🦅 Hx0鹰眼 - 全栈式轻量抓包与 AI 安全审计扩展（V1.0.5）

离线安装指南

本次 v1.0.5 版本在 v1.0.4（油猴脚本、AI 调脚本、拦截可靠性、Firefox 对齐）基础上，重点升级 AI 任务台 与 Skills 知识库，并补齐 高级编解码 / 智能解码 能力。一句话：任务过程更可读、知识可 AI 生成、编解码与报告更专业。

🚀 主要更新

🧠 1. AI 任务台全面升级（本版核心）

v1.0.5 把 AI 任务台从「能跑任务」升级为 可读、可追、可交互的专业工作台——执行过程与最终报告分开呈现，工具调用、真实测试、阶段推进一目了然。

核心能力

执行日志 → 时间轴卡片流：阶段 / AI / 测试 / 工具调用 / 警告分色展示；工具调用可展开 JSON；测试胶囊嵌在日志中可点开看包；
日志与报告左右分栏，中间分隔条可拖拽调整宽度；
任务背景 AI 理解：启动前解析「仅测试 / 禁止 / 偏好」等策略，约束后续 payload 与工具选择；
报告增强：输出漏洞清单 + 请求/响应证据，减少空泛结论；
内置 crypto.logic.analyze（加密逻辑研判）与 codec.transform（AES/DES/RSA/SM 等高级编解码），与重放台能力对齐。

适用场景

授权渗透：需要看清 AI 每一步做了什么、测了哪些包、得出什么证据；
CTF / 加密题：任务中自动研判 sign/token、编解码验证，并在报告里留证据链；
长任务复盘：时间轴日志便于回溯「卡在哪一步、调了哪些工具」。

简单理解

以前 AI 任务日志像大段纯文本，现在像 可扫读的时间轴工作台。
左边看过程，右边看报告，中间还能拖——任务跑起来，心里更有数。

📚 2. Skills 知识库加厚 + AI 生成技能

v1.0.5 在 v1.0.4 Skills 基础上 大幅加厚内置知识，并新增 AI 生成技能，让知识库不仅能读，还能自己长。

核心能力

内置子模块扩容至 渗透 19 + CTF 28（含 js-reverse、ai-site-workflow、misc-encoding、AI 赛道 4 模块等）；
每个主 Skill 新增 「智能启用」 开关：控制任务中途是否动态追加子模块；
AI 生成技能（专业版）：自然语言生成单个 Skill 或技能集合（2–6 个），可保存为独立 Skill、内置库子模块，或追加到已有导入 Skill。

适用场景

团队沉淀测试方法论：把常用流程写成 Skill，任务启动时一键注入；
遇到新题型 / 新漏洞类型：用 AI 快速生成专题 Skill 或子模块，再导出备份；
CTF 多方向切换：按需勾选渗透 / CTF 子模块，任务中途智能追加相关知识。

简单理解

Skills 是 AI 的「作战手册」；v1.0.5 手册更厚，还能用 AI 自己写新章节。
内置库够广，临时场景也能 AI 生成补丁知识，不必从零手搓 Markdown。

🔐 3. 编解码能力补齐

v1.0.5 把 重放台、AI 任务、页面脚本 的编解码能力打通，轻量解码与高级加解密各就其位。

核心能力

重放台：补齐 AES / DES / RSA / SM 与智能套娃解码；
内置脚本「智能解码助手」（默认启用）：网页选中文本即弹出解码面板，自动尝试 Hex / Base64 / Base32 / URL / ROT13 等，识别 MD5 / SHA 等哈希；
高级 AES / 套娃等仍走重放台或详情内联「加密&编码」，与 AI 任务 codec.transform 能力对齐。

适用场景

CTF misc / 流量题：选中密文快速试解码，复杂链路再进重放台或 AI 任务；
渗透测试：响应里混编 base64、JWT、自定义加密，边抓边解；
日常浏览：看到可疑字符串，选中即解，不必切工具站。

