Mozilla FireFox在其他方面我不知道，但是在漏洞检测方面，真的威力很大的。先介绍一个简单的组建 HackBar。 

HackBar1.6.3小工具包，包含一些常用的工具。(SQL injection,XSS,加密等)，web开发人员可以利用它，快速构建一个http请求，或者用它快速实现某种算法等。跟着小编初步认识一下它吧。

方法/步骤

1.首先安装“火狐浏览器”，自己去百度搜索并安装即可。

2.安装完后，打开火狐浏览器，在工具=》附加组件里搜索“HackBar”并安装，如下图：

3.安装完后，重启一下火狐浏览器才会生效，如下图：

4.重启完后，打开百度，你会发现标签栏处多了一些工具条，它就是HackBar插件，首次打开是开启的，可以通过F9来切换工具条是否显示与隐藏。

5.此工具提供了很多web开发相关的命令，像urlencode,urldecode等常见的命令。

6.此工具为什么叫HackBar，对于web开发人员一看到Hack就眼亮啊。哈哈。小编不做深入示例，懂的，自己去探索。

7.如果想知道更多火狐插件的技巧，请关注我，你的关注是小编写作的动力，请到右上角关注我吧！

官方介绍

A toolbar that helps you find and test SQL injectionsThis toolbar will help you in testing sql injections, XSS holes and site security. It is NOT a tool for executing standard exploits and it will NOT teach you how to hack a site. Its main purpose is to help a developer do security audits on his code. If you know what your doing, this toolbar will help you do it faster. If you want to learn to find security holes, you can also use this toolbar, but you will probably also need a book, a lot of Google and a brain :)


# The advantages are:
- Even the most complicated urls will be readable
- The focus will stay on the textarea, so after executing the url (Ctrl+Enter) you can just go on typing / testing
- The url in textarea is not affected by redirects.
- I tend to use it as a notepad :)
- Useful tools like on the fly uu/url decoding etc.
- All functions work on the currently selected text.
- MD5/SHA1/SHA256 hashing
- MySQL/MS SQL Server/Oracle shortcuts
- XSS useful functions
- And lots more ;) Go test it!


# Shortcuts
- Load url ( Alt + A )
- Split url ( Alt + S )
- Execute ( Alt + X, Ctrl + Enter )
- INT -1 ( Alt - )
- INT +1 ( Alt + )
- HEX -1 ( Ctrl Alt - )
- HEX +1 ( Ctrl + Alt + )
- MD5 Hash ( Alt + M )
- MySQL CHAR() ( Alt + Y )
- MS SQL Server CHAR() ( Alt + Q )