A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities
☆120Nov 23, 2023Updated 2 years ago
Alternatives and similar repositories for pentest-mapper
Users that are interested in pentest-mapper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆33Jun 22, 2023Updated 3 years ago
- A burpsuite extension that helps security researchers find public security reports published on h1 based on the selected host☆43May 9, 2020Updated 6 years ago
- Automatic Bug finder with buprsuite☆167Mar 6, 2023Updated 3 years ago
- ☆22Oct 9, 2017Updated 9 years ago
- This extension provides a way to discover NoSQL injection vulnerabilities.☆11Feb 1, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆269Mar 4, 2023Updated 3 years ago
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- ☆17Jan 24, 2023Updated 3 years ago
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆63Jun 12, 2023Updated 3 years ago
- BurpSiute - BurpBounty Profiles☆20Feb 10, 2023Updated 3 years ago
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆183Nov 22, 2021Updated 4 years ago
- This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.☆250Mar 17, 2025Updated last year
- Nuclei plugin for BurpSuite☆1,353Oct 27, 2026Updated last week
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,540Jan 8, 2026Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- This repository is for the Testing ASP.NET ViewState with YSoNet (YSoSerial.NET) workshop.☆25Dec 17, 2025Updated 10 months ago
- A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabiliti…☆119Aug 2, 2023Updated 3 years ago
- Python resource library for creating security related tooling☆77Jul 28, 2026Updated 3 months ago
- It becomes the extension of Burp suite. The cookie set by the BipIP server may include a private IP, which is an extension to detect tha…☆16Mar 10, 2026Updated 7 months ago
- Black box fuzzer for web applications☆440Jul 20, 2025Updated last year
- ☆63Apr 6, 2026Updated 6 months ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,818Apr 26, 2024Updated 2 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆331Mar 27, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.☆76Feb 25, 2022Updated 4 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆376Jul 25, 2023Updated 3 years ago
- ☆15Sep 24, 2015Updated 11 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- A tech enumeration toolkit focused on 404 Not found pages.☆28Oct 6, 2024Updated 2 years ago
- ☆128May 8, 2024Updated 2 years ago
- Obtain GraphQL API schema despite disabled introspection!☆69Mar 11, 2026Updated 7 months ago
- SSRF plugin for burp Automates SSRF Detection in all of the Request☆634Jan 20, 2021Updated 5 years ago
- LibreHealth v2.0.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) …☆12Jul 19, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆191Dec 3, 2024Updated last year
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆905May 3, 2023Updated 3 years ago
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is int…☆988Sep 24, 2026Updated last month
- All about bug bounty (bypasses, payloads, and etc)☆6,955Sep 8, 2023Updated 3 years ago
- A tool to parse, deduplicate, and query multiple port scans.☆60Aug 11, 2023Updated 3 years ago
- A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…☆411May 28, 2026Updated 5 months ago