Adding great pentester plugins

As web application testers, you will find handy tools to add to your repertoire to make your assessments more efficient. The Burp Suite community offers many wonderful extensions. In this recipe, we will add a couple of them and explain how they can make your assessments better. Get All Params (GAP) and Software Vulnerability Scanner are the two plugins we will add to Burp Suite and use with the passive scanner.

Note

Both plugins require the Burp Suite Professional version.

Getting ready

Using the OWASP Mutillidae II application, we will add two handy extensions that will help us find more vulnerabilities in our target.

How to do it...

1. The first extension, GAP-Burp-Extension, is available at the following GitHub repository: https://github.com/xnl-h4ck3r/GAP-Burp-Extension. Install Git on Linux or Git for Windows (https://gitforwindows.org/). Then, using the git clone https://github.com/xnl-h4ck3r/GAP-Burp-Extension.git command,...