yeswehack/PwnFox

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1339 stars · 124 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PwnFox is a Firefox extension paired with a Burp Suite extension that provides tools for web security audits, such as one-click Burp proxy connection, container profiles with identifying headers, and postMessage logging. It also offers JavaScript injection on page load and one-click removal of security headers like CSP and X-Frame-Options.

Use cases

• proxy firefox traffic through burp suite with one click
• manage multiple identities in one browser during pentests
• log and inspect postMessage traffic between frames
• strip security headers like CSP while testing payloads
• inject custom javascript into pages during security audits
• highlight requests by container color in burp

When to choose

• you do web pentesting or bug bounty work with Burp Suite and Firefox
• you need multi-identity browsing with per-identity request tagging in Burp
• you want quick toggling of security headers or postMessage visibility in devtools

When to avoid

• you use Chrome instead of Firefox (consider nccgroup/autochrome)
• you need a general-purpose proxy without Burp Suite
• you require a formally licensed or commercially supported tool

Facets

plugin · maturity active

security developer-tools logging proxy security browser-extensions developer-tools penetration-testing browser browser-extension burp-suite pentesting bug-bounty firefox-addon security-audit postmessage-logging container-profiles

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yeswehack/PwnFox")