Professional Community

Pentest Mapper

Pentest Mapper is a Burp Suite extension that integrates the Burp Suite request logging with a custom application testing checklist. The extension provides a straightforward flow for application penetration testing. The extension includes functionalities to allow users to map the flow of the application for pentesting to better analyse the application and its vulnerabilities. The API calls from each flow can be connected with the function or flow name. The extension allows users to map or connect each flow or API to vulnerability with the custom checklist.

Features Summary

  1. Checklist tab
    Allows you to load the custom checklist
  2. API Mapper
    Allows you to keep track of each API call, Flow and Test Cases for each API calls.
  3. Vulnerability
    Allows you to keep track of vulnerabilities, Map each paramter and API call to vulnerability from the Checklist
  4. Config
    Allows you to set Auto save the project or extension data and auto load the checklist

Author

Author

Anof-cyber

Version

Version

1.4

Rating

Rating

Popularity

Popularity

Last updated

Last updated

10 June 2022

Estimated system impact

Estimated system impact

Overall impact: Empty

Memory
Empty
CPU
Empty
General
Empty
Scanner
Empty

You can install BApps directly within Burp, via the BApp Store feature in the Burp Extender tool. You can also download them from here, for offline installation into Burp.

You can view the source code for all BApp Store extensions on our GitHub page.

Follow @BApp_Store on Twitter to receive notifications of all BApp releases and updates.

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.

Go back to BappStore

Note:

Please note that extensions are written by third party users of Burp, and PortSwigger Web Security makes no warranty about their quality or usefulness for any particular purpose.