Tools

kingofthenops/cookie-monster

BOF-based tool to extract browser cookies and credentials from Chrome, Edge, and Firefox via handle duplication and fileless download, with offline…

elevenpaths/neto

Neto | A tool to analyse browser extensions

smaranchand/bucky

Bucky (An automatic S3 bucket discovery tool)

nccgroup/tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

moscovium-mc/tor-0day-javascript-exploit

Firefox/Tor Browser 0day exploit analysis (CVE-2024-9680) A UAF in animation timelines leading to RCE. Patched.

llamakko/cve-2015-7214

Proof-of-concept exploit for CVE-2015-7214 demonstrating Same-Origin Policy bypass in Firefox 42.0 via data and view-source URIs, with local and…

gt0day/anongt

Redirect All Traffic Through Tor Network For Kali Linux

0vercl0k/cve-2019-9810

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

graniet/chromebackdoor

Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious…

conviso-archives/firefox_tunnel

Browser-based C2 tunnel that exfiltrates payloads through Firefox's cookie.sqlite and auto-submitting HTML/JS, enabling stealthy firewall bypass for…

celenityy/phoenix

Suite of hardened Firefox configurations using AutoConfig and Enterprise Policies to enhance privacy, security, and usability while maintaining…

penguincabinet/cve-2024-4367-hands-on

Hands-on lab to learn CVE-2024-4367 (Firefox PDF.js RCE) with PoC generation, vulnerable browser launch, and patched version verification.

mazen160/firefox-security-toolkit

A tool that transforms Firefox browsers into a penetration testing suite

mozilla/firefox-devtools-mcp

Model Context Protocol server for Firefox DevTools - enables AI assistants to inspect and control Firefox browser through WebDriver BiDi

ryandfir/hindsight

Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox

kspearrin/ff-password-exporter

Easily export your passwords from Firefox.

elevenpaths/amsiext

AMSIext