Item logo image for OWASP Penetration Testing Kit

OWASP Penetration Testing Kit

https://pentestkit.co.uk/
4.9(

42 ratings

)
Item media 6 (screenshot) for OWASP Penetration Testing Kit
Item video thumbnail
Item media 2 (screenshot) for OWASP Penetration Testing Kit
Item media 3 (screenshot) for OWASP Penetration Testing Kit
Item media 4 (screenshot) for OWASP Penetration Testing Kit
Item media 5 (screenshot) for OWASP Penetration Testing Kit
Item media 6 (screenshot) for OWASP Penetration Testing Kit
Item video thumbnail
Item video thumbnail
Item media 2 (screenshot) for OWASP Penetration Testing Kit
Item media 3 (screenshot) for OWASP Penetration Testing Kit
Item media 4 (screenshot) for OWASP Penetration Testing Kit
Item media 5 (screenshot) for OWASP Penetration Testing Kit
Item media 6 (screenshot) for OWASP Penetration Testing Kit

Overview

OWASP Penetration Testing Kit

The OWASP Penetration Testing Kit (PTK) browser extension is your all-in-one solution for streamlining your daily AppSec tasks. Whether you’re a penetration tester, a Red Team member, or an AppSec practitioner, OWASP PTK enhances your efficiency and provides deep insights into your target application. Key Features: Runtime Scanning (DAST & IAST & SAST & SCA): Perform Dynamic Application Security Testing, Static Analysis, In-Browser IAST and Software Composition Analysis on the fly. Identify SQL injection, command injection, reflected/stored XSS, SQL auth bypass, XPath injections, JWT attacks, and other complex threats. Static Analysis (SAST): PTK automatically parses loaded JavaScript, HTML, and CSS right in your browser—before any code ever runs. It flags unsafe patterns like `eval()`, `innerHTML`/`outerHTML` injection, insecure cryptographic calls, missing input sanitization, and common anti-patterns. In-Browser IAST (Interactive Application Security Testing): PTK’s built-in IAST engine instruments your app at runtime—right in the browser—tracking taint flows and code execution to flag vulnerabilities as they occur. Catch issues like DOM-based XSS, unsafe `eval`/`innerHTML` usage, open-redirects, and more without leaving your dev tools. JWT Inspector: Analyze, craft, and tamper with JSON Web Tokens. Generate keys, test null signatures, brute-force HMAC secrets, and inject malicious `jwk`, `jku`, or `kid` parameters. Insightful Application Info: One-click visibility into tech stacks, WAFs, security headers, crawled links, and authentication flows. Built-in Proxy & Traffic Log: Capture all HTTP(S) traffic, replay requests in R-Builder, and automate XSS, SQLi, and OS command injection. R-Builder for Request Tampering & Smuggling: Craft and manipulate HTTP requests, including complex request-smuggling techniques. Now with cURL import/export. Cookie Management: Add, edit, remove, block, protect, export, and import cookies from a powerful in-browser editor. Decoder/Encoder Utility: Instantly convert between UTF-8, Base64, MD5, URL-encode/decode, and more formats. Swagger.IO Integration: Browse and interact with API endpoints directly from your Swagger documentation. Selenium Integration: Shift left security by running automated Selenium tests with built-in vulnerability checks. Enhance your AppSec practice with PTK—the extension that makes your browser smarter and your testing faster. Install today and start uncovering vulnerabilities in real time!

4.9 out of 542 ratings

Google doesn't verify reviews. Learn more about results and reviews.

Details

  • Version
    9.2.3
  • Updated
    June 13, 2025
  • Size
    7.31MiB
  • Languages
    English (UK)
  • Developer
    Website
    Email
    denis.podgurskiy@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

OWASP Penetration Testing Kit has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.

OWASP Penetration Testing Kit handles the following:

Personally identifiable information

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Support

Related

Port Checker Tool

5.0(1)

Is a free online tool to find open ports in your system. You can also test whether port forwarding is working or not.

Display Access Keys

4.3(3)

Displays hint of access keys next ot the elements.

h4ck3r

5.0(1)

All in one Red Team Developer Tool Kit

Bishop Vulnerability Scanner

3.8(12)

Search websites for git repos, exposed config files, and more as you browse.

Hack-Tools

4.6(30)

The all in one Red team extension for web pentester

HackBar

4.2(54)

A browser extension for Penetration Testing

Vulners Web Scanner

4.6(20)

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

XSS

5.0(6)

Web Development tool

Admin tools

5.0(1)

Whois, Port checker, Reverse IP

Cyber Web Tools

1.0(4)

Chrome extension to analysis your website security. It provides various tools to find web security loopholes.

OSIRIS: OSINT Reputation Intelligent Search

5.0(2)

Use this extension to analyze IoCs' reputation using OSINT

YesWeHack VDP Finder

5.0(3)

This extension tells if visited sites have vulnerability disclosure programs

Port Checker Tool

5.0(1)

Is a free online tool to find open ports in your system. You can also test whether port forwarding is working or not.

Display Access Keys

4.3(3)

Displays hint of access keys next ot the elements.

h4ck3r

5.0(1)

All in one Red Team Developer Tool Kit

Bishop Vulnerability Scanner

3.8(12)

Search websites for git repos, exposed config files, and more as you browse.

Hack-Tools

4.6(30)

The all in one Red team extension for web pentester

HackBar

4.2(54)

A browser extension for Penetration Testing

Vulners Web Scanner

4.6(20)

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

XSS

5.0(6)

Web Development tool

Google apps