Web Browser Enumeration Tools

Enumeration can be done through web browser extensions as well. Here are some great examples:

Penetration Testing Kit

This is an extension that can give information on the web sites you are visiting, such as the IP address where the web site is hosted, technologies used to build the web site, and what scripts are running. This tool can also be used when you need to check what happens if you send a SQL injection or XSS attack via the request builder, where you can modify the parameters, execute the request, and check it right in your Chrome browser. Beside that, you can check the OWASP security headers if your web application follows recommendations from OWASP for headers like X-XSS-Protection or X-Content-Type-Options. So, it's not just a web enumeration tool, but, as the name states, also a Pen Testing kit with multiple applications. One use of the Pen Test toolkit is demonstrated in the following Figure 6.

Figure 6: Using Pen Test toolkit...