Version 0.6.0
What's new

Access key: pingback.sh now requires an access key to create a listener. Enter your key once in the extension — it's stored locally and sent only to pingback.sh. An in-app link lets you get one if needed.
Smart Scan & Inject, front and center: "Scan page" and "Inject all" are now the extension's main one-click actions.
Context-aware injection: instead of inserting the same payload everywhere, the extension picks the most relevant payload per field (url/redirect → HTTP callback, message/comment → Blind XSS, xml → XXE entity, email → SMTP address, and more). A summary shows exactly what was injected.
Richer DOM detection: each field is analyzed by name, label, type and context with an interest score. Also flags hidden fields, file uploads, iframes, and links carrying SSRF-style parameters.
Injection options: "inject all (smart)", "inject hot fields only", or force a single payload type everywhere.