Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discovered endpoints and tracks whether their parameters are actually tested in Burp Suite. This helps highlight untested attack surfaces and provides clear visibility of coverage for security teams.
☆46Mar 16, 2026Updated 7 months ago
Alternatives and similar repositories for Burp-Pentest-Coverage-Tracker
Users that are interested in Burp-Pentest-Coverage-Tracker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 1, 2026Updated 2 weeks ago
- Automated DAST for Android Apps☆156Sep 16, 2026Updated last month
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- ☆51Aug 17, 2026Updated 2 months ago
- 🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports☆102Sep 16, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 8 months ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆35Jul 24, 2026Updated 2 months ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆59Aug 24, 2026Updated last month
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.☆63Updated this week
- Thermal pocket printer - BLE protocol reverse engineering, Python CLI, and web GUI☆24Sep 4, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆316Sep 30, 2026Updated 2 weeks ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆61Jul 12, 2026Updated 3 months ago
- Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path anal…☆453Updated this week
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than reci…☆62Aug 18, 2026Updated 2 months ago
- Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories …☆103Updated this week
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 3 months ago
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 2 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆34May 28, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆128Aug 7, 2026Updated 2 months ago
- Generate wordlists using pattern logic and expressions.☆24Jun 18, 2026Updated 4 months ago
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆423Oct 7, 2026Updated last week
- Private Nginx Rift ASLR lab, exploit chain, and demo recordings☆76May 25, 2026Updated 4 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆108Oct 1, 2026Updated 2 weeks ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Oct 11, 2026Updated last week
- Ethiack AI Pentesting Benchmark Framework☆107Aug 20, 2026Updated last month
- Agent-native code security review with MCP, structured findings, and practical pre-merge scanning workflows.☆22Apr 2, 2026Updated 6 months ago
- ☆26Sep 5, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A complete bug bounty workspace for HackerOne researchers. Includes scope enforcement, automated recon/vuln pipeline (400+ tools), report…☆479Updated this week
- A foundational C library for building operationally credible offensive capabilities☆94Sep 21, 2026Updated 3 weeks ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆54Sep 25, 2026Updated 3 weeks ago
- ☆13Aug 3, 2024Updated 2 years ago
- The HTTP/2 CLI for finding tiny timing differences and winning request races☆82Sep 24, 2026Updated 3 weeks ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆98Aug 24, 2026Updated last month
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 7 months ago