Crusader Extensions · plugin catalog

One `.js` file.
Read it, fork it, ship it.

Hot-reload JavaScript plugins — each one a single .js file, MIT licensed, and capability-sandboxed. Install in one command, read the source, fork it, or write your own in an evening. You approve exactly what each plugin can touch before it runs.

Browse plugins → Write a plugin →

8plugins

4categories

100%open source · MIT

1command to install

⌕ ⌘K

Featured

Hand-picked starters from the Crusader team. The first things to install after you trust the CA.

Browse all

Filter by category above. Every plugin is one .js file, MIT licensed — click any install command to copy it, or open the source.

Bring your own. Submit it with a GitHub URL.

Crusader installs plugins straight from a URL, so the whole ecosystem runs on GitHub — no registry, no account, no upload step. Host your plugin in a public repo, share the raw URL, and anyone can install it. To get it into this catalog, just send us the link.

Install from any GitHub repo a raw URL is all it takes

# preview the capabilities it declares before you trust it
$ crusader plugin preview \
    https://raw.githubusercontent.com/you/repo/main/my-plugin.js

# install straight from GitHub — HTTPS, 2 MB max, MIT
$ crusader plugin install \
    https://raw.githubusercontent.com/you/repo/main/my-plugin.js
✓ Installed. Hot-reloads on save.

Get listed in this catalog three steps · no backend

Push your plugin to a public GitHub repo

One .js file, MIT licensed. Start from the authoring guide.

Submit the GitHub URL

Open a pre-filled issue with the button below, or send a pull request adding your entry. The catalog links straight to your repo's raw URL.

We review the capabilities and merge

Your code stays yours, on your GitHub — no upload, no account, no proprietary package format.

Submit your extension → Or email the link

Plugins run in a sandboxed JavaScript engine with no filesystem or arbitrary-network access — only the capabilities they declare and you approve. Advanced APIs (raising findings, identity replay, hosted Beacon, JA3 transport, MCP tools) need Hunter Pro; everything else runs on Free. Read the full reference in the plugin authoring guide.

Paid extensions

Coming soon

Today every plugin in the catalog is free and open source (MIT). A paid tier for premium extensions is on the roadmap — and because installs are just GitHub URLs, the flow you learn now won't change.

Eight plugins today.
Yours next.

$ crusader plugin preview ./my-plugin.js

Every plugin: one .js file. Hot-reload. Capability-sandboxed. MIT licensed by default.
New to it? Write your first plugin — it takes an evening.