7. Add custom web tools
You can add new tools using the dedicated page accessible in the options section as shown in the image below.
You can add web resources that are not included in FoxyRecon or internal tools not exposed on the Internet.
To add a new tool click on the “Add Tool” button and enter the relevant information inside the form.
Below is the list of fields describing a web resource:
- Name: The tool's name. This field is mandatory and cannot be changed once the resource is created.
- Description: A short description of the tool.
- Icon: The tool's icon. This field is mandatory. A 32x32 png icon is recommended.
- Color: The color to paint the tool's button in the FoxyRecon popup.
- URL(s): URL(s) pointing to the resource (mandatory).
- Tag(s): Tag(s) describing the tool. They can be used for filtering.
Before adding the URLs, it is necessary to determine which types of indicators are accepted by the web resource that you are adding. If the tool you want to add accepts multiple indicator types, you need to provide a URL for each supported indicator type. Note that there may be different URLs pointing to the same web resource, depending on the type of indicator to submit. There are two cases depending on the HTTP method supported by the web resource.
If the web resource accepts GET requests, the indicators can be submitted by URL (e.g.: https://example.com/search?indicator=8.8.8.8). To this end, FoxyRecon uses the placeholder %s that will be replaced with the indicator under analysis. Therefore, taking the previous example further, you need to provide the following URL: https://example.com/search?indicator=%s.
If the web resource does not accept GET requests, the indicators cannot be submitted by URL, as the resource accepts only POST requests. For these cases, FoxyRecon provides the autofill feature that tries to enter the indicators in the input field on the web resource's page and click the button to submit the indicator. To this end, FoxyRecon needs the following information:
- Input field CSS selector: The CSS selector of the input field located on the page of the web resource (mandatory).
- Submit button CSS selector: The CSS selector of the submit button located on the page of the web resource.
FoxyRecon provides some templates to help speed up the addition of internal tools. Templates are meant so that you only have to provide the hostname of the platform to add to FoxyRecon. Currently, FoxyRecon provides templates for the following open source platforms:
If you deem that a tool is worth to be included in FoxyRecon, please open an issue on the GitHub repository.