OWASP Penetration Testing Kit
OWASP Penetration Testing Kit Extension
Key Features:
In-Browser Runtime Scanning: PTK offers Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning right within your browser. Detect SQL Injections, Command Line Injections, Stored and Reflected Cross-Site Scripting (XSS) vulnerabilities, and more. It even identifies complex threats like SQL Authentication Bypass, XPath injections, and JWT attacks.
JWT Inspector: We've added a crucial new feature – JWT Inspector. It empowers you to analyze JSON Web Tokens (JWT), build new tokens, and generate public and private keys for JWT signing. PTK makes easy a lot of JWT attacks including null signature, none algorithm, brute force HMAC secret, key/algorithm confusion, JWK injection, JKU injection, and kid parameter injection.
Insightful Information: Get a one-click access to insightful information about the target application, including its technology stack, Web Application Firewalls (WAFs), security headers, crawled links, and authentication flow.
Proxy with Traffic Log: PTK includes a proxy with a detailed traffic log. This log allows you to repeat any request in the R-Builder or send it to the R-Attacker. You can automate the execution of Cross-Site Scripting (XSS), SQL injection, or OS Command injections.
R-Builder for Request Tampering and Request Smuggling:
The extension includes R-Builder, a powerful tool that allows you to craft and manipulate HTTP requests with precision. Use R-Builder to modify and tamper with requests, enabling you to test the robustness of the application's security. R-Builder empowers you to execute complex maneuvers, including HTTP request smuggling attacks, for a comprehensive assessment of application vulnerabilities. Now with cURL support - copy or paste your cURL request and execute in a second.
Cookie Management: The extension includes a cookie editor, allowing you to manage cookies efficiently. Add, edit, remove, block, protect, export, and import cookies with ease.
Decoder/Encoder Utility: The integrated utility helps you manage encoding and decoding from and to various formats, including UTF-8, Base64, MD5, and more.
Swagger.IO Integration: We've integrated Swagger.IO to enhance your understanding of API documentation. Easily create requests to interact with API endpoints.
Selenium Integration: With Selenium integration, PTK aids in identifying security risks at the early stages of the development cycle, ensuring robust security from the outset.
Enhance your application security practices with PTK, the browser extension that makes your browser smarter. Whether you need to uncover vulnerabilities, analyze JWT tokens, or optimize your security workflow, PTK has got you covered. Try it today and take your application security to the next level.
Source Manifest.json
How to download and manually install OWASP Penetration Testing Kit extension for Chrome
Looking for a way to install OWASP Penetration Testing Kit extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.
However, you may need to install OWASP Penetration Testing Kit extensions manually, this article outlines two simple methods to effortlessly install OWASP Penetration Testing Kit extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.
Method 1: Download OWASP Penetration Testing Kit extension and manually install through Drag &Drop
If you ever need to manually install a OWASP Penetration Testing Kit extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.
Step 1: Download the OWASP Penetration Testing Kit Extension by clicking the "Download CRX" button on the website.
Look for the OWASP Penetration Testing Kit extension you wish to install. Go to the website and download the OWASP Penetration Testing Kit extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for OWASP Penetration Testing Kit extension that contains all the data.
Step 2: Extract &Arrange Files
Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.
Step 3: Go to the Chrome Extensions Page
Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.
Step 4: Drag and Drop the Extension
Now, go to the folder where you extracted the OWASP Penetration Testing Kit extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.
Step 5: Complete the Installation
Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.
Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.
Method 2: Download OWASP Penetration Testing Kit extension for Chrome and install in Developer Mode
This is another method to install OWASP Penetration Testing Kit extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.
Step 1: Download the OWASP Penetration Testing Kit extension file
Select and download the OWASP Penetration Testing Kit extension by clicking the 'Download CRX' button on the website.
Step 2: Extract the downloaded contents
Convert the file to a ZIP file if it is in CRX format then extract the OWASP Penetration Testing Kit extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your OWASP Penetration Testing Kit extension running.
Step 3: Open Chrome Extension Setting Page
In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.
Step 4: Enable Developer Mode
After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.
Step 5: Load the Unpacked Extension
Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."
Step 6: Select the Extension Folder
Once the pop-up opens upon clicking Load unpacked, select the OWASP Penetration Testing Kit extension directory and click on the "Select Folder "button.
Step 7: Confirm and Install
After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.
Conclusion
Here we've made a step-by-step guide on How to manually install OWASP Penetration Testing Kit extension in 2 ways. We hope this guide proves helpful.
Similar Extensions
Hack-Tools 20,000+ 27 ★ 1.61MiB
HackBar 20,000+ 52 ★ 1.56MiB
Vulners Web Scanner 20,000+ 20 ★ 534KiB
XSS 20,000+ 6 ★ 232KiB
Admin tools 20,000+ 1 ★ 62.79KiB
Cyber Web Tools 20,000+ 6 ★ 340KiB
OSIRIS: OSINT Reputation Intelligent Search 20,000+ 2 ★ 10.79KiB
ZoomEye Tools 20,000+ 6 ★ 583KiB
YesWeHack VDP Finder 20,000+ 2 ★ 88.31KiB
Display Access Keys 20,000+ 3 ★ 6.56KiB
h4ck3r 20,000+ 1 ★ 178KiB
Bishop Vulnerability Scanner 20,000+ 12 ★ 198KiB
Plugin Vulnerabilities 20,000+ 1 ★ 9.98KiB
Breakbot 20,000+ 5 ★ 141KiB
CounterXSS 20,000+ 3 ★ 98.96KiB
Tracy 20,000+ 2 ★ 899KiB
Port Checker Tool 20,000+ 1 ★ 11.83KiB
Pulsedive Threat Intelligence 20,000+ 30 ★ 18.48MiB
Shodan 20,000+ 136 ★ 27.6KiB
Hackers toolkit 20,000+ 25 ★ 211KiB
FOFA Pro View 20,000+ 11 ★ 887KiB
XSS辅助工具 20,000+ 0 ★ 6.18KiB
X情报查询助手 20,000+ 5 ★ 463KiB
Gotanda 20,000+ 1 ★ 8.96KiB
User reviews
Chico GPT (ID: 00000008c5e55d59) Voted 5 ★ - Updated 06/02/2023
Bug Bounty (ID: 000000a465002b3b) Voted 5 ★ - Updated 03/05/2023
Benewendel Freitas (ID: 0000001d115fe9fe) Voted 2 ★ - Updated 02/11/2023
Anthony Mcqueen (ID: 000000be99c09f3f) Voted 3 ★ - Updated 12/30/2022
Dan Ramirez (ID: 0000005b1e95e5bd) Voted 5 ★ - Updated 12/05/2022