OWASP Penetration Testing Kit

Latest Version

Version
8.9.3
Update
May 6, 2024
Size
7.14MiB
Developer
pentestkit.co.uk
Category
Users
20,000+
Rating
4.81395 ★
Manifest Version
3
Web Store Status
Languages Support
English (UK)
See more
Permissions
ActiveTab
Cookies
Notifications
Storage
UnlimitedStorage
Tabs
WebRequest
Background
Debugger
Scripting
DeclarativeNetRequest
DeclarativeNetRequestWithHostAccess
See more

OWASP Penetration Testing Kit Extension

The Penetration Testing Kit (PTK) browser extension is your all-in-one solution for streamlining your daily tasks in the realm of application security. Whether you're a penetration tester, a member of a Red Team, or an application security practitioner, this extension is designed to enhance your efficiency and provide valuable insights.

Key Features:
In-Browser Runtime Scanning: PTK offers Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning right within your browser. Detect SQL Injections, Command Line Injections, Stored and Reflected Cross-Site Scripting (XSS) vulnerabilities, and more. It even identifies complex threats like SQL Authentication Bypass, XPath injections, and JWT attacks.

JWT Inspector: We've added a crucial new feature – JWT Inspector. It empowers you to analyze JSON Web Tokens (JWT), build new tokens, and generate public and private keys for JWT signing. PTK makes easy a lot of JWT attacks including null signature, none algorithm, brute force HMAC secret, key/algorithm confusion, JWK injection, JKU injection, and kid parameter injection.

Insightful Information: Get a one-click access to insightful information about the target application, including its technology stack, Web Application Firewalls (WAFs), security headers, crawled links, and authentication flow.

Proxy with Traffic Log: PTK includes a proxy with a detailed traffic log. This log allows you to repeat any request in the R-Builder or send it to the R-Attacker. You can automate the execution of Cross-Site Scripting (XSS), SQL injection, or OS Command injections.

R-Builder for Request Tampering and Request Smuggling:
The extension includes R-Builder, a powerful tool that allows you to craft and manipulate HTTP requests with precision. Use R-Builder to modify and tamper with requests, enabling you to test the robustness of the application's security. R-Builder empowers you to execute complex maneuvers, including HTTP request smuggling attacks, for a comprehensive assessment of application vulnerabilities. Now with cURL support - copy or paste your cURL request and execute in a second.

Cookie Management: The extension includes a cookie editor, allowing you to manage cookies efficiently. Add, edit, remove, block, protect, export, and import cookies with ease.
Decoder/Encoder Utility: The integrated utility helps you manage encoding and decoding from and to various formats, including UTF-8, Base64, MD5, and more.
Swagger.IO Integration: We've integrated Swagger.IO to enhance your understanding of API documentation. Easily create requests to interact with API endpoints.

Selenium Integration: With Selenium integration, PTK aids in identifying security risks at the early stages of the development cycle, ensuring robust security from the outset.

Enhance your application security practices with PTK, the browser extension that makes your browser smarter. Whether you need to uncover vulnerabilities, analyze JWT tokens, or optimize your security workflow, PTK has got you covered. Try it today and take your application security to the next level.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "author": "Denis Podgurskii", "name": "OWASP Penetration Testing Kit", "short_name": "OWASP PTK", "description": "OWASP Penetration Testing Kit", "version": "8.9.3", "manifest_version": 3, "incognito": "split", "background": { "service_worker": "app.js", "type": "module" }, "content_security_policy": { "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals;" }, "sandbox": { "pages": [ "ptk/browser/showhtml.html" ] }, "content_scripts": [ { "matches": [ "" ], "js": [ "ptk/packages/browser-polyfill/browser-polyfill.min.js" ], "all_frames": true, "run_at": "document_start", "match_about_blank": true }, { "matches": [ "" ], "js": [ "ptk/content.js" ], "all_frames": true, "run_at": "document_start", "match_about_blank": true } ], "permissions": [ "activeTab", "cookies", "notifications", "storage", "unlimitedStorage", "tabs", "webRequest", "background", "debugger", "scripting", "declarativeNetRequest", "declarativeNetRequestWithHostAccess" ], "host_permissions": [ "", "*://*/*" ], "icons": { "128": "ptk/browser/assets/images/icon.png" }, "action": { "default_icon": { "128": "ptk/browser/assets/images/icon.png" }, "default_title": "OWASP Penetration Testing Kit", "default_popup": "ptk/browser/index.html" }, "options_ui": { "page": "ptk/browser/settings.html", "open_in_tab": false }, "web_accessible_resources": [ { "resources": [ "ptk/*.js", "ptk/*.map", "ptk/*.png", "ptk/*.json" ], "matches": [ "" ] } ]}
Read more

How to download and manually install OWASP Penetration Testing Kit extension for Chrome

Looking for a way to install OWASP Penetration Testing Kit extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install OWASP Penetration Testing Kit extensions manually, this article outlines two simple methods to effortlessly install OWASP Penetration Testing Kit extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download OWASP Penetration Testing Kit extension and manually install through Drag &Drop

If you ever need to manually install a OWASP Penetration Testing Kit extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the OWASP Penetration Testing Kit Extension by clicking the "Download CRX" button on the website.

