English (UK)
See more
OWASP Penetration Testing Kit
Latest Version
Version
8.9.3
Update
May 6, 2024
Size
7.14MiB
Developer
pentestkit.co.uk
Category
Users
20,000+ 
Rating
4.81395 ★
Manifest Version
3
Web Store Status
Extension ID
Languages Support
Permissions
ActiveTab
Cookies
Notifications
Storage
UnlimitedStorage
Tabs
WebRequest
Background
Debugger
Scripting
DeclarativeNetRequest
DeclarativeNetRequestWithHostAccess
See more
Cookies
Notifications
Storage
UnlimitedStorage
Tabs
WebRequest
Background
Debugger
Scripting
DeclarativeNetRequest
DeclarativeNetRequestWithHostAccess
OWASP Penetration Testing Kit Extension
The Penetration Testing Kit (PTK) browser extension is your all-in-one solution for streamlining your daily tasks in the realm of application security. Whether you're a penetration tester, a member of a Red Team, or an application security practitioner, this extension is designed to enhance your efficiency and provide valuable insights.
Key Features:
In-Browser Runtime Scanning: PTK offers Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning right within your browser. Detect SQL Injections, Command Line Injections, Stored and Reflected Cross-Site Scripting (XSS) vulnerabilities, and more. It even identifies complex threats like SQL Authentication Bypass, XPath injections, and JWT attacks.
JWT Inspector: We've added a crucial new feature – JWT Inspector. It empowers you to analyze JSON Web Tokens (JWT), build new tokens, and generate public and private keys for JWT signing. PTK makes easy a lot of JWT attacks including null signature, none algorithm, brute force HMAC secret, key/algorithm confusion, JWK injection, JKU injection, and kid parameter injection.
Insightful Information: Get a one-click access to insightful information about the target application, including its technology stack, Web Application Firewalls (WAFs), security headers, crawled links, and authentication flow.
Proxy with Traffic Log: PTK includes a proxy with a detailed traffic log. This log allows you to repeat any request in the R-Builder or send it to the R-Attacker. You can automate the execution of Cross-Site Scripting (XSS), SQL injection, or OS Command injections.
R-Builder for Request Tampering and Request Smuggling:
The extension includes R-Builder, a powerful tool that allows you to craft and manipulate HTTP requests with precision. Use R-Builder to modify and tamper with requests, enabling you to test the robustness of the application's security. R-Builder empowers you to execute complex maneuvers, including HTTP request smuggling attacks, for a comprehensive assessment of application vulnerabilities. Now with cURL support - copy or paste your cURL request and execute in a second.
Cookie Management: The extension includes a cookie editor, allowing you to manage cookies efficiently. Add, edit, remove, block, protect, export, and import cookies with ease.
Decoder/Encoder Utility: The integrated utility helps you manage encoding and decoding from and to various formats, including UTF-8, Base64, MD5, and more.
Swagger.IO Integration: We've integrated Swagger.IO to enhance your understanding of API documentation. Easily create requests to interact with API endpoints.
Selenium Integration: With Selenium integration, PTK aids in identifying security risks at the early stages of the development cycle, ensuring robust security from the outset.
Enhance your application security practices with PTK, the browser extension that makes your browser smarter. Whether you need to uncover vulnerabilities, analyze JWT tokens, or optimize your security workflow, PTK has got you covered. Try it today and take your application security to the next level.
Read more
Key Features:
In-Browser Runtime Scanning: PTK offers Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning right within your browser. Detect SQL Injections, Command Line Injections, Stored and Reflected Cross-Site Scripting (XSS) vulnerabilities, and more. It even identifies complex threats like SQL Authentication Bypass, XPath injections, and JWT attacks.
JWT Inspector: We've added a crucial new feature – JWT Inspector. It empowers you to analyze JSON Web Tokens (JWT), build new tokens, and generate public and private keys for JWT signing. PTK makes easy a lot of JWT attacks including null signature, none algorithm, brute force HMAC secret, key/algorithm confusion, JWK injection, JKU injection, and kid parameter injection.
Insightful Information: Get a one-click access to insightful information about the target application, including its technology stack, Web Application Firewalls (WAFs), security headers, crawled links, and authentication flow.
Proxy with Traffic Log: PTK includes a proxy with a detailed traffic log. This log allows you to repeat any request in the R-Builder or send it to the R-Attacker. You can automate the execution of Cross-Site Scripting (XSS), SQL injection, or OS Command injections.
R-Builder for Request Tampering and Request Smuggling:
The extension includes R-Builder, a powerful tool that allows you to craft and manipulate HTTP requests with precision. Use R-Builder to modify and tamper with requests, enabling you to test the robustness of the application's security. R-Builder empowers you to execute complex maneuvers, including HTTP request smuggling attacks, for a comprehensive assessment of application vulnerabilities. Now with cURL support - copy or paste your cURL request and execute in a second.