简单理解

选中即解 交给智能解码助手；AES / RSA / 套娃 交给重放台和 AI 任务。
轻活轻做，重活有专业链路，编解码不再来回跳窗口。

🛠 4. 体验优化与问题修复

v1.0.5 继续打磨 Chrome / Firefox 双端 日常体验，修复若干系统问题，优化交互与提示。

优化重点

修复拦截、抓包、侧栏、脚本与设置联动上的若干系统问题，日常操作更稳定；
优化 拦截 / 调试模式 / 被动监听 等开关联动，减少误提示与状态不同步；
改进侧栏、详情页与设置页的 交互与提示文案，降低上手成本；
用户手册同步至 v1.0.5，补充 AI 任务、Skills、内置脚本等使用说明。

适用场景

从 v1.0.4 升级后日常抓包、拦截、改包、AI 任务；
双端切换使用、希望操作习惯一致的用户；
需要查阅新版功能说明的新手与老用户。

简单理解

这一版在 大功能 之外，也花时间把 用着顺不顺、提示清不清楚 修了一遍。
升级后建议重新加载扩展，并扫一眼新版用户手册。

🧬 版本能力回顾

v1.0.5 是在 v1.0.4 能力基础上的增强版本，以下核心能力继续保留并扩展：

HTTP / WebSocket 抓包
HTTP / WebSocket 帧重放
WebSocket 微型 Fuzz
HTTP 与 WebSocket 帧级拦截
油猴脚本 / 页面脚本工作台（专业版）
AI 任务智能脚本调用（专业版）
AI 任务台时间轴日志 + 可拖拽分栏（v1.0.5 增强）
AI 生成技能（v1.0.5 新增，专业版）
AI Task Console + Skills 知识库（渗透 19 + CTF 28 子模块）
任务背景 AI 理解 / 智能启用子模块（v1.0.5 增强）
高级编解码 + 智能解码助手（v1.0.5 增强）
运行中补充线索
社区版拦截模式
敏感信息识别
暗链与静态威胁检测
批量 AI 分析
编解码与哈希工具
在线激活 + 离线激活码（可组合使用）
中文 / English 界面切换

一句话总结：

v1.0.5 的重点是：AI 任务更好读、Skills 能 AI 生成、编解码更完整——把自动化测试的「过程、知识、工具链」再往前推一步。

🔄 从 v1.0.4 升级提醒

Chrome / Edge：用新版 .zip 解压内容 覆盖原目录，在扩展管理页点击刷新即可；尽量不要删除重装或更换目录。
Firefox：升级后请重新加载一次扩展；若使用临时加载方式，浏览器重启后需重新载入。
AI 任务 / Skills：首次使用「AI 生成技能」或新版时间轴日志，建议先阅读用户手册 §10 / §16。
智能解码助手：默认启用；若不需要选区弹窗，可在侧栏脚本页关闭或改为手动执行。

⚠️ 安装说明

由于本工具涉及：

底层网络抓包
请求拦截与修改
流量重放
微型 Fuzz
AI 安全分析

因此目前暂未在官方插件商店上架，包括 Chrome / Firefox 官方插件商店中的英文版本也暂未上线。

请根据您日常使用的浏览器，参考下方兼容性表格与安装步骤进行离线安装。

文件名以实际发布包为准，下方以 V1.0.5 正式版命名作为示例。

📦 重要安装与升级提醒

为保证插件可以长期稳定使用，强烈建议大家优先使用 .zip 压缩包解压后进行安装，不要直接使用单个 .crx / .xpi 文件作为主要安装方式。

目前 Hx0 鹰眼尚未在官方插件商店上架，部分浏览器对未上架插件、单包插件或非商店来源插件会有更严格的限制。尤其在 Chrome / Chromium 系浏览器中，直接安装单个 .crx 文件可能会出现：

