# FlashFuzz

> Fast, lightweight, and designed for security engineers who want immediate reconnaissance without leaving the browser. Quickly identify hidden endpoints and potential secrets across all open tabs.

Canonical page: [https://chrome-stats.com/d/flashfuzz?hl=es](https://chrome-stats.com/d/flashfuzz?hl=es)

## Overview

- **ID:** `flashfuzz`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Adem KOUKI
- **Category:** web-development
- **Daily users:** 32
- **Weekly downloads:** 2
- **Version:** 1.2.0
- **Last updated:** 2025-10-25
- **First published:** 2025-10-14
- **Size:** 255 KB
- **Data as of:** 2026-09-07
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/flashfuzz/)
- **Website:** [https://github.com/Ademking/Flashfuzz](https://github.com/Ademking/Flashfuzz)

## Description

FlashFuzz: Fast, lightweight, and designed for security engineers who want immediate reconnaissance without leaving the browser. Quickly identify hidden endpoints and potential secrets across all open tabs.

Features:
- Quickly fuzz URLs in all open tabs to discover hidden endpoints.
- Use custom wordlists or built-in example lists.
- Concurrent requests with configurable batch size.
- Scan JavaScript files loaded in each tab for likely secrets (API keys, tokens, AWS keys, etc.).
- Export findings for further analysis or reporting.
- Lightweight UI for quick runs and detailed results with request/response snapshots.
- Open source and free to use.

Demo: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/a05829a99a6b29361679663a917b84e35c2d404a2828a70535c652794720dc66/https%3A//www.youtube.com/watch%3Fv=hrwVM4qyQMA" rel="nofollow">https://www.youtube.com/watch?v=hrwVM4qyQMA</a>
Github: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/5d1f47f29d9629f919d5f913f49667b562747e0bfcc5221237d172aea9c04510/https%3A//github.com/Ademking/Flashfuzz" rel="nofollow">https://github.com/Ademking/Flashfuzz</a>

## Rankings

- #19,944 — Overall
- #37 — flash
- #42 — adobe flash
- #64 — flashcards
- #117 — identify

## Permissions and access

### Permissions

- `storage`

### Host permissions

- `https://*/*`
- `http://*/*`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [KHackBar](https://chrome-stats.com/d/khackbar) — 15 users, 5.00 / 5
- [DorkMe](https://chrome-stats.com/d/dorkme) — 2 users
- [Jsmon](https://chrome-stats.com/d/jsmon) — 5 users
- [ReconLens - Passive Security Scanner](https://chrome-stats.com/d/reconlens) — 1 users
- [Web Explode](https://chrome-stats.com/d/web-explode) — 18 users, 5.00 / 5
- [KeyFinder](https://chrome-stats.com/d/keyfinder-original) — 17 users
- [Secret Scanner](https://chrome-stats.com/d/secret-scanner) — 1 users
- [bfzf](https://chrome-stats.com/d/bfzf) — 5 users, 4.50 / 5
- [FuzzyTabs](https://chrome-stats.com/d/terrakok-fuzzytabs) — 90 users, 4.75 / 5
- [JS Recon & Secret Scanner](https://chrome-stats.com/d/js-recon-secret-scanner) — 5 users
- [FlashTab](https://chrome-stats.com/d/flashtab)
- [Hack-mate (OSCP)](https://chrome-stats.com/d/hack-mate-oscp) — 4 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/flashfuzz?hl=es)