PwnFox – Firefox/Burp Extension with Security Audit Tools

PwnFox is a Firefox/Burp extension that provide useful tools for your security audit. this plugin will allow to remove security header and more.

PwnFox - Firefox/Burp Extension with Security Audit Tools
PwnFox – Firefox/Burp Extension with Security Audit Tools

Some of the features with this tool are:

  • Single click BurpProxy – Connect to Burp with a simple click, this will probably remove the need for other addons like foxyProxy. However if you need the extra features provided by foxyProxy you can leave this unchecked.
  • Containers Profiles – the extension give you fast access to the Firefox containers. This allow you to have multiple identities in the same browser. When PwnFox and the Add container header option are enabled, PwnFox will automatically add a X-PwnFox-Color header to hightlight the query in Burp. PwnFoxBurp will automatically highlight and strip the header, but you can also specify your own behavior with addons like logger++.
  • PostMessage Logger – PwnFox add a new message tab in you devtool. This allow you to quickly visualize all postMessage between frames.
  • Toolbox – Inject you own javascript code on page load. The code will be loaded as soon as possible. This can used to add dangerous behavior detection, or just to add extra function to your js console.
  • Security header remover – Sometime it’s easier to work with security header disabled. You can now do it with a single button press. Don’t forget to reenable them before testing your final payload.

You can read more and download this extension over here:

Notify of
Inline Feedbacks
View all comments