插件被浏览器自动禁用；
重启浏览器后插件失效；
升级后原插件识别状态变化；
本地缓存、授权状态或会员权益识别异常。

因此推荐使用以下方式：

下载 .zip 压缩包 → 解压到固定目录 → 在扩展管理页加载解压后的文件夹。

升级新版本时，也建议使用新版压缩包解压后，覆盖原来的插件目录，然后回到扩展管理页面刷新插件或重新加载插件。

这样可以尽量保持插件目录、扩展识别信息和本地缓存的一致性，避免因为删除重装、路径变化或单包安装导致会员权益、授权状态、历史配置等信息丢失。

简单来说：

首次安装用 ZIP，升级版本用 ZIP 覆盖原目录。不要频繁删除重装，也不要随意移动插件文件夹。

📊 浏览器兼容性与推荐安装方式总览

浏览器类型	推荐安装方式	优点（Pros）	缺点 / 注意事项（Cons）
Microsoft Edge	ZIP 解压后加载文件夹	稳定性更好，适合长期使用和后续覆盖升级	需要开启“开发人员模式”；不要删除或移动插件目录
360极速 / QQ / 搜狗	ZIP 解压后加载文件夹	兼容性较好，便于保留本地配置和会员权益	不同浏览器扩展页面入口略有差异
Google Chrome	ZIP 解压后加载文件夹	安装后可长期使用，适合覆盖升级	不能删除或移动该文件夹；部分版本启动时会提示“停用开发者模式”
Firefox（开发者版 / ESR）	安装 `.xpi` 或临时加载解压文件夹	可用于长期测试，体验与正式扩展接近	需修改 `about:config` 底层配置；普通版不支持未签名插件永久安装
Firefox（普通正式版）	临时加载解压后的文件夹	支持所有火狐版本，无需修改高级配置	浏览器重启后插件会消失，需要重新加载

🚀 详细安装步骤

1️⃣ Microsoft Edge / 360极速 / QQ / 搜狗浏览器（推荐 ⭐⭐⭐⭐⭐）

对于 Edge、360极速、QQ、搜狗等 Chromium 系浏览器，推荐使用 ZIP 解压后加载文件夹 的方式安装。

这种方式更适合长期使用，也更适合后续版本升级。升级时只需要将新版压缩包解压后覆盖原目录，再刷新插件即可，尽量避免因删除重装或单包安装导致授权状态、会员权益、历史配置识别异常。

安装步骤

① 下载并解压插件压缩包

下载 Chrome / Chromium 版本发布包，例如：

Hx0-HawkEye-Chrome-V1.0.5-Official.Release.zip

解压后得到文件夹，例如：

Hx0-HawkEye-Chrome-V1.0.5-Official.Release

建议将插件目录放在固定位置，例如：

D:\Tools\Hx0-Extension\Hx0-HawkEye-Chrome-V1.0.5-Official.Release\

注意：后续不要删除或随意移动该文件夹，否则浏览器可能无法找到插件文件，也可能影响本地配置、授权状态或会员权益识别。

② 打开扩展管理页面

Edge
```
edge://extensions/
```
360极速
```
chrome://extensions/
```
QQ浏览器
```
qqbrowser://extensions/
```
搜狗浏览器
```
se://extensions/
```

