Item logo image for FlashFuzz

FlashFuzz

5.0(

2 ratings

)
Item media 4 (screenshot) for FlashFuzz
Item video thumbnail
Item media 2 (screenshot) for FlashFuzz
Item media 3 (screenshot) for FlashFuzz
Item media 4 (screenshot) for FlashFuzz
Item video thumbnail
Item video thumbnail
Item media 2 (screenshot) for FlashFuzz
Item media 3 (screenshot) for FlashFuzz
Item media 4 (screenshot) for FlashFuzz

Overview

Rapid URL fuzzing & secret scanning, right in your browser

A Browser Extension for Quick URL Fuzzing and Secret Scanning Fast, lightweight, and designed for security engineers who want immediate reconnaissance without leaving the browser. Quickly identify hidden endpoints and potential secrets across all open tabs. Features - Quickly fuzz URLs in all open tabs to discover hidden endpoints. - Use custom wordlists or built-in example lists. - Concurrent requests with configurable batch size. - Scan JavaScript files loaded in each tab for likely secrets (API keys, tokens, AWS keys, etc.). - Export findings for further analysis or reporting. - Lightweight UI for quick runs and detailed results with request/response snapshots. - Open source and free to use. Demo: Github: https://github.com/Ademking/Flashfuzz

Details

  • Version
    1.2.0
  • Updated
    October 24, 2025
  • Offered by
    Adem Kouki
  • Size
    247KiB
  • Languages
    English (United States)
  • Developer
    Email
    ademkingnew@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Support

Related

SecuriScanX

5.0

Harden your input points - detect SQLi, XSS & CMDi within seconds.

LPR - Ultimate Recon & Bug Hunting Tool

5.0

Stop manually searching source code. Start hunting. LPR (Live Params & Redirects) is an all-in-one reconnaissance and…

HackBar

4.2

A browser extension for Penetration Testing

EndPointer

5.0

An endpoint parser and extractor with many flexible features

Subdomain Finder - Find Hidden Subdomains

5.0

The best Subdomain Finder tool for bug bounty hunters and security researchers. Find hidden subdomains quickly and easily.

Pathprobe

5.0

Asychronous multi-domain directory scanner

JS Recon Buddy

5.0

Analyze page scripts for bug bounty reconnaissance.

JSner - Endpoint Extractor

0.0

Advanced endpoint scanner with verification. Extract and test API endpoints, GraphQL queries, and more from any website.

DOM XSS Highlighter — Pro

0.0

Highlights user-controlled reflections in DOM to help detect risky contexts. Run only on sites you own or may test.

OWASP Penetration Testing Kit

4.8

OWASP Penetration Testing Kit

Wayback Recon Pro

5.0

Reconnaissance toolkit for Wayback Machine archives. Extract URLs, subdomains, parameters, and sensitive files.

S3BucketList

3.5

S3BucketList automatically scans network requests made by your browser to detect Amazon S3 bucket URLs

SecuriScanX

5.0

Harden your input points - detect SQLi, XSS & CMDi within seconds.

LPR - Ultimate Recon & Bug Hunting Tool

5.0

Stop manually searching source code. Start hunting. LPR (Live Params & Redirects) is an all-in-one reconnaissance and…

HackBar

4.2

A browser extension for Penetration Testing

EndPointer

5.0

An endpoint parser and extractor with many flexible features

Subdomain Finder - Find Hidden Subdomains

5.0

The best Subdomain Finder tool for bug bounty hunters and security researchers. Find hidden subdomains quickly and easily.

Pathprobe

5.0

Asychronous multi-domain directory scanner

JS Recon Buddy

5.0

Analyze page scripts for bug bounty reconnaissance.

JSner - Endpoint Extractor

0.0

Advanced endpoint scanner with verification. Extract and test API endpoints, GraphQL queries, and more from any website.

Google apps