Pingback.sh Helper by Pingback.sh Helper
Pingback.sh helper for bug bounty hunters: generate OOB listeners, inject payloads, scan forms, detect parameters, and receive quiet hit notifications, accelerate bug bounty testing directly from Firefox.
Extension Metadata
Screenshots
About this extension
Pingback.sh Helper is a Firefox extension designed for bug bounty hunters, penetration testers, and security researchers.
It streamlines out-of-band testing workflows by providing instant access to Pingback.sh listeners directly from the browser.
Features:
✓ Generate Pingback listeners in one click
✓ Copy ready-to-use HTTP, DNS, Blind XSS, XXE, SVG and SSRF payloads
✓ Monitor callbacks without leaving Firefox
✓ Receive notifications when new hits are detected
✓ Automatic target labeling based on the current domain
✓ Form discovery and testing helpers
✓ Quick access to the Pingback.sh dashboard
✓ Lightweight, privacy-friendly and easy to use
The extension stores listener information locally in the browser and communicates exclusively with the Pingback.sh API.
No browsing history, credentials, passwords, or personal information are collected.
Ideal for:
• Blind XSS testing
• SSRF validation
• XXE exploitation verification
• Webhook testing
• Out-of-band vulnerability research
Website: https://pingback.sh
Source and documentation: https://pingback.sh/docs
It streamlines out-of-band testing workflows by providing instant access to Pingback.sh listeners directly from the browser.
Features:
✓ Generate Pingback listeners in one click
✓ Copy ready-to-use HTTP, DNS, Blind XSS, XXE, SVG and SSRF payloads
✓ Monitor callbacks without leaving Firefox
✓ Receive notifications when new hits are detected
✓ Automatic target labeling based on the current domain
✓ Form discovery and testing helpers
✓ Quick access to the Pingback.sh dashboard
✓ Lightweight, privacy-friendly and easy to use
The extension stores listener information locally in the browser and communicates exclusively with the Pingback.sh API.
No browsing history, credentials, passwords, or personal information are collected.
Ideal for:
• Blind XSS testing
• SSRF validation
• XXE exploitation verification
• Webhook testing
• Out-of-band vulnerability research
Website: https://pingback.sh
Source and documentation: https://pingback.sh/docs
Rated 0 by 0 reviewers
Permissions and data
Required permissions:
- Input data to the clipboard
- Display notifications to you
- Access browser tabs
- Access your data for all websites
Data collection:
- The developer says this extension doesn't require data collection.
More information
- Add-on Links
- Version
- 0.6.0
- Size
- 36.47 KB
- Last updated
- 13 days ago (Jun 2, 2026)
- Related Categories
- License
- MIT License
- Privacy Policy
- Read the privacy policy for this add-on
- Version History
- Add to collection