update
hahwul
parent
f519f94eb9
commit
03d6f2dc1d
|
|
@ -43,6 +43,7 @@ This is Cool Extensions collection of Burp suite and ZAP
|
|||
| Burp/REPEAT | [IntruderPayloads](https://github.com/1N3/IntruderPayloads) | A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists. |  |  |
|
||||
| Burp/REPEAT | [Stepper](https://github.com/CoreyD97/Stepper) | A natural evolution of Burp Suite's Repeater tool |  |  |
|
||||
| Burp/SCAN | [BurpBounty](https://github.com/wagiro/BurpBounty) | Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface. |  |  |
|
||||
| Burp/THEME | [BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer) | Because just a dark theme wasn't enough! |  |  |
|
||||
| Burp/UTIL | [safecopy](https://github.com/yashrs/safecopy) | Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be added in the future. |  |  |
|
||||
| ZAP/INTERFACE | [zap-hud](https://github.com/zaproxy/zap-hud) | The OWASP ZAP Heads Up Display (HUD) |  |  |
|
||||
| ZAP/JWT | [owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon) | OWASP ZAP addon for finding vulnerabilities in JWT Implementations |  |  |
|
||||
|
|
|
|||
|
|
@ -14,6 +14,22 @@
|
|||
"Method": "SCAN",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"BurpCustomizer": {
|
||||
"Type": "Burp",
|
||||
"Data": "| Burp/THEME | [BurpCustomizer](https://github.com/CoreyD97/BurpCustomizer) | Because just a dark theme wasn't enough! |  |  |",
|
||||
"Method": "THEME",
|
||||
"Description": "Because just a dark theme wasn't enough!",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
}
|
||||
},
|
||||
"BurpJSLinkFinder": {
|
||||
"Data": "| Burp/PASV | [BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder) | Burp Extension for a passive scanning JS files for endpoint links. |  |  |",
|
||||
"Method": "PASV",
|
||||
|
|
@ -115,9 +131,9 @@
|
|||
"Type": "Burp"
|
||||
},
|
||||
"owasp-zap-jwt-addon": {
|
||||
"Type": "ZAP",
|
||||
"Data": "| ZAP/JWT | [owasp-zap-jwt-addon](https://github.com/SasanLabs/owasp-zap-jwt-addon) | OWASP ZAP addon for finding vulnerabilities in JWT Implementations |  |  |",
|
||||
"Method": "JWT"
|
||||
"Method": "JWT",
|
||||
"Type": "ZAP"
|
||||
},
|
||||
"param-miner": {
|
||||
"Data": "| Burp/ACTIVE | [param-miner](https://github.com/PortSwigger/param-miner) | Parameter mining on Burpsuite |  |  |",
|
||||
|
|
|
|||
|
|
@ -85,6 +85,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||
| Discovery/GQL | [inql](https://github.com/doyensec/inql) | InQL - A Burp Extension for GraphQL Security Testing |  |  |
|
||||
| Discovery/HTTP | [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |  |  |
|
||||
| Discovery/HTTP | [Aron](https://github.com/m4ll0k/Aron) | Aron is a GO script for finding hidden GET & POST parameters |  |  |
|
||||
| Discovery/HTTP | [headi](https://github.com/mlcsec/headi) | Customisable and automated HTTP header injection |  |  |
|
||||
| Discovery/JS | [JSFScan.sh](https://github.com/KathanP19/JSFScan.sh) | Automation for javascript recon in bug bounty. |  |  |
|
||||
| Discovery/JS | [LinkFinder](https://github.com/GerbenJavado/LinkFinder) | A python script that finds endpoints in JavaScript files |  |  |
|
||||
| Discovery/JS | [SecretFinder](https://github.com/m4ll0k/SecretFinder) | SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files |  |  |
|
||||
|
|
|
|||
20
data.json
20
data.json
|
|
@ -1663,6 +1663,22 @@
|
|||
"Windows": ""
|
||||
}
|
||||
},
|
||||
"headi": {
|
||||
"Type": "Discovery",
|
||||
"Data": "| Discovery/HTTP | [headi](https://github.com/mlcsec/headi) | Customisable and automated HTTP header injection |  |  |",
|
||||
"Method": "HTTP",
|
||||
"Description": "Customisable and automated HTTP header injection",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
}
|
||||
},
|
||||
"hetty": {
|
||||
"Data": "| Army-Knife/PROXY | [hetty](https://github.com/dstotijn/hetty) | Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. |  |  |",
|
||||
"Description": "Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.",
|
||||
|
|
@ -1744,15 +1760,15 @@
|
|||
}
|
||||
},
|
||||
"httptoolkit": {
|
||||
"Type": "Army-Knife",
|
||||
"Data": "| Army-Knife/PROXY | [httptoolkit](https://github.com/httptoolkit/httptoolkit) | HTTP Toolkit is a beautiful \u0026 open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux \u0026 Mac |  |  |",
|
||||
"Method": "PROXY",
|
||||
"Description": "HTTP Toolkit is a beautiful \u0026 open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux \u0026 Mac",
|
||||
"Install": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
"Windows": ""
|
||||
},
|
||||
"Method": "PROXY",
|
||||
"Type": "Army-Knife",
|
||||
"Update": {
|
||||
"Linux": "",
|
||||
"MacOS": "",
|
||||
|
|
|
|||
Loading…
Reference in New Issue