③ 开启开发者模式

Edge 中名称为「开发人员模式」。

通常位于页面：

左下角
或右上角

④ 加载解压后的插件文件夹

点击：

加载已解压的扩展程序 / 加载解压缩的扩展 / 加载已解压的插件

选择刚才解压后的插件文件夹：

Hx0-HawkEye-Chrome-V1.0.5-Official.Release

完成安装后，建议将 Hx0 鹰眼固定到浏览器右上角工具栏。

⑤ 后续升级方式

升级新版本时，推荐按以下方式操作：

下载新版 .zip 压缩包；
解压新版文件；
用新版文件覆盖原来的插件目录；
回到扩展管理页面；
点击插件卡片上的刷新按钮，或关闭浏览器后重新打开。

不建议直接删除旧插件后重新安装，也不建议频繁更换插件目录。这样可以尽量减少会员权益、授权状态、本地配置或历史记录丢失的风险。

2️⃣ Google Chrome 谷歌浏览器

由于 Chrome 官方对非应用商店的 .crx 文件会进行严格拦截，强行安装后可能会被自动禁用，因此 Chrome 用户尤其推荐使用：

✅ ZIP 解压后加载文件夹方式

安装步骤

① 解压插件

下载并解压插件压缩包：

Hx0-HawkEye-Chrome-V1.0.5-Official.Release.zip

得到文件夹：

Hx0-HawkEye-Chrome-V1.0.5-Official.Release

建议放置在固定目录，例如：

D:\Tools\Hx0-Extension\

注意：后续不要删除或移动该文件夹，否则 Chrome 会找不到扩展文件，也可能影响本地配置、授权状态或会员权益识别。

② 打开扩展页面

chrome://extensions/

③ 开启开发者模式

位于页面右上角。

④ 加载扩展

点击：

加载已解压的扩展程序

选择刚才解压后的文件夹。

⑤ 完成安装

安装成功后，建议固定至右上角工具栏。

若 Chrome 启动时提示：

「请停用以开发者模式运行的扩展」

直接关闭即可，不影响正常抓包与使用。

⑥ Chrome 升级提醒

升级 Chrome 版本插件时，建议使用新版 .zip 解压后的内容 覆盖原插件目录，然后在 chrome://extensions/ 页面点击刷新。

请尽量避免：

删除旧插件后重新安装；
把插件目录换到其他路径；
直接拖拽单个 .crx 文件安装；
同时安装多个不同目录的 Hx0 鹰眼版本。

这些操作可能导致浏览器重新识别插件，从而影响本地缓存、授权状态、会员权益或历史配置。

3️⃣ Mozilla Firefox 火狐浏览器

火狐对扩展签名有强制要求。

普通正式版无法永久安装未签名插件，推荐安全从业者使用：

Firefox Developer Edition（开发者版）
Firefox ESR

对于 Firefox 用户，请优先使用官方发布包中对应的 Firefox 版本文件。若使用解压目录临时加载，请不要删除或移动目录；若后续升级，也建议尽量保持同一目录结构，避免重复删除重装。

🅰️ 方案 A：永久安装（推荐）

① 打开配置页面

地址栏输入：

about:config

接受风险提示。

② 关闭签名验证

搜索：

xpinstall.signatures.required

双击修改为：

false

③ 打开扩展页面

about:addons

④ 安装插件

点击右上角：

⚙️ → 从文件安装附加组件

选择 Firefox 版本发布包：

Hx0-HawkEye-Firefox-V1.0.5-Official.Release.xpi

并确认添加。

如果您使用的是压缩包版本，请先完整解压到固定目录，再根据发布包内说明选择 .xpi 文件或临时加载 manifest.json。

🅱️ 方案 B：临时加载（支持所有版本，但重启即失效）

如果您只有普通版 Firefox，且急需进行一次抓包分析，可以使用此方法。

① 打开调试页面

about:debugging

② 点击：

此 Firefox

③ 临时加载插件

点击：

临时载入附加组件...

④ 选择 manifest.json

进入 Firefox 版本解压目录：

Hx0-HawkEye-Firefox-V1.0.5-Official.Release

选择：

manifest.json

即可完成加载。

⚠️ 注意：

浏览器关闭后插件会自动失效，需要重新加载。

🧠 使用建议

社区版适合

日常抓包；
查看请求与响应；
基础重放；
基础编解码；
HTTP / WebSocket 基础观测；
拦截、改包、放行等基础验证。

专业版适合

页面内重放；
HTTP / WebSocket 微型 Fuzz；
油猴脚本 / 页面脚本工作台；
AI 任务智能脚本调用；
AI 任务时间轴日志与专业报告；
AI 生成技能；
AI 单包分析；
批量 AI 分析；
AI 任务台 + Skills 知识库；
高级编解码 / 智能解码助手；
暗链与静态威胁检测；
批量导出、批量重放、批量暗链检测；
更完整的自动化安全分析流程。

⚖️ 免责声明

本工具仅供：

安全研究
研发联调
CTF 练习
已授权的安全测试

请勿用于未授权目标。

使用抓包、拦截、重放、Fuzz、AI 分析等能力时，请确保您已获得目标系统授权，并遵守所在地法律法规、公司制度与数据合规要求。

🦅 Hx0 HawkEye - Lightweight Full-Stack Packet Capture & AI Security Auditing Extension (V1.0.5)

Offline Installation Guide

This v1.0.5 release builds on v1.0.4 (Tampermonkey scripts, AI script dispatch, capture / intercept reliability, Firefox alignment) with major upgrades to the AI Task Console and Skills knowledge base, plus advanced codec / smart decode capabilities. In one sentence: more readable task runs, AI-generated skills, and more professional codec and reporting workflows.

🚀 Main Updates

🧠 1. AI Task Console Overhaul (Core Release)

v1.0.5 turns the AI Task Console into a readable, traceable, interactive workspace — execution timeline and final report side by side, with tool calls, real tests, and stage progress clearly visible.

