distribute readme
hahwul
parent
43f52359f7
commit
12c5a9c9bd
|
|
@ -18,21 +18,26 @@ This is Cool Extensions collection of Burp suite and ZAP
|
|||
## Cool Extensions
|
||||
| Type | Name | Description | Popularity | Language |
|
||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||
| All/ANALYSIS | [HUNT](https://github.com/bugcrowd/HUNT) | Data Driven web hacking Manual testing |  |  |
|
||||
| All/ANALYSIS | [burp-retire-js](https://github.com/h3xstream/burp-retire-js) | Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries. |  |  |
|
||||
| All/ANALYSIS | [csp-auditor](https://github.com/GoSecure/csp-auditor) | Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website |  |  |
|
||||
| All/POC | [http-script-generator](https://github.com/h3xstream/http-script-generator) | ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks) |  |  |
|
||||
| Burp/ANALYSIS | [Autorize](https://github.com/Quitten/Autorize) | Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests |  |  |
|
||||
| Burp/ANALYSIS | [burp-send-to](https://github.com/bytebutcher/burp-send-to) | Adds a customizable "Send to..."-context-menu to your BurpSuite. |  |  |
|
||||
| Burp/ANALYSIS | [collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere) | A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator |  |  |
|
||||
| Burp/ANALYSIS | [http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) | Testing HTTP Request Smuggling and Desync Attack |  |  |
|
||||
| Burp/ANALYSIS | [param-miner](https://github.com/PortSwigger/param-miner) | Parameter mining on Burpsuite |  |  |
|
||||
| Burp/ANALYSIS | [reflected-parameters](https://github.com/PortSwigger/reflected-parameters) | Find reflected parameter on Burpsuite |  |  |
|
||||
| Burp/ANALYSIS | [taborator](https://github.com/hackvertor/taborator) | A Burp extension to show the Collaborator client in a tab |  |  |
|
||||
| Burp/ANALYSIS | [turbo-intruder](https://github.com/PortSwigger/turbo-intruder) | Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. |  |  |
|
||||
| All/CODE | [http-script-generator](https://github.com/h3xstream/http-script-generator) | ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks) |  |  |
|
||||
| All/PASV | [HUNT](https://github.com/bugcrowd/HUNT) | Data Driven web hacking Manual testing |  |  |
|
||||
| All/PASV | [burp-retire-js](https://github.com/h3xstream/burp-retire-js) | Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries. |  |  |
|
||||
| All/PASV | [csp-auditor](https://github.com/GoSecure/csp-auditor) | Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website |  |  |
|
||||
| Burp/ACTIVE | [http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) | Testing HTTP Request Smuggling and Desync Attack |  |  |
|
||||
| Burp/ACTIVE | [param-miner](https://github.com/PortSwigger/param-miner) | Parameter mining on Burpsuite |  |  |
|
||||
| Burp/ACTIVE | [turbo-intruder](https://github.com/PortSwigger/turbo-intruder) | Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. |  |  |
|
||||
| Burp/BYPASS | [BurpSuiteHTTPSmuggler](https://github.com/nccgroup/BurpSuiteHTTPSmuggler) | A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques |  |  |
|
||||
| Burp/CALLBACK | [taborator](https://github.com/hackvertor/taborator) | A Burp extension to show the Collaborator client in a tab |  |  |
|
||||
| Burp/CODE | [burp-exporter](https://github.com/artssec/burp-exporter) | Exporter is a Burp Suite extension to copy a request to the clipboard as multiple programming languages functions. |  |  |
|
||||
| Burp/EXPORT | [burp-send-to](https://github.com/bytebutcher/burp-send-to) | Adds a customizable "Send to..."-context-menu to your BurpSuite. |  |  |
|
||||
| Burp/HISTORY | [BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus) | Burp Suite Logger++ |  |  |
|
||||
| Burp/PASV | [Autorize](https://github.com/Quitten/Autorize) | Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests |  |  |
|
||||
| Burp/PASV | [BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder) | Burp Extension for a passive scanning JS files for endpoint links. |  |  |
|
||||
| Burp/PASV | [auto-repeater](https://github.com/PortSwigger/auto-repeater) | Automated HTTP Request Repeating With Burp Suite |  |  |
|
||||
| Burp/PASV | [collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere) | A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator |  |  |
|
||||
| Burp/PASV | [femida](https://github.com/wish-i-was/femida) | Automated blind-xss search for Burp Suite |  |  |
|
||||
| Burp/PASV | [reflected-parameters](https://github.com/PortSwigger/reflected-parameters) | Find reflected parameter on Burpsuite |  |  |
|
||||
| Burp/REPEAT | [IntruderPayloads](https://github.com/1N3/IntruderPayloads) | A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists. |  |  |
|
||||
| Burp/REPEAT | [Stepper](https://github.com/CoreyD97/Stepper) | A natural evolution of Burp Suite's Repeater tool |  |  |
|
||||
| ZAP/INTERFACE | [zap-hud](https://github.com/zaproxy/zap-hud) | The OWASP ZAP Heads Up Display (HUD) |  |  |
|
||||
## Contribute and Contributor
|
||||
### Usage of add-tool
|
||||
|
|
|
|||
|
|
@ -1,7 +1,12 @@
|
|||
{
|
||||
"Autorize": {
|
||||
"Data": "| Burp/ANALYSIS | [Autorize](https://github.com/Quitten/Autorize) | Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/PASV | [Autorize](https://github.com/Quitten/Autorize) | Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"BurpJSLinkFinder": {
|
||||
"Data": "| Burp/PASV | [BurpJSLinkFinder](https://github.com/InitRoot/BurpJSLinkFinder) | Burp Extension for a passive scanning JS files for endpoint links. |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"BurpSuiteHTTPSmuggler": {
|
||||
|
|
@ -15,63 +20,83 @@
|
|||
"Type": "Burp"
