Marksman Extension Chrome

Highlight dynamic endpoints on webpages

Latest Version

Version

1.2

Update

October 29, 2024

Size

38.84KiB

Developer

Marksman Extension

The purpose of this tool is to assist with casual web application penetration testing during large scope engagements where pages may contain dozens or hundreds of links and references to additional endpoints. The tool aims to give testers visual indicators that can help them streamline their attention and focus on elements of interests for further testing without clicking through large numbers of static resources.

In 1 click, the tool will highlight in yellow all href elements that refer to pages with the potential for dynamic functionality (asp, php, aspx, jsp, jspx, etc.). The tool will also highlight in red all href elements that contain HTTP GET parameters, after identifying these via regular expression. Finally the tool highlights in magenta any input form elements that result in dynamic HTTP POST requests. This should ideally assist penetration testers in focusing quickly on elements of interest for further investigation.

If you want to have the functionality running continuously, simply select the INFINITE MODE checkbox and press the FIRE button. The plugin will automatically perform targeting during navigation until the checkbox is deselected by the user.

The tool is equally useful for reconnaissance on search results page to visually identify interesting endpoints containing the aforementioned properties.

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "Marksman", "version": "1.2", "description":"Highlight dynamic endpoints on webpages", "action": { "default_popup": "popup.html", "default_icon": "logo.png" }, "permissions": [ "activeTab", "webNavigation", "storage", "scripting", "" ], "host_permissions": [ "" ], "content_scripts": [ { "matches": [""], "js": ["content.js"] } ], "background": { "service_worker": "service-worker.js", "persistent": false }}

Marksman

Highlight dynamic endpoints on webpages

Latest Version

Marksman Extension

Source Manifest.json

Similar Extensions

Get source code (.Zip)

Latest Updates

Top Rated