master/README.md * XSS * Vue.js XSS payloads * Angular.js XSS payloads for strict CSP * Some snippets for CTF * Html encode/decode with hex/dec/entity name * String.fromCharCode encode/decode * Helper function for converting payload with `atob` For more information, please visit https://github.com/0140454/hackbar#third-party-libraries

Hack-Tools

The all in one Red team extension for web pentester HackTools, is a web extension facilitating your web application penetration tests, it includes cheat sheets as well as all the tools used during a test such as XSS payloads, Reverse shells and much more. With the extension you no longer need to search for payloads in different websites or in your local storage space, most of the tools are accessible in one click. HackTools is accessible either in pop up mode or in a whole tab in the Devtools part of the browser with F12. - Dynamic Reverse Shell generator (PHP, Bash, Ruby, Python, Perl, Netcat) - Shell Spawning (TTY Shell Spawning) - MSF Venom Builder - XSS Payloads - Basic SQLi payloads - Local file inclusion payloads (LFI) - Data Encoding - Obfuscated Files or Information - Hash Generator (MD5, SHA1, SHA256, SHA512, SM3) - Useful Linux commands (Port Forwarding, SUID) - RSS Feed (Exploit DB, Cisco Security Advisories, CXSECURITY) - CVE Search Engine - Various method of data exfiltration and download from a remote machine