# ParamScan

> Passively check for every reflecting parameter in the visiting page.

Canonical page: [https://chrome-stats.com/d/paramscan](https://chrome-stats.com/d/paramscan)

## Overview

- **ID:** `paramscan`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Chiyo
- **Category:** web-development,privacy-security
- **Daily users:** 19
- **Weekly downloads:** 1
- **Rating:** 5.00 / 5 (1 ratings)
- **Version:** 1.0
- **Last updated:** 2024-12-09
- **First published:** 2024-12-09
- **Size:** 42 KB
- **Data as of:** 2026-09-09
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/paramscan/)
- **Website:** [https://github.com/ch1y0w0/ParamScan](https://github.com/ch1y0w0/ParamScan)

## Description

ParamScan is a simple browser extension for web security enthusiasts and pen testers. It helps you find URL parameters in a webpage's source code and check if any of them are reflected on the page. This is super useful for spotting potential XSS vulnerabilities and other security issues.
<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/24a2f66006952e63c031dfce0671964cc5d8959924872476eb93ad11153691ae/https%3A//github.com/ch1y0w0/ParamScan" rel="nofollow">https://github.com/ch1y0w0/ParamScan</a>
ParamScan is for educational and research purposes only. Use it responsibly and only on websites or systems you have permission to test. Unauthorized testing can be illegal.
Note: ParamScan is still in its early stages so bugs and missing features are normal. If you found any bug or if you have ideas for making ParamScan more useful, feel free to open an issue or contact me via X!

## Rankings

- #25,001 — Overall
- #23 — scan

## Permissions and access

### Permissions

- `activeTab`
- `storage`
- `tabs`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Low risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Add‑Param](https://chrome-stats.com/d/add-param) — 4 users, 5.00 / 5
- [URL Security Scanner](https://chrome-stats.com/d/url-security-scanner) — 1 users
- [Secret Scanner](https://chrome-stats.com/d/secret-scanner) — 2 users
- [Endpoint Hunter](https://chrome-stats.com/d/endpoint-hunter) — 10 users
- [Secret Scanner](https://chrome-stats.com/d/secret_scanner) — 37 users
- [PRISM](https://chrome-stats.com/d/prism-secret-scanner) — 5 users
- [urlscan.io](https://chrome-stats.com/d/urlscan-io) — 36 users
- [JS Recon Buddy](https://chrome-stats.com/d/js-recon-buddy) — 161 users, 5.00 / 5
- [Params Editor](https://chrome-stats.com/d/params-editor) — 2 users, 2.00 / 5
- [SecuriScan – Web Analyzer](https://chrome-stats.com/d/securiscan-web-analyzer) — 2 users
- [Quick Probe](https://chrome-stats.com/d/quick-probe)
- [Security Pattern Scanner](https://chrome-stats.com/d/security-pattern-scanner) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/paramscan)