Key Capabilities

Execution log → timeline card stream: color-coded stage / AI / test / tool-call / warning cards; expandable tool JSON; test capsules embedded in the log;
Draggable split between log and report panes;
Task background AI understanding: parses scope constraints such as “test only / do not test” before the run starts;
Richer reports: vulnerability inventory plus request/response evidence;
Built-in crypto.logic.analyze and codec.transform (AES/DES/RSA/SM and more), aligned with the replay workbench.

Typical Use Cases

Authorized pentest: see exactly what AI did, which packets were tested, and what evidence was collected;
CTF / crypto challenges: analyze sign/token logic and verify codecs inside the task loop;
Long-run review: timeline logs make it easy to see where a task stalled and which tools were called.

Simple Explanation

AI task logs used to feel like walls of text. Now they read like a scannable timeline workspace.
Process on the left, report on the right, draggable split in the middle — much easier to follow.

📚 2. Thicker Skills Library + AI Generate Skill

v1.0.5 expands built-in knowledge on top of v1.0.4 Skills and adds AI Generate Skill so your library can grow on demand.

Key Capabilities

Built-in sub-modules expanded to 19 pentest + 28 CTF topics (js-reverse, ai-site-workflow, misc-encoding, four AI-track modules, and more);
Smart Enable toggle per main Skill: control mid-task dynamic sub-module injection;
AI Generate Skill (Pro): natural-language generation of a single skill or a collection (2–6 modules); save as standalone Skill, built-in sub-module, or append to an imported skill.

Typical Use Cases

Team playbooks: turn recurring workflows into Skills and inject them at task start;
New vuln types or challenge styles: quickly draft a Skill or sub-module with AI, then export for reuse;
Multi-track CTF: pick pentest / CTF modules as needed and let Smart Enable add more knowledge mid-task.

Simple Explanation

Skills are the AI’s playbook. v1.0.5 makes the playbook thicker and lets AI write new chapters.
Built-ins cover more ground; ad-hoc topics can be generated without hand-writing Markdown from scratch.

🔐 3. Codec Capabilities Completed

v1.0.5 connects replay workbench, AI tasks, and page scripts for a clearer split between lightweight decode and advanced crypto workflows.

Key Capabilities

Replay workbench: AES / DES / RSA / SM and smart nested decode;
Built-in Smart Decode Assistant (enabled by default): select text on any page to open a decode panel — Hex / Base64 / Base32 / URL / ROT13 and hash hints such as MD5 / SHA;
Advanced AES / nested decode still goes through replay, inline packet codec, or AI codec.transform.

Typical Use Cases

CTF misc / traffic puzzles: quick selection-based decode, then replay or AI tasks for harder chains;
Pentest: mixed base64, JWT, and custom crypto in responses — decode while capturing;
Daily browsing: decode suspicious strings in place without switching tools.

Simple Explanation

Select-to-decode goes to Smart Decode Assistant; AES / RSA / nested chains go to replay and AI tasks.
Light work stays light; heavy work has a professional path.

🛠 4. UX Improvements and Bug Fixes

v1.0.5 continues polishing Chrome / Firefox daily workflows, fixing system issues and improving interaction and messaging.

Improvements

Fixed various system issues around intercept, capture, sidebar, scripts, and settings linkage;
Better coordination among intercept / debug mode / passive listening toggles, reducing false prompts and state drift;
Improved sidebar, detail view, and settings copy for easier onboarding;
User manual updated to v1.0.5 with AI tasks, Skills, and built-in script docs.

Typical Use Cases

Daily capture, intercept, replay, and AI tasks after upgrading from v1.0.4;
Users switching between browsers who want a consistent workflow;
New and existing users reading the updated manual.

Simple Explanation

Besides the big features, v1.0.5 also spent time on smoothness and clarity.
Reload the extension after upgrading and skim the new manual sections.

🧬 Capability Recap

v1.0.5 builds on v1.0.4 and extends the following core capabilities:

HTTP / WebSocket capture
HTTP / WebSocket frame replay
WebSocket Micro Fuzz
HTTP and WebSocket frame interception
Tampermonkey / page script workspace (Pro)
AI Task smart script dispatch (Pro)
AI Task timeline log + draggable split (enhanced in v1.0.5)
AI Generate Skill (new in v1.0.5, Pro)
AI Task Console + Skills knowledge base (19 pentest + 28 CTF sub-modules)
Task background AI understanding / Smart Enable sub-modules (enhanced in v1.0.5)
Advanced codec + Smart Decode Assistant (enhanced in v1.0.5)
Runtime supplementary hints
Community Edition interception
Sensitive information detection
Hidden-link and static threat detection
Batch AI analysis
Encoding / decoding and hash utilities
Online activation + offline activation codes (combinable)
Chinese / English UI switching

In one sentence:

v1.0.5 focuses on more readable AI tasks, AI-generated skills, and a more complete codec stack — pushing process, knowledge, and tooling forward together.

