Fransyfox 제작자: 0xmoose
Fransyfox — postMessage transceiver for security researchers. Intercept, track, analyze, splice, and replay cross-frame postMessage traffic.
Android™용 Firefox에서 사용 가능Android™용 Firefox에서 사용 가능
Android용 Firefox에서 이 확장 기능을 열려면 QR 코드를 스캔하세요
확장 메타 데이터
스크린샷
정보
Fransyfox watches postMessage traffic on every web page you visit. It detects postMessage listeners registered across all frames and origins, shows their source code and stack traces, captures cross-frame messages, and lets you filter, splice, and replay them.
Built for bug bounty hunters and client-side security researchers.
Features:
• Listener detection — monitors every postMessage listener registered via addEventListener/onmessage across all frames. Shows source code, stack traces, and frame hops. Unwraps wrappers (jQuery, Sentry, Raven, NewRelic, Rollbar, Bugsnag, Zone.js, Vue, React, and more).
• Message interception — captures window and MessagePort traffic with origin, source/target frame, payload, and timing.
• Findings engine — rule-based analysis flags risky listeners (innerHTML, eval, location.href, missing origin checks, etc.) ranked by severity.
• Match & Replace — live regex splicing of postMessage payloads in both directions. Intercept and rewrite messages as they fly.
• Composer — craft and send your own postMessage payloads into any frame.
• Map / Timeline — frame-tree graph and message timeline views.
• Filtering & blocking — block noisy or trusted listeners by code, URL, or regex.
• Deduplication — identical listeners from the same source are collapsed.
• Syntax highlighting & prettify — highlight.js with custom color rules and code beautify.
• Import/export — blocked lists, listeners, messages, and findings as JSON.
• External logging — forward detected listeners to your own endpoint.
Named in honor of Frans Rosén and his original postMessage-tracker. Spiritual successor to postMessage-tracker → FancyTracker → FransyTracker → Fransyfox.
Source code: https://github.com/GangGreenTemperTatum/Fransyfox
License: MIT
Built for bug bounty hunters and client-side security researchers.
Features:
• Listener detection — monitors every postMessage listener registered via addEventListener/onmessage across all frames. Shows source code, stack traces, and frame hops. Unwraps wrappers (jQuery, Sentry, Raven, NewRelic, Rollbar, Bugsnag, Zone.js, Vue, React, and more).
• Message interception — captures window and MessagePort traffic with origin, source/target frame, payload, and timing.
• Findings engine — rule-based analysis flags risky listeners (innerHTML, eval, location.href, missing origin checks, etc.) ranked by severity.
• Match & Replace — live regex splicing of postMessage payloads in both directions. Intercept and rewrite messages as they fly.
• Composer — craft and send your own postMessage payloads into any frame.
• Map / Timeline — frame-tree graph and message timeline views.
• Filtering & blocking — block noisy or trusted listeners by code, URL, or regex.
• Deduplication — identical listeners from the same source are collapsed.
• Syntax highlighting & prettify — highlight.js with custom color rules and code beautify.
• Import/export — blocked lists, listeners, messages, and findings as JSON.
• External logging — forward detected listeners to your own endpoint.
Named in honor of Frans Rosén and his original postMessage-tracker. Spiritual successor to postMessage-tracker → FancyTracker → FransyTracker → Fransyfox.
Source code: https://github.com/GangGreenTemperTatum/Fransyfox
License: MIT
리뷰어 0명이 0점으로 평가함
권한 및 데이터
필수 권한:
- 열려있는 탭의 데이터에 접근하도록 개발자 도구 확장
- 브라우저 탭에 접근
- 탐색 중 브라우저 활동에 접근
선택적 권한:
- 모든 웹사이트에서 사용자의 데이터에 접근
데이터 수집:
- 개발자는 이 확장 기능이 데이터 수집을 요구하지 않는다고 밝히고 있습니다.
추가 정보