Dr.-Watson

Asset scanner

Automates discovery of website assets and vulnerabilities by matching user-defined regex patterns against Burp Suite responses.

Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sherlock!

GitHub

215 stars
20 watching
28 forks
Language: Python
last commit: almost 7 years ago

Related projects:

RepositoryDescriptionStars
redhuntlabs/burpsuite-asset_discoverIdentifies various asset types in HTTP responses to help find vulnerabilities219
gauravnarwani97/trishulAutomated vulnerability detection tool for web applications235
phefley/burp-javascript-security-extensionA tool that scans web pages for security vulnerabilities in JavaScript resources22
moeinfatehi/backup-finderAn extension for Burp Suite designed to scan webservers for sensitive backup files160
bit4woo/domain_hunterAutomatically discovers and analyzes an organization's online presence667
cys4srl/sensitivediscovererAn extension for Burp Suite to automatically search for sensitive strings in HTTP messages44
vsec7/burpsuite-xkeysAn extension for Burp Suite to identify and extract interesting strings from web pages251
seisvelas/san-scannerAn extension for Burp Suite that helps discover Subject Alt Names in SSL certificates3
thomashartm/burp-aem-scannerAn AEM-focused plugin to detect and automate security checks for Adobe Experience Manager CMS installations74
fcavallarin/burp-dom-scannerAn extension to Burp Suite that scans and crawls Single Page Applications using a Chromium browser100
xnl-h4ck3r/gap-burp-extensionAn extension for Burp Suite that identifies potential security vulnerabilities in web applications by analyzing endpoints, parameters, and generating custom target wordlists.1,278
minamo7sen/burp-js-minerAutomates discovery of secrets and vulnerabilities in static web files54
ricardojba/poi-slingerAutomatically identifies serialization issues in PHP applications by forcing them to perform DNS lookups with serialized objects42
darryllane/blutoTools for gathering information about and exploiting vulnerabilities in domains620
kudoai/duckduckgptAn AI-powered search engine extension that integrates with DuckDuckGo to provide instant responses.211