Crusader Extensions · plugin catalog

One `.js` file.
Read it, fork it, ship it.

Hot-reload JavaScript plugins — each one a single .js file, MIT licensed, and capability-sandboxed. Install in one command, read the source, fork it, or write your own in an evening. You approve exactly what each plugin can touch before it runs.

Browse plugins → Write a plugin →

12plugins

4categories

100%open source · MIT

1command to install

⌕ ⌘K

Featured

Hand-picked starters from the Crusader team. The first things to install after you trust the CA.

Browse all

Filter by category above. Every plugin is one .js file, MIT licensed — click any install command to copy it, or open the source.

Bring your own. Submit it with a GitHub URL.

The curated marketplace installs from stable crusaderproxy.com/ext/ URLs. To add an extension to the marketplace store, submit an issue or pull request in crusadersecurity/Crusader-Proxy-Extensions. GitHub remains the source-review surface, and users can still manually install any trusted raw URL or local .js file outside the marketplace.

Manual installs still work trusted raw URL or local file

# preview the capabilities it declares before you trust it
$ crusader plugin preview \
    https://raw.githubusercontent.com/you/repo/main/my-plugin.js

# install straight from GitHub — HTTPS, 2 MB max, MIT
$ crusader plugin install \
    https://raw.githubusercontent.com/you/repo/main/my-plugin.js
✓ Installed. Hot-reloads on save.

Get listed in this catalog three steps · no backend

Push your plugin to a public GitHub repo

One .js file, MIT licensed. Start from the authoring guide.

Submit it to the marketplace repo

Open a pre-filled issue or send a pull request to Crusader-Proxy-Extensions. After review, the marketplace installs from /ext and links back to your source.

We review the capabilities and merge

Your code stays yours, on your GitHub — no upload, no account, no proprietary package format.

Submit your extension → Or email the link

Plugins run in a sandboxed JavaScript engine with no filesystem or arbitrary-network access — only the capabilities they declare and you approve. Advanced APIs (raising findings, identity replay, hosted Beacon, JA3 transport, MCP tools) need Hunter Pro; everything else runs on Free. Read the full reference in the plugin authoring guide.

Paid extensions

Coming soon

Today every plugin in the catalog is free and open source (MIT). A paid tier for premium extensions is on the roadmap, with curated marketplace installs staying on stable /ext URLs.

Twelve plugins today.
Yours next.

$ crusader plugin preview ./my-plugin.js

Every plugin: one .js file. Hot-reload. Capability-sandboxed. MIT licensed by default.
New to it? Write your first plugin — it takes an evening.