search

0140454 / hackbar

A browser extension for Penetration Testing
428 stars 62 forks source link

[ Feature Request ] Can HackBar add a switcher that can disable / enable JavaScript? #21

Closed NEX-S closed 1 year ago

NEX-S commented 1 year ago

maybe HackBar can add a switcher that can disable / enable Javascript, this will be very useful because

:rabbit:

0140454 commented 1 year ago

sometimes the js-popup window can block our sight of important info on the page

I think there are some extension have this functionality, and it is out-of-scope.

js might have some harmful behavior such as Leak the pentester's Real IP through Web RTC / honeypot request danger APIs

After thinking, I will not implement because it is required to add some help text to inform user that HackBar insert something into raw response (if in Raw mode).

Bypass some JavaScript check when uploading files / XSS

This may be fulfilled by making Response panel editable so that you can remove related JavaScript check and then render it.

NEX-S commented 1 year ago

got it :smile_cat: