Hack-Tools
Developer Tools
Likely PaidConfidence 88Platform PayPal
The all in one Red team extension for web pentester
Users
30K
Rating
4.5
Reviews
34
7D Growth
0|0%
Stable signalUnknownHigh-risk permissions
OWASP Penetration Testing Kit
OWASP Penetration Testing Kit
Users20KCurrent public install base
Rating4.8Store average score
Reviews27Public review volume
Manifest versionV3Extension platform version
7-day growth0Net users gained this week
7-day growth rate0%Relative weekly velocity
Preview
7 assetsOWASP Penetration Testing Kit Media preview
Trend
User growth trend
Review user movement across collected snapshots.
User Growth Over Time
Rating trend
7-day rating trend
View collected rating snapshots from the latest 7-day window to assess rating stability.
7-day rating change
Start
4.81
Latest
4.81
7-day rating change
0.00
2026年7月13日2026年7月19日
Growth overview
Daily, weekly, and monthly growth
Compare 1-day, 7-day, and 30-day net growth and growth rate.
1-day growthFlat
00%7-day growthFlat
00%30-day growthFlat
00%Technical snapshot
Version, languages, and crawl freshness
Review publication date, version, supported languages, and crawl timestamps.
Version9.7.0
ManifestV3
Size8.6MiB
Languages1English (United Kingdom)
Published
Store updated
Last crawled
English (United Kingdom)
Overview
Product summary
Review the store description, core capabilities, and common use cases.
The OWASP Penetration Testing Kit (PTK) browser extension is your all-in-one solution for streamlining your daily AppSec tasks. Whether you’re a penetration tester, a Red Team member, or an AppSec practitioner, OWASP PTK enhances your efficiency and provides deep insights into your target application.
Key Features:
Runtime Scanning (DAST & IAST & SAST & SCA):
Perform Dynamic Application Security Testing, Static Analysis, In-Browser IAST and Software Composition Analysis on the fly. Identify SQL injection, command injection, reflected/stored XSS, SQL auth bypass, XPath injections, JWT attacks, and other complex threats.
Static Analysis (SAST):
PTK automatically parses loaded JavaScript, HTML, and CSS right in your browser—before any code ever runs. It flags unsafe patterns like `eval()`, `innerHTML`/`outerHTML` injection, insecure cryptographic calls, missing input sanitization, and common anti-patterns.
Reviews
Recent review snapshot
Inspect the latest comments and rating distribution.
Store average score4.8Chrome Web Store aggregate rating, including ratings without synced review text
Synced text average4.8Average computed only from synced review bodies below
Reviews with text23Synced review bodies
Total ratings / reviews27Chrome Web Store public rating/review count
Store average score: 4.8. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.
Related products
Similar and related extensions
Review related products from the Chrome Web Store detail page.
HackBar
Developer Tools
Likely PaidConfidence 92Platform Stripe
A browser extension for Penetration Testing
Users
80K
Rating
4.2
Reviews
55
7D Growth
0|0%
Vulners Web Scanner
Workflow & Planning
Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!
Users
8K
Rating
4.1
Reviews
23
7D Growth
--|--
Plugin Vulnerabilities
Developer Tools
Likely PaidConfidence 92Platform Stripe
Adds warning message to WordPress Plugin Directory pages when plugins are from developer we have released security advisories for.
Users
413
Rating
5.0
Reviews
1
7D Growth
+23|5.9%
Breakbot
Developer Tools
Quickly add disruptive unicode, naughty strings, and more to your clipboard.
Users
302
Rating
3.8
Reviews
5
7D Growth
+7|2.37%
Pulsedive Threat Intelligence
Tools
Highlight IPs, domains, and URLs on any website to enrich them using Pulsedive's threat intelligence.
Users
2K
Rating
5.0
Reviews
32
7D Growth
--|--
Works on Chrome and other Chrome-based browsers. Sadly, won't work on Arc browser :(
Helpful stuff thanks!
Wonderful extension
JWT Inspector in this extension is fantastic for securing token-based authentication. Easy to use, highly recommended!
Request Attacker impresses with its ability to find XSS and SQL Injection. OWASP PTK, you've got a winner!
Request Builder is a dream for executing modified requests. OWASP PTK nailed it with this one!
Request Builder is a game-changer for crafting and testing modified requests. Kudos!
Request Attacker deserves praise for its efficiency in finding XSS and SQL Injection.
SCA scan with reporting is a valuable asset for comprehensive security checks.
This is a great and amazing extension