update tools
hahwul
parent
5eb069e8e3
commit
d72874c690
|
|
@ -19,6 +19,9 @@ This is Cool Extensions collection of Burp suite and ZAP
|
|||
| Type | Name | Description | Popularity | Language |
|
||||
| ---------- | :---------- | :----------: | :----------: | :----------: |
|
||||
| All/ANALYSIS | [HUNT](https://github.com/bugcrowd/HUNT) | Data Driven web hacking Manual testing |  |  |
|
||||
| All/ANALYSIS | [burp-retire-js](https://github.com/h3xstream/burp-retire-js) | Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries. |  |  |
|
||||
| All/ANALYSIS | [csp-auditor](https://github.com/GoSecure/csp-auditor) | Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website |  |  |
|
||||
| All/POC | [http-script-generator](https://github.com/h3xstream/http-script-generator) | ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks) |  |  |
|
||||
| Burp/HISTORY | [BurpSuiteLoggerPlusPlus](https://github.com/nccgroup/BurpSuiteLoggerPlusPlus) | Burp Suite Logger++ |  |  |
|
||||
| ZAP/INTERFACE | [zap-hud](https://github.com/zaproxy/zap-hud) | The OWASP ZAP Heads Up Display (HUD) |  |  |
|
||||
## Contribute and Contributor
|
||||
|
|
|
|||
|
|
@ -5,10 +5,25 @@
|
|||
"Type": "Burp"
|
||||
},
|
||||
"HUNT": {
|
||||
"Type": "All",
|
||||
"Data": "| All/ANALYSIS | [HUNT](https://github.com/bugcrowd/HUNT) | Data Driven web hacking Manual testing |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Type": "All"
|
||||
},
|
||||
"burp-retire-js": {
|
||||
"Data": "| All/ANALYSIS | [burp-retire-js](https://github.com/h3xstream/burp-retire-js) | Burp/ZAP/Maven extension that integrate Retire.js repository to find vulnerable Javascript libraries. |  |  |",
|
||||
"Method": "ANALYSIS",
|
||||
"Type": "All"
|
||||
},
|
||||
"csp-auditor": {
|
||||
"Type": "All",
|
||||
"Data": "| All/ANALYSIS | [csp-auditor](https://github.com/GoSecure/csp-auditor) | Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website |  |  |",
|
||||
"Method": "ANALYSIS"
|
||||
},
|
||||
"http-script-generator": {
|
||||
"Data": "| All/POC | [http-script-generator](https://github.com/h3xstream/http-script-generator) | ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks) |  |  |",
|
||||
"Method": "POC",
|
||||
"Type": "All"
|
||||
},
|
||||
"zap-hud": {
|
||||
"Data": "| ZAP/INTERFACE | [zap-hud](https://github.com/zaproxy/zap-hud) | The OWASP ZAP Heads Up Display (HUD) |  |  |",
|
||||
"Method": "INTERFACE",
|
||||
|
|
|
|||
|
|
@ -20,6 +20,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||
| Army-Knife/BURP | [BurpSuite](https://portswigger.net/burp) | It's Awesome| | |
|
||||
| Army-Knife/ZAP | [zaproxy](https://github.com/zaproxy/zaproxy) | The OWASP ZAP core project |  |  |
|
||||
| Discovery/CRAWL | [Photon](https://github.com/s0md3v/Photon) | Incredibly fast crawler designed for OSINT. |  |  |
|
||||
| Discovery/CRAWL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of "commoncrawl.org" |  |  |
|
||||
| Discovery/CRAWL | [gospider](https://github.com/jaeles-project/gospider) | Gospider - Fast web spider written in Go |  |  |
|
||||
| Discovery/CRAWL | [hakrawler](https://github.com/hakluke/hakrawler) | Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application |  |  |
|
||||
| Discovery/DNS | [DNSDumpster](https://dnsdumpster.com) | Online dns recon & research, find & lookup dns records| | |
|
||||
|
|
|
|||
|
|
@ -139,6 +139,11 @@
|
|||
"Method": "DOMAIN",
|
||||
"Type": "Discovery"
|
||||
},
|
||||
"cc.py": {
|
||||
"Type": "Discovery",
|
||||
"Data": "| Discovery/CRAWL | [cc.py](https://github.com/si9int/cc.py) | Extracting URLs of a specific target based on the results of \"commoncrawl.org\" |  |  |",
|
||||
"Method": "CRAWL"
|
||||
},
|
||||
"dirsearch": {
|
||||
"Data": "| Discovery/FUZZ | [dirsearch](https://github.com/maurosoria/dirsearch) | Web path scanner |  |  |",
|
||||
"Method": "FUZZ",
|
||||
|
|
@ -320,9 +325,9 @@
|
|||
"Type": "Scanner"
|
||||
},
|
||||
"xsser": {
|
||||
"Type": "Scanner",
|
||||
"Data": "| Scanner/XSS | [xsser](https://github.com/epsylon/xsser) | Cross Site \"Scripter\" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. |  |  |",
|
||||
"Method": "XSS"
|
||||
"Method": "XSS",
|
||||
"Type": "Scanner"
|
||||
},
|
||||
"ysoserial": {
|
||||
"Data": "| Utility/VULN | [ysoserial](https://github.com/frohoff/ysoserial) | A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |  |  |",
|
||||
|
|
|
|||
Loading…
Reference in New Issue