|
||||
},
|
||||
"HUNT": {
|
||||
"Data": "| All/ANALYSIS | [HUNT](https://github.com/bugcrowd/HUNT) | Data Driven web hacking Manual testing |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| All/PASV | [HUNT](https://github.com/bugcrowd/HUNT) | Data Driven web hacking Manual testing |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "All"
|
||||
},
|
||||
"IntruderPayloads": {
|
||||
"Data": "| Burp/REPEAT | [IntruderPayloads](https://github.com/1N3/IntruderPayloads) | A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists. |  |  |",
|
||||
"Method": "REPEAT",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"Stepper": {
|
||||
"Data": "| Burp/REPEAT | [Stepper](https://github.com/CoreyD97/Stepper) | A natural evolution of Burp Suite's Repeater tool |  |  |",
|
||||
"Method": "REPEAT",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"auto-repeater": {
|
||||
"Data": "| Burp/PASV | [auto-repeater](https://github.com/PortSwigger/auto-repeater) | Automated HTTP Request Repeating With Burp Suite |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"burp-exporter": {
|
||||
"Data": "| Burp/CODE | [burp-exporter](https://github.com/artssec/burp-exporter) | Exporter is a Burp Suite extension to copy a request to the clipboard as multiple programming languages functions. |  |  |",
|
||||
"Method": "CODE",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"burp-retire-js": {
|
||||
"Data": "| All/ANALYSIS | [burp-retire-js](https://github.com/h3xstream/burp-retire-js) | Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries. |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| All/PASV | [burp-retire-js](https://github.com/h3xstream/burp-retire-js) | Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries. |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "All"
|
||||
},
|
||||
"burp-send-to": {
|
||||
"Data": "| Burp/ANALYSIS | [burp-send-to](https://github.com/bytebutcher/burp-send-to) | Adds a customizable \"Send to...\"-context-menu to your BurpSuite. |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/EXPORT | [burp-send-to](https://github.com/bytebutcher/burp-send-to) | Adds a customizable \"Send to...\"-context-menu to your BurpSuite. |  |  |",
|
||||
"Method": "EXPORT",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"collaborator-everywhere": {
|
||||
"Data": "| Burp/ANALYSIS | [collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere) | A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/PASV | [collaborator-everywhere](https://github.com/PortSwigger/collaborator-everywhere) | A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"csp-auditor": {
|
||||
"Data": "| All/ANALYSIS | [csp-auditor](https://github.com/GoSecure/csp-auditor) | Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| All/PASV | [csp-auditor](https://github.com/GoSecure/csp-auditor) | Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "All"
|
||||
},
|
||||
"femida": {
|
||||
"Data": "| Burp/PASV | [femida](https://github.com/wish-i-was/femida) | Automated blind-xss search for Burp Suite |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"http-request-smuggler": {
|
||||
"Data": "| Burp/ANALYSIS | [http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) | Testing HTTP Request Smuggling and Desync Attack |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/ACTIVE | [http-request-smuggler](https://github.com/PortSwigger/http-request-smuggler) | Testing HTTP Request Smuggling and Desync Attack |  |  |",
|
||||
"Method": "ACTIVE",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"http-script-generator": {
|
||||
"Data": "| All/POC | [http-script-generator](https://github.com/h3xstream/http-script-generator) | ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks) |  |  |",
|
||||
"Method": "POC",
|
||||
"Data": "| All/CODE | [http-script-generator](https://github.com/h3xstream/http-script-generator) | ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks) |  |  |",
|
||||
"Method": "CODE",
|
||||
"Type": "All"
|
||||
},
|
||||
"param-miner": {
|
||||
"Data": "| Burp/ANALYSIS | [param-miner](https://github.com/PortSwigger/param-miner) | Parameter mining on Burpsuite |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/ACTIVE | [param-miner](https://github.com/PortSwigger/param-miner) | Parameter mining on Burpsuite |  |  |",
|
||||
"Method": "ACTIVE",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"reflected-parameters": {
|
||||
"Data": "| Burp/ANALYSIS | [reflected-parameters](https://github.com/PortSwigger/reflected-parameters) | Find reflected parameter on Burpsuite |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/PASV | [reflected-parameters](https://github.com/PortSwigger/reflected-parameters) | Find reflected parameter on Burpsuite |  |  |",
|
||||
"Method": "PASV",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"taborator": {
|
||||
"Data": "| Burp/ANALYSIS | [taborator](https://github.com/hackvertor/taborator) | A Burp extension to show the Collaborator client in a tab |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/CALLBACK | [taborator](https://github.com/hackvertor/taborator) | A Burp extension to show the Collaborator client in a tab |  |  |",
|
||||
"Method": "CALLBACK",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"turbo-intruder": {
|
||||
"Data": "| Burp/ANALYSIS | [turbo-intruder](https://github.com/PortSwigger/turbo-intruder) | Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Data": "| Burp/ACTIVE | [turbo-intruder](https://github.com/PortSwigger/turbo-intruder) | Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. |  |  |",
|
||||
"Method": "ACTIVE",
|
||||
"Type": "Burp"
|
||||
},
|
||||
"zap-hud": {
|
||||
|
|
|
|||
Loading…
Reference in New Issue