A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities
☆120Aug 2, 2023Updated 2 years ago
Alternatives and similar repositories for Pentest-Mapper
Users that are interested in Pentest-Mapper are comparing it to the libraries listed below
Sorting:
- Burpsuite Plugin to detect Directory Traversal vulnerabilities☆27Jul 22, 2021Updated 4 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆374Jul 25, 2023Updated 2 years ago
- A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…☆398Mar 6, 2026Updated 2 weeks ago
- Bug Bounty statistics tool.☆33Nov 17, 2022Updated 3 years ago
- A path-normalization pentesting tool.☆152Jan 22, 2026Updated 2 months ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 3 years ago
- A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CON…☆164Mar 27, 2024Updated last year
- ☆19Mar 16, 2021Updated 5 years ago
- Cross-Site Scripting (XSS) vulnerability analyzer☆21Feb 13, 2026Updated last month
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆184Nov 22, 2021Updated 4 years ago
- ☆47Apr 18, 2023Updated 2 years ago
- ☆17Jul 17, 2023Updated 2 years ago
- Server and avi file to exploit FFmpeg HLS parse☆22Jun 26, 2019Updated 6 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,039Aug 23, 2025Updated 6 months ago
- BChecks collection for Burp Suite Professional☆100Jun 6, 2024Updated last year
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆118Dec 23, 2025Updated 2 months ago
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆61Sep 14, 2022Updated 3 years ago
- 一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。☆13Mar 7, 2025Updated last year
- A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities☆119Nov 23, 2023Updated 2 years ago
- An another JWT cracker but really fast!☆12Jan 26, 2023Updated 3 years ago
- Automated blind-xss search for Burp Suite☆285Oct 10, 2019Updated 6 years ago
- This page should help you with the recon for security issues.☆20Oct 14, 2022Updated 3 years ago
- A pentesting Firefox spy extension - PoC☆10Jun 16, 2016Updated 9 years ago
- A simple plugin to export JS files from one or multiple targets☆45Nov 12, 2023Updated 2 years ago
- Filter URLs that match your scope file for bugbounty.☆11May 23, 2023Updated 2 years ago
- Gitlab CI/CD Templates for build,test,deploy to your infra☆12Aug 15, 2024Updated last year
- ☆30Jul 14, 2023Updated 2 years ago
- Python Reverse Shell Builder with some advanced functionalities☆10Feb 16, 2021Updated 5 years ago
- Wireless Pentesting Device☆24Aug 14, 2020Updated 5 years ago
- Uses Go net/http library to distinguish alive hosts from a give list of hosts/urls☆12Dec 23, 2019Updated 6 years ago
- oneliner commands for bug bounties☆461Jul 25, 2022Updated 3 years ago
- declutters url lists for crawling/pentesting☆1,538Feb 23, 2025Updated last year
- BurpSuite extension to convert requests into bcheck scripts☆33Jul 18, 2023Updated 2 years ago
- List Security Guide☆19Feb 24, 2021Updated 5 years ago
- Discover new target domains using Content Security Policy☆508Feb 7, 2026Updated last month
- Automated learning of regexes for DNS discovery☆390Feb 18, 2023Updated 3 years ago
- A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing☆143Jun 27, 2023Updated 2 years ago
- Enumerate old versions of robots.txt paths using Wayback Machine for content discovery☆58Sep 21, 2023Updated 2 years ago
- Top disclosed reports from HackerOne☆162Apr 15, 2021Updated 4 years ago