PyCript
grpc-pentest-suite
| PyCript | grpc-pentest-suite | |
|---|---|---|
| 5 | 1 | |
| 174 | 128 | |
| - | - | |
| 7.8 | 7.7 | |
| 4 months ago | about 1 month ago | |
| Python | Python | |
| MIT License | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
PyCript
- New Release PyCript Burp Suite Extension v0.3
- PyCript 0.2: Burp Suite extension for bypassing client and server side. Allowing you to write your own custom logic in Python, JavaScript and Java.
- Release 0.2 · PyCript BurpSuite Extension
- PyCript is a Burp Suite extension to bypass client-side encryption that supports both manual and automated testing such as Scanners, Intruder, or SQLMAP. Custom encryption logic can be written in NodeJS to support any encryption within BurpSuite
- I developed a Burp Suite extension to bypass client-side encryption that supports manual and automated testing such as Scanners, Intruder, or SQLMAP. Custom encryption logic can be written in NodeJS and JavaScript to support any encryption within BurpSuite
grpc-pentest-suite
-
Firebase with GCP Cloud Armor
Rate limiting on the web app level using WAF would block malicious traffic to Firebase Hosting but still would allow the traffic to Firestore since the calls are going to googleapi domain with our firebase project details. An authenticated actor with intent can utilise tools and make repeated grcp calls and crack the nuts out of firebase billing. Hope the Firebase team provide some sort of custom rate-limiting functionality for Firestore through GCP sometime in future.
What are some alternatives?
Pentest-Mapper - A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities
mongoaudit - 🔥 A powerful MongoDB auditing and pentesting tool 🔥
BurpPro-FastCrawler - The simplest way to integrate your subdomain enum outputs with Burp Pro (Fast Crawler)
burpgpt - A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.
crimson - Web Application Security Testing Tools
Autorize - Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests
Burp2Malleable - Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
AutoPWN-Suite - AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.
licecap - LICEcap simple animated screen capture tool for Windows and OS X
vhs - Your CLI home video recorder 📼
Admin-Panel_Finder - A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)