Some of the most used tools for assessing web applications are not so big, They are just extensions, plugins, or add-ons installed in web browsers. We will have a look at some of them.
In some bug bounties, it is important to check applications from different geolocalizations, so it is possible to configure a public or private VPN in FoxyProxy (https://addons.mozilla.org/es/firefox/addon/foxyproxy-standard/). A Firefox extension is used to switch between different proxy servers, as shown in the following screenshot:
There are applications that work differently depending on the web browser and devices from which they are opened. It is not possible to have all browsers, versions, and devices to test them. But, all of them are identified by a parameter included in the HTTP request, named the user agent. This User Agent parameter can be switched directly in the HTTP request using an HTTP proxy, but to make our lives easier, it is possible to use User-Agent...