anof-cyber / pentest-mapper Goto Github PK

A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities

Home Page: https://anof-cyber.github.io/Pentest-Mapper/

License: Apache License 2.0

Python 97.04% HTML 2.96%

appsec bugbounty burp burp-extensions burp-plugin burpsuite burpsuite-extender burpsuite-tools infosec pentesting

pentest-mapper's Introduction

💫About Me :

Another Security guy creates an average security tool which does not make any sense.

🌐Socials

Tools

Resource

Blogs

📊GitHub Stats :

pentest-mapper's People

Contributors

Stargazers

Watchers

Forkers

portswigger allabouthack thegetch yekutielyehuda sdsan21 ktiyaav yogikortisa mkdirlove md-lost mounishperiasamy soumikhasan696 jamoski3112 orinocoz tonykhoriaty victoryxing126

pentest-mapper's Issues

Sending from API Mapper to Repeater doesn't work.

Describe the bug
Sending request from API Mapper to Repeater doesn't work.

To Reproduce
Steps to reproduce the behavior:

Add item to API mapper.
Right click on it and choose Send request to repeater.
Item is not added to repeater.
In case it was added correctly try to clear all request from repeater and repeat steps. I think it triggers the problem.

Expected behavior
Request is added to repeater.

Desktop (please complete the following information):

OS: Apple M1 Pro 13.4.1

Additional context
Visible error in extension logs:
Traceback (most recent call last): File "/Users/<my_user>/.BurpSuite/bapps/af490ae7e79546fa81a28d8d0b90874e/PentestMapper.py", line 931, in sendRepeaterItem self.callbacks.sendToRepeater(hostname,port, True, request, func) TypeError: sendToRepeater(): 2nd arg can't be coerced to int

[BUG] Sorting based on columns in API Mapper tab results in the Post Body no longer matching what's shown in the Request box

In the below you can see the GET request is selected (line 2) yet in the Request section the PUT body from line 1 is shown

Can't sorting row number more than nine on API Mapper as well as Save TestCases not save on the right row number

Describe the bug
If there is more than nine row on the API Mapper, I can't sorting the row number (minimum/maximum) as well as when Save TestCases it's not saved on the right row number.

To Reproduce
Steps to reproduce the behavior:

Send more than nine row into API Mapper
Now check the functionality of sorting/ordering the SR column will untidy as well when Save TestCases the content will not saved on the right selected row.

Expected behavior
please resolved this bugs behavior

Screenshots

Pentest Mapper version:

Version 1.6.4

[FR] - Might be nice to store the baseline response for each item on the API Mapper tab also.

That way its not lost when you send to repeater and have to go looking for it from the original source (before you sent it to the extension).

Great extension by the way.

Deleting multiple API entries doesn't work as expected

Describe the bug
When deleting entries by multi-selecting with SHIFT when you delete 6 entries only 3 are deleted. Doing so for the remaining 3 only deletes two entries and so on.

Expected behaviour
A delete should delete all the records selected.

Screenshots
Index out of range errors also experienced

Desktop:
Window 10 latest.
Burp v2022.8.2.
Burps own Java

Additional context
Not sure how to resolve this one otherwise would raise a PR myself. Looks like an issue with how the data is being structured.