Better version of PwnFox

PwnFox is a great tool, but it lacks UX best practices and some minor features. Also it's no longer maintained.

If you are not familiar with PwnFox, check the link above first.

PwnFoxy uses Firefox color names everywhere including headers so you don't need keep asking yourself "Is it turquoise or cyan?" while switching between Burp and Firefox:

Colors on the extension popup now also match visually the colors that Firefox uses to highlight container tabs, it allows also you to see color name and container note if any:

It finally ends "Who the hell is blue? I need to check JWT payload again" problem. Each container now can be configured with X-PwnFoxy-Note additional header that automatically adds a comment to the request in Burp HTTP history. It's good place to add account username/email so you never forget connection between used color and actual account:

And here's a bonus: headers modification. You can add any extra headers to a specific container and also rewrite existing ones. Here's example of the container settings:

{ 
    "color": "turquoise", 
    "note": "student", 
    "headers": [{ "name": "X-PwnFoxy-Custom", "value": "test"}], 
    "matchAndReplace": [{ "match": "^Cookie: .+?(access_token=[^;]+);.+$", "replace": "Cookie: $1;" }], 
}

It adds a new header X-PwnFoxy-Custom: test and cleans Cookie header to contian only access_token cookie.

• Install from https://addons.mozilla.org/en-US/firefox/addon/pwnfoxy/

• Download jar file here - https://github.com/la1n23/PwnFoxy/releases
• Go to the Extensions tab, click Add and select PwnFoxy-$version.jar as a Java extension.

Simply remove or disable PwnFox extensions in FireFox and Burp. No need to recreate the containers — just continue where you left off, but with PwnFoxy.

cd firefox
rm -fr web-ext-artifacts/*
web-ext build
# the zip file is available in /firefox/web-ext-artifacts/pwnfox-${version}.zip
# Optional. If you want to sign you own build
web-ext sign --api-key="$KEY" --api-secret="$SECRET" --channel="unlisted"
# rename
mv firefox/web-ext-artifacts/*.xpi firefox/web-ext-artifacts/$(ls firefox/web-ext-artifacts -1 | grep xpi | perl -pe 's/^\w+\-/pwnfoxy-/')
# the xpi file is available at /firefox/web-ext-artifacts/pwnfox-${version}.xpi

Open and compile with Intellij IDEA (Ctrl+F9)