降温信号未识别到付费功能高风险权限组合

HackTools++

HackTools++: Repeater, Intruder, Decoder, and Scanner in DevTools. Capture, edit, and replay HTTP requests for testing.

用户数423当前公开安装规模

评分4.9商店平均评分

评论数10公开评论体量

Manifest 版本V3插件平台版本

7日增长-34近 7 天净增用户

7日增长率-7.44%相对周增长速度

视觉预览

HackTools++ 媒体预览

4 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

4.67

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长增长

+11+2.67%

7日增长减少

-34-7.44%

30日增长增长

+32+8.18%

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本2.0.0

ManifestV3

大小1.01MiB

语言数1English

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

A lightweight security testing toolkit inside Chrome DevTools, including Repeater, Intruder, Decoder, Scanner, Tech Detector, and OWASP Finding.

Features

- DevTools Panel: Custom "HackTools++" tab in Chrome DevTools

- Request Capture: Captures all HTTP/HTTPS requests from the active tab

- Request List: Method, URL, status code, and time with search and filters

- Request Editor: Edit method, URL, headers, and body before replaying

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

EndPointer

开发者工具 / Developer Tools

疑似付费置信度 92平台 Stripe

An endpoint parser and extractor with many flexible features

Sputnik

OSINT web extension

Retire.JS

工具 / Tools

Scanning website for vulnerable js libraries. Icon by studiomx

JS Recon Buddy

隐私与安全 / Privacy & Security

Analyze page scripts for bug bounty reconnaissance.

Shodan

隐私与安全 / Privacy & Security

The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open.

Vulners Web Scanner

工作流程与规划 / Workflow & Planning

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

AI 产品解读

Security testing toolkit integrated into Chrome DevTools

Helps developers and security testers capture, analyze, and manipulate HTTP requests, detect security vulnerabilities, and find leaked secrets directly within the browser.

User opens Chrome DevTools, launches the HackTools++ panel, captures HTTP traffic from the active tab, then uses tools like Repeater to edit/replay requests, Scanner to check for vulnerabilities, or Secret Scanner to find leaked credentials in page resources.

目标用户: Web Developers / Security Testers / Penetration Testers / DevOps Engineers

Analysis based on static source code; runtime behavior (e.g., potential future updates adding login) cannot be fully verified.
Minified code made some keyword matching ambiguous, but context was resolved through code inspection.

付费分析

未识别到付费功能

The extension is a free security testing toolkit. The 'Stripe' and 'PayPal' references in the static scan are part of the 'Secret Scanner' feature which detects leaked API keys/tokens (like Stripe secret keys) in source code. There is no checkout flow, subscription gating, or payment integration in the extension itself. The 'pro' keyword match was a false positive from minified code or unrelated context.

置信度: 90
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: The extension operates entirely within Chrome DevTools and uses local storage (chrome.storage.local) for state persistence. There is no code implementing user authentication, session management, or redirection to a login page. Keywords like 'login', 'auth', and 'account' found in the static scan correspond to security testing features (e.g., 'wp-login.php' wordlist, 'Auth Bypass' scan check, JWT/OAuth secret detection) rather than user account requirements.

权限风险

高风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

扩展能力较强：storage、scripting、cookies
主机权限覆盖范围较宽

发布者

Sachin

独立发布者

邮箱: [email protected]
电话: --
地址: --

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

HackTools++

HackTools++ 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

EndPointer

Sputnik

Retire.JS

JS Recon Buddy

Shodan

Vulners Web Scanner