HackTools++: Repeater, Intruder, Decoder, and Scanner in DevTools. Capture, edit, and replay HTTP requests for testing.
Users
738
+112 in 30 days
Rating
4.9 / 5
unchanged in 30 days
Ratings
12
0 in 30 days
Store rank
#36K
#31K among extensions
Version
2.0.11
updated 19 Jul 2026
Users
monthly, 8 months
Latest, 15 Oct 2026:738 usersMove the mouse over the chart for any month
Ratings count
monthly, 8 months
Latest, 15 Oct 2026:12 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About HackTools++
HackTools++ turns Chrome DevTools into a complete web-app security testing workbench — no proxy setup, no desktop app, no account. Just open DevTools and test.
⚡ CORE TOOLS
• Repeater — capture any request the page makes, then edit and replay it instantly.
• Intruder — fuzz parameters with payload lists and attack modes (sniper, cluster bomb), with grep-match, diffing and filtering.
• Race — fire synchronized request bursts to test race conditions.
• Intercept — hold outgoing requests before they reach the server and Forward, edit, or Drop each one (Burp-style — powered by Chrome's own debugger, no external proxy).
• Collaborator — built-in out-of-band (OOB) testing via ProjectDiscovery Interactsh. Generate DNS/HTTP payloads and catch callbacks to find SSRF and blind RCE/XXE/SSTI.
🔍 RECON & SCANNING
• Security Scanner — automated checks on captured traffic.
• Secret Scanner — flags exposed API keys and tokens (AWS, GitHub, Stripe & more).
• Tech Detector — fingerprints frameworks, servers and libraries.
• WordPress Audit — core/plugin/theme and endpoint checks.
• Decoder — Base64, URL, Hex and JWT encode/decode.
🔒 PRIVATE BY DESIGN
Everything runs locally in your browser. No accounts, no telemetry, nothing leaves your device.
👤 BUILT FOR
Penetration testers, bug-bounty hunters, and security-minded developers who want fast, in-browser testing without heavy tooling.
⚠️ For authorized security testing only. Only test systems you own or have explicit permission to assess.