Look for the OWASP Penetration Testing Kit extension you wish to install. Go to the website and download the OWASP Penetration Testing Kit extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for OWASP Penetration Testing Kit extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the OWASP Penetration Testing Kit extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download OWASP Penetration Testing Kit extension for Chrome and install in Developer Mode

This is another method to install OWASP Penetration Testing Kit extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the OWASP Penetration Testing Kit extension file

Select and download the OWASP Penetration Testing Kit extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the OWASP Penetration Testing Kit extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your OWASP Penetration Testing Kit extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the OWASP Penetration Testing Kit extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install OWASP Penetration Testing Kit extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Hack-Tools Extension · Developer Tools 20,000+ 27 ★ 1.61MiB

icon

HackBar Extension · Developer Tools 20,000+ 52 ★ 1.56MiB

icon

Vulners Web Scanner Extension · Productivity 20,000+ 20 ★ 534KiB

icon

XSS Extension · Developer Tools 20,000+ 6 ★ 232KiB

icon

Admin tools Extension · Developer Tools 20,000+ 1 ★ 62.79KiB

icon

Cyber Web Tools Extension · Developer Tools 20,000+ 6 ★ 340KiB

icon

OSIRIS: OSINT Reputation Intelligent Search Extension · Productivity 20,000+ 2 ★ 10.79KiB

icon

ZoomEye Tools Extension · Developer Tools 20,000+ 6 ★ 583KiB

icon

YesWeHack VDP Finder Extension · Productivity 20,000+ 2 ★ 88.31KiB

icon

Display Access Keys Extension · Accessibility 20,000+ 3 ★ 6.56KiB

icon

h4ck3r Extension · Developer Tools 20,000+ 1 ★ 178KiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 20,000+ 12 ★ 198KiB

icon

Plugin Vulnerabilities Extension · Developer Tools 20,000+ 1 ★ 9.98KiB

icon

Breakbot Extension · Developer Tools 20,000+ 5 ★ 141KiB

icon

CounterXSS Extension · Accessibility 20,000+ 3 ★ 98.96KiB

icon

Tracy Extension · Developer Tools 20,000+ 2 ★ 899KiB

icon

Port Checker Tool Extension · Developer Tools 20,000+ 1 ★ 11.83KiB

icon

Pulsedive Threat Intelligence Extension · Productivity 20,000+ 30 ★ 18.48MiB

icon

Shodan Extension · Productivity 20,000+ 136 ★ 27.6KiB

icon

Hackers toolkit Extension · Developer Tools 20,000+ 25 ★ 211KiB

icon

FOFA Pro View Extension · Productivity 20,000+ 11 ★ 887KiB

icon

XSS辅助工具 Extension · Developer Tools 20,000+ 0 ★ 6.18KiB

icon

X情报查询助手 Extension · Productivity 20,000+ 5 ★ 463KiB

icon

Gotanda Extension · Productivity 20,000+ 1 ★ 8.96KiB

User reviews

icon

Chico GPT (ID: 00000008c5e55d59) Voted 5 ★ - Updated 06/02/2023 like a mini Burp Suite,

icon

Bug Bounty (ID: 000000a465002b3b) Voted 5 ★ - Updated 03/05/2023 Great tool! Like in-browser Burp.

icon

Benewendel Freitas (ID: 0000001d115fe9fe) Voted 2 ★ - Updated 02/11/2023 Infelizmente a ferramenta não funciona como se propõe. Varias funcionalidades não entregam o que deveriam ou apresentam Bugs.

icon

Anthony Mcqueen (ID: 000000be99c09f3f) Voted 3 ★ - Updated 12/30/2022 I have used many tools some were good while others were just all hype. This tool was okay there are still some issues for me personally i am having. I hope i can fix these issues so i can continue to hunt for those bugs that are critical.

icon

Dan Ramirez (ID: 0000005b1e95e5bd) Voted 5 ★ - Updated 12/05/2022 no funciona al hacer clic en la extensión