OWASP Penetration Testing Kit

Penetration Testing Kit is an extension for application security practitioners, penetration testers, and red teams.

OWASP Penetration Testing Kit: Penetration Testing Tool

The 'OWASP Penetration Testing Kit' is a Firefox add-on built for application security practitioners, penetration testers, and Red Teams. It comes with features like In-Browser Runtime Scanning, JWT Inspector, Proxy with Traffic Log, and a Traffic Manipulation tool. The add-on helps discover security vulnerabilities right from your browser, making routine security tasks simpler and efficient.

Add-on stats

Users: 1,706
-55
Rating: 4.69
(13)
Version: 8.9.2 (Last updated: 2024-05-05)
Creation date: 2020-10-14
Weekly download count: 97
Firefox on Android: No
Risk impact: High risk impact
Risk likelihood:
Manifest version: 2
Permissions:
  • <all_urls>
  • activeTab
  • cookies
  • notifications
  • storage
  • unlimitedStorage
  • tabs
  • webRequest
  • webRequestBlocking
  • scripting
Size: 7.51M

Other platforms

OWASP Penetration Testing Kit (v8.9.3)
4.81 (43) 20,000
Not available on Android
OWASP Penetration Testing Kit (v8.9.3)
4.80 (24) 5,946
Want to check extension ranking and stats more quickly for other Firefox add-ons? Install Chrome-Stats extension to view Firefox-Stats data as you browse the Firefox Browser Add-ons.

Add-on summary

The Penetration Testing Kit (PTK) browser extension is your all-in-one solution for streamlining your daily tasks in the realm of application security. Whether you're a penetration tester, a member of a Red Team, or an application security practitioner, this extension is designed to enhance your efficiency and provide valuable insights.

Key Features: In-Browser Runtime Scanning: PTK offers Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA) scanning right within your browser. Detect SQL Injections, Command Line Injections, Stored and Reflected Cross-Site Scripting (XSS) vulnerabilities, and more. It even identifies complex threats like SQL Authentication Bypass, XPath injections, and JWT attacks.

JWT Inspector: We've added a crucial new feature – JWT Inspector. It empowers you to analyze JSON Web Tokens (JWT), build new tokens, and generate public and private keys for JWT signing. PTK makes easy a lot of JWT attacks including null signature, none algorithm, brute force HMAC secret, key/algorithm confusion, JWK injection, JKU injection, and kid parameter injection.

Insightful Information: Get a one-click access to insightful information about the target application, including its technology stack, Web Application Firewalls (WAFs), security headers, crawled links, and authentication flow.

Proxy with Traffic Log: PTK includes a proxy with a detailed traffic log. This log allows you to repeat any request in the R-Builder or send it to the R-Attacker. You can automate the execution of Cross-Site Scripting (XSS), SQL injection, or OS Command injections.

R-Builder for Request Tampering and Request Smuggling: The extension includes R-Builder, a powerful tool that allows you to craft and manipulate HTTP requests with precision. Use R-Builder to modify and tamper with requests, enabling you to test the robustness of the application's security. R-Builder empowers you to execute complex maneuvers, including HTTP request smuggling attacks, for a comprehensive assessment of application vulnerabilities.

Cookie Management: The extension includes a cookie editor, allowing you to manage cookies efficiently. Add, edit, remove, block, protect, export, and import cookies with ease.

See more

User reviews

These summaries are automatically generated weekly using AI based on recent user reviews. Firefox Browser Add-ons does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.
Pros
  • Powerful tool for penetration testers
  • User-friendly Request Builder
  • Greatly improves productivity
  • Unique functionality
  • Meets user expectations
Cons
  • Requests permission to read sensitive information
  • Issues with initial loading or blank window
  • Bugs preventing access on some systems
Most mentioned
  • Powerful tool
  • User-friendly
  • Initial loading issues
  • Unique functionality
  • Permission requests
User reviews
by Marti, 2024-09-16

very powerful
by brkan, 2024-07-02
View all user reviews

Add-on safety

Risk impact

OWASP Penetration Testing Kit requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk likelihood

OWASP Penetration Testing Kit is probably trust-worthy. Prefer other publishers if available. Exercise caution when installing this add-on.

Upgrade to see risk analysis details