🔍 DIRFOX - Endpoint Fuzzer for Pentesters

A lightweight browser extension to discover hidden endpoints using custom or GitHub-hosted wordlists.
Built for penetration testers, bug bounty hunters, and cybersecurity researchers.

Coming Soon: Available at

---

✨ Features

• 🌐 Fuzz endpoints on the currently active tab
• 📁 Use custom wordlists or pull from GitHub
• ⚙️ Real-time scanning with status codes
• 📊 Live progress bar and scan counter (e.g., 123/5000)
• 💾 Stores scan history locally
• ⏸ Stop and resume scan even after popup is closed
• 🧼 Clear scan history with a single click
• 💡 Minimal, macOS-style UI (iOS aesthetic)
• 🔄 Fullscreen scan mode support
• ☕ Integrated Ko-fi floating widget on history.html for donations

---

🛠️ How to Use

1. Install the extension (load unpacked on Chrome/Edge)
2. Click the DIRFOX icon to open the popup
3. Enter target domain and start scanning
4. View live results with HTTP 200 responses
5. Switch to fullscreen or view scan history

---

📦 Installation

1. Open Chrome/Edge → chrome://extensions/
2. Enable Developer mode
3. Click Load unpacked
4. Select the dirfox/ directory

---

🔐 Privacy & Security

• All data is stored locally on the user's browser
• No external tracking or telemetry
• No data is ever sent to third-party servers
• Wordlists from GitHub are fetched directly from public repositories when used

---

🧪 Development

Pull requests are welcome! If you’d like to contribute:

1. Fork this repo
2. Create a feature branch
3. Submit a pull request

---

📜 License

MIT License © 2025 Muhammad Fazriansyah