https://github.com/radenvodka/pentol

PENTOL - Pentester Toolkit for Fiddler2
https://github.com/radenvodka/pentol

bugbounty exploit exploiting-vulnerabilities fiddler-extension fiddler2 kitploit pentest-tool pentesting security security-tools tools

Last synced: 26 days ago
JSON representation

PENTOL - Pentester Toolkit for Fiddler2

• Host: GitHub
• URL: https://github.com/radenvodka/pentol
• Owner: radenvodka
• Created: 2018-11-23T00:23:44.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2019-04-17T11:39:25.000Z (over 5 years ago)
• Last Synced: 2024-07-16T08:41:14.369Z (5 months ago)
• Topics: bugbounty, exploit, exploiting-vulnerabilities, fiddler-extension, fiddler2, kitploit, pentest-tool, pentesting, security, security-tools, tools
• Language: JavaScript
• Homepage:
• Size: 336 KB
• Stars: 63
• Watchers: 6
• Forks: 20
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-network-stuff - **46**星 - Pentester Toolkit for Fiddler2 (<a id="31d28e8b2cf6c06411cd5d178dbd3e77"></a>fiddler / <a id="b239f12aca7aa942b45836032cbef99a"></a>转换)

README

        
# PENTOL

PENTOL - Pentester Toolkit is built as a plugin for the Fiddler HTTP debugging proxy. 



# Features

``CORS DETECTED`` Cross-Origin Resource Sharing

``CRLF DETECTED`` HTTP response splitting 

``JSON DETECTED`` 

``CSP DETECTED`` 

``Headers DETECTED (X-Frame-Options)`` 

# Modif 

Press Key `CTRL` + `R`  or `Rules` > `Customize Rules...`

Search m_Gojek and m_Tokopedia 

//oSession.utilDecodeResponse();

//oSession.utilReplaceInResponse('36359','401514252112'); 

//oSession.utilReplaceInResponse(' search text ' , 'reaplace' );

# USAGE

- Install [Fiddler2](https://www.telerik.com/download/fiddler/fiddler2)

- Open Fiddler2

- Press Key `CTRL` + `R`  or `Rules` > `Customize Rules...`

- Copy all script [SampleRules.js](https://raw.githubusercontent.com/radenvodka/PENTOL/master/SampleRules.js) 

- Press Key `CTRL` + `S`  for `Save`

Check tools in `Rules TAB`

## Credits

- Thanks to allah

- Eka Syahwan (Creator) [bugrecon](https:/bugrecon.or.id) / [H1](https://hackerone.com/radenvodka) / [bugcrowd](https://bugcrowd.com/radenvodka)

- Edo Maland (Powerstager) https://github.com/Screetsec

- Jack Wilder admin in http://www.linuxsec.org

## Disclaimer

Note: modifications, changes, or changes to this code can be accepted, however, every public release that uses this code must be approved by writing this tool (Eka S)