I'm turning this wonderful set of tools into a full Chrome Extension — now it’s even easier to use.
No more messy data:, tricks or manual script pasting. Just toggle and hack.
📦 Import once — use forever.
A collection of JavaScript tools tailored for bug bounty hunters, pentesters, and anyone digging deep into web apps.
Previously, you had to inject it manually or use TamperMonkey — now it lives in your browser toolbar, always ready to go.
So simply said, any webpage you visit, script tag is injected(then removed) to import list of functions.
J4 Modules had upadte !!
I was thinkng of something that during manual pentesting can help, without calling anything, and I came up with this idea, current Modules-pack is called Reflection Hunter
However in future I may add other features, and eventually create new Modules-pack
- Go to
chrome://extensions/ - Enable Developer Mode (top right)
- Click "Load Unpacked"
- Select your folder (e.g.,
~/JS4hacking/) - Boom! Now hit any target site, open DevTools(console), and use the extension!
- After importing all functions are auto injected in page
- You can always write your own in
Scripts/and hook them in
Hit menu() to see most useful scripts list
Cool updates upcoming !! Stay tuned :D
Basically run
git pull origin main && bash bundle.sh
after reinsall the extension on chrome. (delete & again->"load unpacked")