PortSwigger / pentest-mapperLinks
A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities
☆119Updated 2 years ago
Alternatives and similar repositories for pentest-mapper
Users that are interested in pentest-mapper are comparing it to the libraries listed below
Sorting:
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆120Updated 2 years ago
- Check AWS S3 instances for read/write/delete access☆122Updated 3 years ago
- ☆109Updated last year
- A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabiliti…☆118Updated 2 years ago
- Build your own reconnaissance system with Osmedeus Next Generation☆200Updated 3 months ago
- ☆159Updated 3 years ago
- Burpsuite plugin for Interact.sh☆228Updated last year
- A projectdiscovery driven attack surface monitoring bot powered by axiom☆191Updated 3 years ago
- Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework☆170Updated 2 years ago
- Directory scans☆84Updated last year
- FirebaseExploiter is a vulnerability discovery tool that discovers Firebase Database which are open and can be exploitable. Primarily bui…☆170Updated 3 years ago
- ☆171Updated last month
- Prototype Pollution Scanner☆129Updated 4 years ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- CVE Collection of jQuery UI XSS Payloads☆120Updated 2 years ago
- Full Nuclei automation script with logic explanation.☆245Updated 3 years ago
- 🔭 Collection of regexp pattern for security passive scanning☆115Updated 2 years ago
- NotSoCereal: A Deserialization exploit playground☆54Updated 3 years ago
- All Type of Payloads☆137Updated last year
- Make URL path combinations using a wordlist☆171Updated 2 years ago
- Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473☆110Updated last year
- Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.☆186Updated last year
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆183Updated 4 years ago
- This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.☆245Updated 8 months ago
- A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)☆122Updated 3 years ago
- Workshop given at Hack in Paris 2019☆125Updated 2 years ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆78Updated 2 years ago
- Improve automated and semi-automated active scanning in Burp Pro☆62Updated 6 months ago
- Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own☆76Updated last year
- Execute Trickest workflows right from your terminal☆94Updated last week