Cookie Management: The extension includes a cookie editor, allowing you to manage cookies efficiently. Add, edit, remove, block, protect, export, and import cookies with ease.
Decoder/Encoder Utility: The integrated utility helps you manage encoding and decoding from and to various formats, including UTF-8, Base64, MD5, and more.
Swagger.IO Integration: We've integrated Swagger.IO to enhance your understanding of API documentation. Easily create requests to interact with API endpoints.
Selenium Integration: With Selenium integration, PTK aids in identifying security risks at the early stages of the development cycle, ensuring robust security from the outset.
Enhance your application security practices with PTK, the browser extension that makes your browser smarter. Whether you need to uncover vulnerabilities, analyze JWT tokens, or optimize your security workflow, PTK has got you covered. Try it today and take your application security to the next level.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "author": "Denis Podgurskii", "name": "OWASP Penetration Testing Kit", "short_name": "OWASP PTK", "description": "OWASP Penetration Testing Kit", "version": "8.9.3", "manifest_version": 3, "incognito": "split", "background": { "service_worker": "app.js", "type": "module" }, "content_security_policy": { "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals;" }, "sandbox": { "pages": [ "ptk/browser/showhtml.html" ] }, "content_scripts": [ { "matches": [ "" ], "js": [ "ptk/packages/browser-polyfill/browser-polyfill.min.js" ], "all_frames": true, "run_at": "document_start", "match_about_blank": true }, { "matches": [ "" ], "js": [ "ptk/content.js" ], "all_frames": true, "run_at": "document_start", "match_about_blank": true } ], "permissions": [ "activeTab", "cookies", "notifications", "storage", "unlimitedStorage", "tabs", "webRequest", "background", "debugger", "scripting", "declarativeNetRequest", "declarativeNetRequestWithHostAccess" ], "host_permissions": [ "", "*://*/*" ], "icons": { "128": "ptk/browser/assets/images/icon.png" }, "action": { "default_icon": { "128": "ptk/browser/assets/images/icon.png" }, "default_title": "OWASP Penetration Testing Kit", "default_popup": "ptk/browser/index.html" }, "options_ui": { "page": "ptk/browser/settings.html", "open_in_tab": false }, "web_accessible_resources": [ { "resources": [ "ptk/*.js", "ptk/*.map", "ptk/*.png", "ptk/*.json" ], "matches": [ "" ] } ]}
Read more
Similar Extensions
Hack-Tools 20,000+ 27 ★ 1.61MiB
HackBar 20,000+ 52 ★ 1.56MiB
Vulners Web Scanner 20,000+ 20 ★ 534KiB
XSS 20,000+ 6 ★ 232KiB
Admin tools 20,000+ 1 ★ 62.79KiB
Cyber Web Tools 20,000+ 6 ★ 340KiB
OSIRIS: OSINT Reputation Intelligent Search 20,000+ 2 ★ 10.79KiB
ZoomEye Tools 20,000+ 6 ★ 583KiB
YesWeHack VDP Finder 20,000+ 2 ★ 88.31KiB
Display Access Keys 20,000+ 3 ★ 6.56KiB
h4ck3r 20,000+ 1 ★ 178KiB
Bishop Vulnerability Scanner 20,000+ 12 ★ 198KiB
Plugin Vulnerabilities 20,000+ 1 ★ 9.98KiB
Breakbot 20,000+ 5 ★ 141KiB
CounterXSS 20,000+ 3 ★ 98.96KiB
Tracy 20,000+ 2 ★ 899KiB
Port Checker Tool 20,000+ 1 ★ 11.83KiB
Pulsedive Threat Intelligence 20,000+ 30 ★ 18.48MiB
Shodan 20,000+ 136 ★ 27.6KiB
Hackers toolkit 20,000+ 25 ★ 211KiB
FOFA Pro View 20,000+ 11 ★ 887KiB
XSS辅助工具 20,000+ 0 ★ 6.18KiB
X情报查询助手 20,000+ 5 ★ 463KiB
Gotanda 20,000+ 1 ★ 8.96KiB
User reviews
Chico GPT (ID: 00000008c5e55d59) Voted 5 ★ - Updated 06/02/2023
Bug Bounty (ID: 000000a465002b3b) Voted 5 ★ - Updated 03/05/2023
Benewendel Freitas (ID: 0000001d115fe9fe) Voted 2 ★ - Updated 02/11/2023
Anthony Mcqueen (ID: 000000be99c09f3f) Voted 3 ★ - Updated 12/30/2022
Dan Ramirez (ID: 0000005b1e95e5bd) Voted 5 ★ - Updated 12/05/2022
