OWASP Penetration Testing Kit
application security, owasp top 10, browser extension
OWASP Penetration Testing Kit launched on April 5, 2023 with 2 votes. The site was still online in September 2026, 3 years on.
What it does
OWASP Penetration Testing Kit browser supports in-browser runtime DAST and SCA scanning to find SQL Injections, Command Line Injections, XSS vulnerabilities, and even more like SQL Auth Bypass, XPath injections, or JWT attacks
Test authenticated web applications and SPAs from the live browser session with DAST, client-side SAST, in-browser IAST, SCA, request replay and automation.
Does a similar job
all alternatives →
LambdaTest Accessibility Testing Suite2025 · testmuai.com · ▲354Ensure web inclusivity & compliance with just a few clicks.
LambdaTest Chrome Extension2018 · testmuai.com · ▲191Cross browser testing by taking full-page screenshots
Heyhack Scan2022 · auth.heyhack.com · ▲271SaaS pen-testing that surpasses the level of ethical hackers
Browser-based XSS scanner2024 · github.com · ▲57This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…


More dev tools this month
the category →

open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com

Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, April 2023
the whole month →
- G4
Hi HN, Today we’re launching GPT-4 answers on Phind.com, a developer-focused search engine that uses generative AI to browse the web and answer technical questions, complete with code examples and detailed explanations. Unlike vanilla GPT-4, Phind feeds in relevant websites and technical documentation, reducing the model’s hallucination and keeping it up-to-date. To use it, simply enable the “Expert” toggle before doing a search. GPT-4 is making a night-and-day difference in terms of answer quality. For a question like “How can I RLHF a LLaMa model”, Phind in Expert mode delivers a…
AI · 2023 · phind.com