🔄 Upgrade Notes from v1.0.4

Chrome / Edge: overwrite the original folder with the new .zip contents and click Reload on the extension card; avoid uninstall/reinstall or moving folders.
Firefox: reload the extension after upgrading; temporary loads must be loaded again after browser restart.
AI tasks / Skills: for AI Generate Skill or the new timeline log UI, see user manual §10 / §16.
Smart Decode Assistant: enabled by default; disable or switch to manual execution in the sidebar Scripts page if you do not want selection popups.

⚠️ Installation Notice

Because this tool involves:

Low-level network traffic capture
Request interception and modification
Traffic replay
Micro Fuzz
AI-assisted security analysis

Hx0 HawkEye is currently not available in official browser extension stores, including the English version in Chrome / Firefox extension stores.

Please refer to the compatibility table and installation steps below to install the extension manually according to your browser.

File names may vary depending on the actual release package. The examples below use V1.0.5 official release naming.

📦 Important Installation and Upgrade Notice

For long-term stability, it is strongly recommended to install Hx0 HawkEye from the .zip package by extracting it to a fixed folder, instead of installing a single .crx / .xpi package directly.

Hx0 HawkEye is not currently published in official browser extension stores. Some browsers may apply stricter restrictions to unpackaged, unsigned, or non-store extensions. In particular, installing a single .crx file in Chrome / Chromium-based browsers may cause:

The extension to be automatically disabled;
The extension to become unavailable after browser restart;
The browser recognition state of the extension to change after reinstalling;
Local cache, license status, or Pro membership entitlement to become inconsistent.

Therefore, the recommended workflow is:

Download the .zip package → extract it to a permanent folder → load the extracted folder from the browser extension management page.

When upgrading to a new version, it is also recommended to extract the new .zip package and overwrite the original extension folder, then refresh or reload the extension from the browser extension management page.

This helps keep the extension directory, browser recognition state, and local cache consistent, reducing the risk of losing license status, membership entitlement, local configuration, or historical data due to reinstalling, moving folders, or using single-package installation.

In short:

Use ZIP for first-time installation, and use ZIP to overwrite the original folder when upgrading. Avoid frequent uninstall/reinstall operations and do not move the extension folder casually.

📊 Browser Compatibility & Recommended Installation Methods

Browser	Recommended Installation Method	Pros	Cons / Notes
Microsoft Edge	Extract ZIP and load unpacked folder	More stable for long-term use and future overwrite upgrades	Requires enabling Developer Mode; do not delete or move the extension folder
360 Extreme / QQ / Sogou	Extract ZIP and load unpacked folder	Good compatibility and easier preservation of local configuration and membership entitlement	Extension page entry may differ by browser
Google Chrome	Extract ZIP and load unpacked folder	Suitable for long-term use and overwrite upgrades	Do not delete or move the folder; some versions display Developer Mode warnings
Firefox (Developer / ESR)	Install `.xpi` or temporarily load extracted folder	Suitable for long-term testing and close to the official add-on experience	Requires modifying `about:config`; stable Firefox does not support permanent unsigned add-on installation
Firefox (Stable Release)	Temporarily load extracted folder	Works on all Firefox versions	Extension disappears after browser restart

🚀 Detailed Installation Steps

1️⃣ Microsoft Edge / 360 Extreme / QQ / Sogou Browser (Recommended ⭐⭐⭐⭐⭐)

For Edge, 360 Extreme, QQ Browser, Sogou Browser, and other Chromium-based browsers, it is recommended to install Hx0 HawkEye by extracting the ZIP package and loading the unpacked folder.

This method is better for long-term use and future upgrades. When upgrading, extract the new ZIP package, overwrite the original extension folder, and refresh the extension. This reduces the risk of license status, membership entitlement, or local configuration issues caused by deleting/reinstalling or using single-package installation.

