+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [HELP] How do I use Hackbar? (/showthread.php?tid=2923675)
[HELP] How do I use Hackbar? - Klatu - Oct 7, 2012
How do I use Hackbar? I tried XSS and it didn't do anything, so I thought that since Firefox 15 doesn't allow to use Javascript from the URL bar it didn't do anything because of that.After that I tried testing for SQLi vulnerability in websites that I know are vulnerable but it didn't do anything either. I would appreciate it if someone could explain to me how to use Hackbar properly.
* - engrαze - Oct 7, 2012
Do you actually think Hackbar will do all of that for you?
Seriously, go learn manual injections, then we might explain to you how hackbar can make it easier.
* - Klatu - Oct 7, 2012
I already know a few things about doing it manually, I just want to use Hackbar to test for vulnerabilities.
* - Antigen - Oct 7, 2012
Normally install it then press F9 then Hackbar will popup and do what you want that's it. If you don't know what to do after popping up hackbar then you might wanna learn XSS from a tutorial here.
There is a possibility that Antivirus/Firewall may be blocking and rerouting your XSS scripts.
* - VoidEx. - Oct 7, 2012
Wow. Nipples.
Klatu, Hackbar is often used because of its useful feature, namely its HEX, URL encoding options.
It will allow you to search for XSS vulnerabilities by easily breaking up parameters so you can manipulate their values.
Same thing applies for SQLi tests.
From the creator(s) of Hackbar:
https://addons.mozilla.org/en-US/firefox/addon/hackbar/
Quote:This toolbar will help you in testing sql injections, XSS holes and site security. It is NOT a tool for executing standard exploits and it will NOT teach you how to hack a site. Its main purpose is to help a developer do security audits on his code. If you know what your doing, this toolbar will help you do it faster. If you want to learn to find security holes, you can also use this toolbar, but you will probably also need a book, a lot of Google and a brain :)
* - Klatu - Oct 7, 2012
Operater, whenever I try to execute a script Hackbar searches for what I've written in duckduckgo.com. And thanks for the clarification Darkplanner.