# Sink Hooker

> Hook and monitor DOM, eval, jQuery, and other sinks.

Canonical page: [https://chrome-stats.com/d/sink-hooker](https://chrome-stats.com/d/sink-hooker)

## Overview

- **ID:** `sink-hooker`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** ayadim
- **Category:** web-development
- **Daily users:** 1
- **Version:** 1.0.1
- **Last updated:** 2026-02-03
- **First published:** 2026-02-01
- **Size:** 1.23 MB
- **Data as of:** 2026-09-10
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/sink-hooker/)

## Description

"Sink Hooker" is a browser extension designed for security researchers, penetration testers, and developers to identify potential security vulnerabilities in web applications.

It hooks into common JavaScript "sinks" - functions and properties that can execute or render untrusted data - and logs them to the browser console, including:

• DOM manipulation (innerHTML, outerHTML, document.write)
• JavaScript execution (eval, Function, setTimeout, setInterval)
• jQuery operations (html, append, after, etc.)
• Attribute modifications (href, src, formAction)
• Cookie access and location changes
• Header referrer as source given to a sink
• Session Storage as source data of a sink
• Local Storage as source data of a sink

Perfect for:
- Finding XSS (Cross-Site Scripting) vulnerabilities
- Auditing third-party JavaScript libraries
- Debugging complex web applications
- Understanding how data flows through a website

All monitoring happens locally in your browser - no data is collected or transmitted.

## Rankings

- #122,232 — Overall
- #130 — jquery

## Permissions and access

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [DOMLogger++](https://chrome-stats.com/d/domloggerpp) — 271 users, 5.00 / 5
- [Eval Villain](https://chrome-stats.com/d/eval-villain) — 173 users, 3.67 / 5
- [Tracy](https://chrome-stats.com/d/tracyplugin) — 5 users, 5.00 / 5
- [Jsmon Security Analyzer — Web Security Inspector](https://chrome-stats.com/d/jsmon-extension) — 32 users
- [KHackBar](https://chrome-stats.com/d/khackbar) — 14 users, 5.00 / 5
- [Script Hammer](https://chrome-stats.com/d/script-hammer) — 3 users
- [SurfSafe](https://chrome-stats.com/d/surfsafe) — 1 users
- [DOM XSS Highlighter — Pro](https://chrome-stats.com/d/dom-xss-highlighter-pro) — 4 users
- [Show Data Variables](https://chrome-stats.com/d/show-data-variables) — 3 users
- [Tinker Tester Developer Spy](https://chrome-stats.com/d/tinker-tester-developer-spy) — 2 users, 4.60 / 5
- [Hack-mate (OSCP)](https://chrome-stats.com/d/hack-mate-oscp) — 4 users
- [Endpoint Hunter](https://chrome-stats.com/d/endpoint-hunter) — 11 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/sink-hooker)