TGViewer
#bugbountytips #bugbountytips @bughuntertips · 3.07K subscribers
Post #559 1.9K
12 useful firefox extensions for bugbounty 💵

1. Trufflehog - Detecting hidden API keys, tokens and secrets on websites.

2. Wappalyzer - Identify technologies on websites.

3. DotGit - An extension to check if .git is exposed in visited websites.

4. FindSomething - Find interesting things in the webpage's source code or JavaScript.

5. Fake Filler - A form filler that fills all form inputs (textboxes, textareas, radio buttons, dropdowns, etc.) with fake and randomly generated data.

6. WaybackURL - Fetched archived URLs from the Wayback Machine.

7. Open Multiple URLs - Opens a list of URLs and optionally extracts URLs from text.

8. Link Gopher - Extracts all links from web page, sorts them, removes duplicates, and displays them in a new tab.

9. Temp Mail - Temporary disposable email address.

10. Shodan - Plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ports are open.

11. Favicon Hash for Shodan - Generates MurmurHash3 hash from website favicon. Compliant with hashing method used by Shodan Search Engine (shodan.io). Useful for OSINT investigations and reconnaissances.

12. Edit Cookie - Edit cookies related to the current page.

#bugbountytips
addons.mozilla.org Trufflehog – Get this Extension for 🦊 Firefox (en-US) Download Trufflehog for Firefox. Sniffing out credentials
  • 🔥 3
  • ❤ 1
  • 👍 1
More from @bughuntertips
  1. Jan 7, 2026🔍 SwaggerSpy: Automated OSINT for API Intelligence Looking for exposed secrets in API doc…
  2. Dec 23, 2025🔍 Quick Win: Git Exposure → Secret Hunting 🔥 Step 1: Mass Git Config Hunt nuclei -l aliv…
  3. Dec 16, 2025Want to report a scanner finding, but feel like writing it up is too tedious? 😅 Install t…
  4. Dec 5, 2025If you need to generate a target-specific wordlist, make sure to check out GAP extension.…
  5. Dec 4, 2025Cloudflare has recently started blocking proxy tools such as Burp Suite by detecting their…
  6. Nov 9, 2025If you found a package.json file in the wild, you might find some internal packages vulner…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →