Marksman

Extension Tools11 users

Overview

Highlight dynamic endpoints on webpages

The purpose of this tool is to assist with casual web application penetration testing during large scope engagements where pages may contain dozens or hundreds of links and references to additional endpoints. The tool aims to give testers visual indicators that can help them streamline their attention and focus on elements of interests for further testing without clicking through large numbers of static resources. In 1 click, the tool will highlight in yellow all href elements that refer to pages with the potential for dynamic functionality (asp, php, aspx, jsp, jspx, etc.). The tool will also highlight in red all href elements that contain HTTP GET parameters, after identifying these via regular expression. Finally the tool highlights in magenta any input form elements that result in dynamic HTTP POST requests. This should ideally assist penetration testers in focusing quickly on elements of interest for further investigation. If you want to have the functionality running continuously, simply select the INFINITE MODE checkbox and press the FIRE button. The plugin will automatically perform targeting during navigation until the checkbox is deselected by the user. The tool is equally useful for reconnaissance on search results page to visually identify interesting endpoints containing the aforementioned properties.

0 out of 5
No ratings
Learn more about results and reviews.

Details

Version
1.2
Updated
October 29, 2024
Flag concern
Offered by
pn.allardcoutu
Size
38.84KiB
Languages
English (United States)
Developer
Email
pn.allardcoutu@gmail.com
Non-trader
This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization

The developer has disclosed that it will not collect or use your data.

This developer declares that your data is

Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes

Support

DOM Structure Visualizer

0.0

Visually highlights DOM parent/child nesting when hovering over elements on a webpage.

Page Breakpoint Inspector

4.0

Displays the current breakpoint in the page

Find & Replace Pro

0.0

Advanced find & replace across any webpage: text nodes, inputs, textareas, contenteditable, shadow DOM, iframes, and dynamic content

Highlight & Animate Text

4.0

Creating animated text highlights on web pages.

Moonly - javascript and css injector

5.0

Inject javascript and css into pages dynamically.

.MD this page

2.8

Convert web page to markdown with one click

Grid Overlay Pro

5.0

Professional grid overlay tool with responsive breakpoints - like Figma grids for the web

Render Detector

5.0

Visually identify Server-Side Rendered vs Client-Side Rendered content on any webpage.

Highlight to Action

5.0

Turn highlighted text into actions instantly — works on most web pages

Element Hunter - Extract content from web pages

4.7

Get powerful insights from any web page

Element Selector

0.0

Select and highlight elements on a webpage

jQuery Version Detector

0.0

Detects jQuery version and links on current webpage with colored indicators