BurpSuite-Asset_Discover

Asset scanner

Identifies various asset types in HTTP responses to help find vulnerabilities

Burp Suite extension to discover assets from HTTP response.

GitHub

219 stars
12 watching
50 forks
Language: Python
last commit: over 3 years ago
asset-discoveryosintpentesting

Related projects:

Repository Description Stars
bugcrowd/hunt An extension for Burp Suite that provides a structured approach to identifying and testing common vulnerability parameters. 2,183
xnl-h4ck3r/gap-burp-extension An extension for Burp Suite that identifies potential security vulnerabilities in web applications by analyzing endpoints, parameters, and generating custom target wordlists. 1,253
contrast-security-oss/burptrast Automates vulnerability assessment and endpoint discovery for web applications using Contrast Security's Teamserver API. 16
codewatchorg/burp-indicatorsofvulnerability A Burp extension that scans application traffic for signs of vulnerabilities and potential attack targets 41
gauravnarwani97/trishul Automated vulnerability detection tool for web applications 234
gaberust/burp_asset_saver An extension for Burp Suite to save previously loaded assets from HTTP requests and responses. 3
vulnerscom/burp-vulners-scanner A tool that searches for vulnerabilities in web applications using an external API 834
secdec/attack-surface-detector-burp Identifies web app endpoints and parameters to help detect vulnerabilities 98
prodigysml/dr.-watson Automates discovery of website assets and vulnerabilities by matching user-defined regex patterns against Burp Suite responses. 214
h3xstream/burp-retire-js A tool that integrates with Burp and ZAP to identify vulnerable JavaScript libraries 200
initroot/burpsqltruncsanner Automatically scans endpoints for potential SQL Truncation vulnerabilities by fuzzing request parameters 61
moeinfatehi/backup-finder An extension for Burp Suite designed to scan webservers for sensitive backup files 160
attackercan/burp-xss-sql-plugin Automated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications. 44
daffainfo/match-replace-burp A collection of Burp Suite rules for identifying and exploiting vulnerabilities in web applications 338
redguard/sheet-intruder A tool designed to automatically identify and report sensitive data in plain text within source code repositories. 2