SecExplorer Pro is a comprehensive security testing extension for Firefox that helps ethical hackers, penetration testers, and developers identify and test for common web vulnerabilities based on the OWASP Top 10 framework.
- Vulnerability Database: Contains hundreds of curated payloads for testing common vulnerabilities
- OWASP Top 10 Coverage: Organized by the latest OWASP Top 10 categories
- Quick Search: Find payloads by vulnerability type, platform, or severity
- Payload Testing: Test payloads directly on web pages
- Page Analysis: Scan pages for potential security issues
- History Tracking: Keep track of your searches and tests
- Dark Mode: Eye-friendly dark theme for extended testing sessions
- Clone this repository or download the ZIP file
- Open Firefox and navigate to
about:debugging - Click "This Firefox" in the left sidebar
- Click "Load Temporary Add-on"
- Select any file from the extension directory
For permanent installation, you'll need to package the extension and install it through Firefox Add-ons.
- Click the SecExplorer Pro icon in your Firefox toolbar
- Browse payloads by OWASP category or vulnerability type
- Use the search function to find specific payloads
- Click "Copy" to copy a payload to clipboard
- Use "Test" to try the payload on the current page
- Use the Analyzer tab to scan pages for vulnerabilities
- SQL Injection (SQLi)
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Server-Side Request Forgery (SSRF)
- Local/Remote File Inclusion (LFI/RFI)
- Insecure Deserialization
- Authentication Bypass
- JWT Vulnerabilities
- And many more...
To modify or extend this extension:
- Download this project and add your knowledge.
Contributions are welcome! Please:
- Fork the repository
- Create a feature branch
- Submit a pull request
This project is licensed under the GPT 3.0 License - see the LICENSE file for details.
This tool is intended for legal security testing and educational purposes only. Only use this tool on systems you own or have permission to test. The developers are not responsible for any misuse of this software.
Always obtain proper authorization before performing any security testing.