Installation Steps

① Download and Extract the Extension Package

Download the Chrome / Chromium release package, for example:

Hx0-HawkEye-Chrome-V1.0.5-Official.Release.zip

After extraction, you should get a folder such as:

Hx0-HawkEye-Chrome-V1.0.5-Official.Release

It is recommended to place the extension folder in a permanent directory, for example:

D:\Tools\Hx0-Extension\Hx0-HawkEye-Chrome-V1.0.5-Official.Release\

Do not delete or casually move this folder later. Otherwise, the browser may not be able to locate the extension files, and local configuration, license status, or membership entitlement recognition may be affected.

② Open the Extension Management Page

Edge
```
edge://extensions/
```
360 Extreme
```
chrome://extensions/
```
QQ Browser
```
qqbrowser://extensions/
```
Sogou Browser
```
se://extensions/
```

③ Enable Developer Mode

In Edge, this is called “Developer Mode”.

Usually located at:

Bottom-left corner
Or top-right corner

④ Load the Extracted Extension Folder

Click:

Load unpacked / Load unpacked extension / Load unpacked add-on

Select the extracted extension folder:

Hx0-HawkEye-Chrome-V1.0.5-Official.Release

After installation, it is recommended to pin Hx0 HawkEye to the browser toolbar.

⑤ Future Upgrade Method

When upgrading to a new version, the recommended workflow is:

Download the new .zip package;
Extract the new version;
Overwrite the original extension folder with the new files;
Go back to the extension management page;
Click the refresh button on the extension card, or restart the browser.

Avoid deleting the old extension and reinstalling it from scratch. Also avoid frequently changing the extension directory. This helps reduce the risk of losing membership entitlement, license status, local configuration, or historical data.

2️⃣ Google Chrome

Because Chrome strictly blocks unofficial .crx installations and may automatically disable them, Chrome users are especially recommended to use:

✅ Extract ZIP and Load Unpacked Folder

Installation Steps

① Extract the Extension Package

Download and extract the extension package:

Hx0-HawkEye-Chrome-V1.0.5-Official.Release.zip

You should obtain:

Hx0-HawkEye-Chrome-V1.0.5-Official.Release

It is recommended to place the folder in a permanent directory, for example:

D:\Tools\Hx0-Extension\

Do not delete or move this folder later. Otherwise, Chrome will not be able to locate the extension files, and local configuration, license status, or membership entitlement recognition may be affected.

② Open the Extensions Page

chrome://extensions/

③ Enable Developer Mode

Located in the top-right corner.

④ Load the Extension

Click:

Load unpacked

Select the extracted extension folder.

⑤ Finish Installation

After installation, it is recommended to pin the extension to the browser toolbar.

If Chrome later displays:

“Disable extensions running in Developer Mode”

You can safely close the warning without affecting functionality.

⑥ Chrome Upgrade Notice

When upgrading the Chrome version of the extension, it is recommended to extract the new .zip package and overwrite the original extension folder, then click refresh on the chrome://extensions/ page.

Try to avoid:

Deleting the old extension and reinstalling it;
Moving the extension folder to another path;
Installing by dragging a single .crx file;
Installing multiple Hx0 HawkEye versions from different folders at the same time.

These operations may cause the browser to recognize the extension as a different installation, which may affect local cache, license status, membership entitlement, or historical configuration.

3️⃣ Mozilla Firefox

Firefox enforces extension signature verification.

The following versions are recommended for permanent installation:

Firefox Developer Edition
Firefox ESR

For Firefox users, please use the Firefox-specific package from the official release. If you temporarily load an extracted directory, do not delete or move the directory. When upgrading, try to keep the same directory structure and avoid repeated uninstall/reinstall operations.

🅰️ Method A: Permanent Installation (Recommended)

① Open Configuration Page

Enter the following in the address bar:

about:config

Accept the risk warning.

② Disable Signature Verification

Search for:

xpinstall.signatures.required

Double-click it and change the value to:

false

③ Open Add-ons Page

about:addons

④ Install the Extension

Click the top-right menu:

⚙️ → Install Add-on From File

Select the Firefox release package:

Hx0-HawkEye-Firefox-V1.0.5-Official.Release.xpi

Then confirm installation.

If you are using a ZIP package, extract it completely to a permanent folder first, then select the .xpi file or temporarily load manifest.json according to the release package instructions.

