Tested the product for a couple of hours.
Consistently produces false positives.
First I installed it on owasp medusa. The dialogues it produces are pretty meaningless.
So I thought that maybe the plugin required a more current version of ff.Installed on ff 23.
The same meaningless dialogues came up.
When actually running it against a username/password field, fireforce consistently produced false positives.Against DVWA, I kept getting "password found" for an attack using a dictionary.
The passwords "found" by fireforce were not the actual passwords.
This product seems pretty broken.