Behind the Curtain EN
DAMcraft · Firefox
A Firefox extension supposed to help you find the backend IP-Address of a website proxied by Cloudflare. Also allows you to gather a lot more information about the website, like querying info from crt.sh, Shodan and more.
<all_urls>),意味着它可以读取你在任意站点的页面内容,包括已登录的页面。这是许多扩展正常工作的必要条件,但也值得你确认来源可信。
截图
简介
Behind the Curtain
A Firefox extension supposed to help you find the backend IP-Address of a website proxied by Cloudflare.
Also allows you to gather a lot more information about the website, like querying info from crt.sh,
Shodan and IP-API.
On top of that, it also allows you to spoof the Host header of the request, which can be useful for pretending to
use a different domain, for example when bypassing some Cloudflare protections.
Credits:
The logo
A big special thank you to Skittles (@skitsy. on Discord, @skitty_skits on Twitter)
for creating the logo for this extension, both the one with Cloudflare enabled and the one with Cloudflare disabled.
MurmurHash3 library
I was reading the Shodan blog on favicons and I thought it would be
interesting to create a browser extension that would hash the favicon of the current page and then search for it on Shodan.
After I started working on this, I checked if someone made a js library for murmurhash3 and I found out that someone
already made a browser extension that does exactly what I wanted to do! The extension is called "favicon-hash-browser-extension",
please check it out here, I only used the library for hashing from it:
https://github.com/michaelknap/favicon-hash-browser-extension/blob/main/src/lib/murmurhash3.js
This was after I did most code. I decided to implement it anyway, as I wanted to add a lot more to my extension anyway
than just hashing the favicon.
Behind the Curtain 是做什么的
Behind the Curtain 是一款面向 Firefox 的开发者工具类扩展,主要用来调试页面、查看样式与请求、测试接口、辅助前端开发。官方对它的介绍是:A Firefox extension supposed to help you find the backend IP-Address of a website proxied by Cloudflare. Also allows you to gather a lot more information about the website, like querying info from crt.sh, Shodan and more.在Firefox 附加组件商店(AMO)上,它当前版本 1.3.2,评分 5(5 人评价),约 166 名用户。
适合什么人用
从功能定位看,Behind the Curtain 更适合前端工程师、测试与需要经常查看页面结构的用户。如果你平时只是偶尔遇到相关需求,用浏览器自带功能也能凑合;但如果这件事每天都发生,装一个专门处理它的扩展通常比手动操作省事得多。需要注意的是它作用于所有网站,装上后建议先观察一两天,确认不影响常用站点的正常使用。
怎么安装 Behind the Curtain
- 打开Firefox 附加组件商店(AMO)上的官方页面;
- 点「添加到浏览器」并确认权限提示;
- 装好后在扩展列表里固定图标,方便随时开关。
本站只做索引与介绍,安装包来自官方商店。如果商店页面提示当前地区不可用,说明该扩展未在你所在区域上架。
常见问题
Behind the Curtain 是免费的吗?
Behind the Curtain 在Firefox 附加组件商店(AMO)免费提供下载。它是浏览器扩展,装上就能直接用,不需要注册账号。
Behind the Curtain 安全吗?
它只申请了 0 项权限,范围比较克制,没有申请「读取所有网站数据」这种大权限。
Behind the Curtain 支持哪些浏览器?
当前收录的版本来自Firefox 附加组件商店(AMO),适用于 Firefox。同一个扩展在其他商店可能有对应版本,但功能与版本号不一定相同。
怎么卸载 Behind the Curtain?
在扩展管理页找到 Behind the Curtain,点移除即可。它在本地保存的设置会一起清掉,不会残留数据。
权限清单 来自 manifest.json 原文
站点访问 2
*://*/*<all_urls>
接口权限 6
activeTabdnsstoragetabswebRequestwebRequestBlocking



