dirfox

🔍 DIRFOX - Endpoint Fuzzer for Pentesters

A lightweight browser extension to discover hidden endpoints using custom or GitHub-hosted wordlists.
Built for penetration testers, bug bounty hunters, and cybersecurity researchers.

Coming Soon: Available at

✨ Features

🌐 Fuzz endpoints on the currently active tab
📁 Use custom wordlists or pull from GitHub
⚙️ Real-time scanning with status codes
📊 Live progress bar and scan counter (e.g., 123/5000)
💾 Stores scan history locally
⏸ Stop and resume scan even after popup is closed
🧼 Clear scan history with a single click
💡 Minimal, macOS-style UI (iOS aesthetic)
🔄 Fullscreen scan mode support
☕ Integrated Ko-fi floating widget on history.html for donations

🛠️ How to Use

Install the extension (load unpacked on Chrome/Edge)
Click the DIRFOX icon to open the popup
Enter target domain and start scanning
View live results with HTTP 200 responses
Switch to fullscreen or view scan history

📦 Installation

Open Chrome/Edge → chrome://extensions/
Enable Developer mode
Click Load unpacked
Select the dirfox/ directory

🔐 Privacy & Security

All data is stored locally on the user’s browser
No external tracking or telemetry
No data is ever sent to third-party servers
Wordlists from GitHub are fetched directly from public repositories when used

🧪 Development

Pull requests are welcome! If you’d like to contribute:

Fork this repo
Create a feature branch
Submit a pull request