🅱️ Method B: Temporary Loading (Works on All Versions)

If you only have the stable version of Firefox and need temporary packet capture functionality, you can use this method.

① Open Debugging Page

about:debugging

② Click:

This Firefox

③ Temporarily Load the Extension

Click:

Load Temporary Add-on...

④ Select manifest.json

Navigate to the Firefox extracted package folder:

Hx0-HawkEye-Firefox-V1.0.5-Official.Release

Select:

manifest.json

The extension will then load successfully.

⚠️ Note:

The extension will automatically disappear after Firefox is closed and must be loaded again.

🧠 Usage Suggestions

Community Edition Is Suitable For

Daily traffic capture;
Request and response inspection;
Basic replay;
Basic encoding / decoding;
Basic HTTP / WebSocket observation;
Intercept, edit, and forward workflows.

Pro Edition Is Suitable For

In-page replay;
HTTP / WebSocket Micro Fuzz;
Tampermonkey scripts and script workspace;
AI Task smart script dispatch;
AI Task timeline log and professional reports;
AI Generate Skill;
Single-request AI analysis;
Batch AI analysis;
AI Task Console + Skills knowledge base;
Advanced codec / Smart Decode Assistant;
Hidden-link and static threat detection;
Batch export, batch replay, and batch hidden-link detection;
More complete automated security analysis workflows.

⚖️ Disclaimer

This tool is intended only for:

Security research
Development debugging
CTF practice
Authorized security testing

Do not use it against unauthorized targets.

When using capture, intercept, replay, Fuzz, and AI analysis features, make sure you have proper authorization from the target system and comply with applicable laws, organizational rules, and data compliance requirements.

Hx0-HawkEye-V1.0.5-Official Release

🦅 Hx0鹰眼 - 全栈式轻量抓包与 AI 安全审计扩展（V1.0.5）

离线安装指南

🚀 主要更新

🧠 1. AI 任务台全面升级（本版核心）

核心能力

适用场景

简单理解

📚 2. Skills 知识库加厚 + AI 生成技能

核心能力

适用场景

简单理解

🔐 3. 编解码能力补齐

核心能力

适用场景

简单理解

🛠 4. 体验优化与问题修复

优化重点

适用场景

简单理解

🧬 版本能力回顾

🔄 从 v1.0.4 升级提醒

⚠️ 安装说明

📦 重要安装与升级提醒

📊 浏览器兼容性与推荐安装方式总览

🚀 详细安装步骤

1️⃣ Microsoft Edge / 360极速 / QQ / 搜狗浏览器（推荐 ⭐⭐⭐⭐⭐）

安装步骤

① 下载并解压插件压缩包

② 打开扩展管理页面

③ 开启开发者模式

④ 加载解压后的插件文件夹

⑤ 后续升级方式

2️⃣ Google Chrome 谷歌浏览器

✅ ZIP 解压后加载文件夹方式

安装步骤

① 解压插件

② 打开扩展页面

③ 开启开发者模式

④ 加载扩展

⑤ 完成安装

⑥ Chrome 升级提醒

3️⃣ Mozilla Firefox 火狐浏览器

🅰️ 方案 A：永久安装（推荐）

① 打开配置页面

② 关闭签名验证

③ 打开扩展页面

④ 安装插件

🅱️ 方案 B：临时加载（支持所有版本，但重启即失效）

① 打开调试页面

② 点击：

③ 临时加载插件

④ 选择 manifest.json

🧠 使用建议

社区版适合

专业版适合

⚖️ 免责声明

🦅 Hx0 HawkEye - Lightweight Full-Stack Packet Capture & AI Security Auditing Extension (V1.0.5)

Offline Installation Guide

🚀 Main Updates

🧠 1. AI Task Console Overhaul (Core Release)

Key Capabilities

Typical Use Cases

Simple Explanation

📚 2. Thicker Skills Library + AI Generate Skill

Key Capabilities

Typical Use Cases

Simple Explanation

🔐 3. Codec Capabilities Completed

Key Capabilities

Typical Use Cases

Simple Explanation

🛠 4. UX Improvements and Bug Fixes

Improvements

Typical Use Cases

Simple Explanation

🧬 Capability Recap

🔄 Upgrade Notes from v1.0.4

⚠️ Installation Notice

📦 Important Installation and Upgrade Notice