forked from PortSwigger/pentest-mapper
-
Notifications
You must be signed in to change notification settings - Fork 0
/
BappDescription.html
24 lines (22 loc) · 1.34 KB
/
BappDescription.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
<p>Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the flow of the application for pentesting to better analyse the application and its vulnerabilities. The API calls from each flow can be connected with the function or flow name. The extension allows users to map or connect each flow or API to vulnerability with the custom checklist.</p>
<p>Features Summary</p>
<ol>
<li><strong>Checklist</strong><br>
Allows you to load the custom checklist
</li>
<li><strong>API Mapper</strong><br>
Allows you to keep track of each API call, Flow and Test Cases for each API calls.
</li>
<li><strong>Vulnerability</strong><br>
Allows to keep track of vulnerabilities, Map each paramter and API call to vulnerability from the Checklist and severity
</li>
<li><strong>Config</strong><br>
<ul>
<li>Configure Auto Save timer and directory</li>
<li>Configure Auto Load Checklist</li>
<li>Turn ON/OFF Auto Save</li>
<li>Turn ON/OFF Auto Log Proxy Request for Scope Domain</li>
</ul>
</li>
</ol>
<p>Download the demo checklist file CSV file from <a href="https://github.com/Anof-cyber/Pentest-Mapper/blob/main/Checklist.CSV">here</a></p>