OWASP Penetration Testing Kit
Item logo image for OWASP Penetration Testing Kit

OWASP Penetration Testing Kit

pentestkit.co.uk
4.9(

43 ratings

)
Item media 6 screenshot
Item video thumbnail
Item media 2 screenshot
Item media 3 screenshot
Item media 4 screenshot
Item media 5 screenshot
Item media 6 screenshot
Item video thumbnail
Item video thumbnail
Item media 2 screenshot
Item media 3 screenshot
Item media 4 screenshot
Item media 5 screenshot
Item media 6 screenshot

Overview

OWASP Penetration Testing Kit

The Penetration Testing Kit (PTK) browser extension is your all-in-one solution for streamlining your daily tasks in the realm of application security. Whether you're a penetration tester, a member of a Red Team, or an application security practitioner, this extension is designed to enhance your efficiency and provide valuable insights. Key Features: In-Browser Runtime Scanning: PTK offers Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning right within your browser. Detect SQL Injections, Command Line Injections, Stored and Reflected Cross-Site Scripting (XSS) vulnerabilities, and more. It even identifies complex threats like SQL Authentication Bypass, XPath injections, and JWT attacks. JWT Inspector: We've added a crucial new feature – JWT Inspector. It empowers you to analyze JSON Web Tokens (JWT), build new tokens, and generate public and private keys for JWT signing. PTK makes easy a lot of JWT attacks including null signature, none algorithm, brute force HMAC secret, key/algorithm confusion, JWK injection, JKU injection, and kid parameter injection. Insightful Information: Get a one-click access to insightful information about the target application, including its technology stack, Web Application Firewalls (WAFs), security headers, crawled links, and authentication flow. Proxy with Traffic Log: PTK includes a proxy with a detailed traffic log. This log allows you to repeat any request in the R-Builder or send it to the R-Attacker. You can automate the execution of Cross-Site Scripting (XSS), SQL injection, or OS Command injections. R-Builder for Request Tampering and Request Smuggling: The extension includes R-Builder, a powerful tool that allows you to craft and manipulate HTTP requests with precision. Use R-Builder to modify and tamper with requests, enabling you to test the robustness of the application's security. R-Builder empowers you to execute complex maneuvers, including HTTP request smuggling attacks, for a comprehensive assessment of application vulnerabilities. Now with cURL support - copy or paste your cURL request and execute in a second. Cookie Management: The extension includes a cookie editor, allowing you to manage cookies efficiently. Add, edit, remove, block, protect, export, and import cookies with ease. Decoder/Encoder Utility: The integrated utility helps you manage encoding and decoding from and to various formats, including UTF-8, Base64, MD5, and more. Swagger.IO Integration: We've integrated Swagger.IO to enhance your understanding of API documentation. Easily create requests to interact with API endpoints. Selenium Integration: With Selenium integration, PTK aids in identifying security risks at the early stages of the development cycle, ensuring robust security from the outset. Enhance your application security practices with PTK, the browser extension that makes your browser smarter. Whether you need to uncover vulnerabilities, analyze JWT tokens, or optimize your security workflow, PTK has got you covered. Try it today and take your application security to the next level.

4.9 out of 543 ratings

Google doesn't verify reviews. Learn more about results and reviews.

Review's profile picture

Przemysław SamselApr 13, 2024

Helpful stuff thanks!

Review's profile picture

gideon adavizeJan 26, 2024

Wonderful extension

1 out of 3 found this helpful
Review's profile picture

AndasinJan 26, 2024

Wonderful and amazing extension

1 person found this review to be unhelpful

Details

  • Version
    8.9.3
  • Updated
    May 6, 2024
  • Size
    7.14MiB
  • Languages
    English (UK)
  • Developer
    Website
    Email
    denis.podgurskiy@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

OWASP Penetration Testing Kit has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.

OWASP Penetration Testing Kit handles the following:

Personally identifiable information

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Support

Related

YesWeHack VDP Finder

5.0(2)

This extension tells if visited sites have vulnerability disclosure programs

Display Access Keys

4.3(3)

Displays hint of access keys next ot the elements.

h4ck3r

5.0(1)

All in one Red Team Developer Tool Kit

Bishop Vulnerability Scanner

3.8(12)

Search websites for git repos, exposed config files, and more as you browse.

Hack-Tools

4.7(23)

The all in one Red team extension for web pentester

HackBar

4.2(49)

A browser extension for Penetration Testing

Vulners Web Scanner

4.6(20)

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

XSS

5.0(6)

Web Development tool

Admin tools

5.0(1)

Whois, Port checker, Reverse IP

Cyber Web Tools

1.0(6)

Chrome extension to analysis your website security. It provides various tools to find web security loopholes.

OSIRIS: OSINT Reputation Intelligent Search

5.0(2)

Use this extension to analyze IoCs' reputation using OSINT

ZoomEye Tools

4.2(5)

ZoomEye Tools provides a variety of functions to assist the use of Zoomeye, including a proview host and many other functions

YesWeHack VDP Finder

5.0(2)

This extension tells if visited sites have vulnerability disclosure programs

Display Access Keys

4.3(3)

Displays hint of access keys next ot the elements.

h4ck3r

5.0(1)

All in one Red Team Developer Tool Kit

Bishop Vulnerability Scanner

3.8(12)

Search websites for git repos, exposed config files, and more as you browse.

Hack-Tools

4.7(23)

The all in one Red team extension for web pentester

HackBar

4.2(49)

A browser extension for Penetration Testing

Vulners Web Scanner

4.6(20)

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

XSS

5.0(6)

Web Development tool

Google apps