You cannot execute standard exploits but you can easily use it to test whether or not vulnerability exists. It helps in testing simple SQL injection and XSS holes. Hackbar is a simple penetration tool for Firefox. It’s a very helpful add-on for finding DOM based XSS for security testing professionals. It helps while analyzing JS files to find XSS vulnerabilities. With this tool, you can edit and debug HTML, CSS, and JavaScript live on any webpage to see the effect of changes. It can be used in performing XSS and SQL Injection attacks by modifying header data.įirebug is a nice add-on that integrates a web development tool inside the browser. It helps in security testing web applications by modifying POST parameters. We can alter each request going from our machine to the destination host with this. Tamper data is a great tool to view and modify HTTP/HTTPS headers and post parameters.