OWASP PTK – browser extension all-in-one for pentesters and bug hunters

5 DenisPodgurskii 0 5/26/2025, 3:37:28 PM

OWASP PTK is a lightweight browser extension that brings DAST, IAST, SAST, and SCA together - no more juggling tools or context switching.

It's also a part of the Athena OS - https://athenaos.org/en/resources/browser-pentesting/#_top

Why you’ll find it useful:

Instant Scans: Launch DAST/IAST/SAST/SCA from one “Scans” panel.

Deep Interception: Built-in proxy, traffic capture (HAR), and R-Builder for custom requests.

Token & Cookie Tools: JWT Inspector (alg=none, brute-force, JWK injection) and full cookie manager.

Quick Helpers: Decoder, Swagger Editor, and XSS/SQLi cheat sheets.

Generator AI Music Free Online (generatoraimusic.com)

Show HN: ImgSeek.app (imgseek.app)

Show HN: Burner Bitcoin – a simple hardware wallet for gifting Bitcoin (burner.pro)

Ask HN: Best way to do coding screens?

RFK Jr threatens ban on federal scientists publishing in top journals (theguardian.com)

Launch HN: MindFort (YC X25) – AI agents for continuous pentesting

Roo Code experimental code indexing (docs.roocode.com)

Electric Vehicles Died a Century Ago. Could That Happen Again? (nytimes.com)

How nitrous oxide became a deadly – but legal – American addiction (bbc.com)

The "AI Revolution" May Take an Unexpected Turn into the "AI Coup" (charleshughsmith.substack.com)

Performance Optimization Methodology for Valkey – Part 1 (valkey.io)

Knowledgework: a digital second brain for your work (knowledgework.ai)

A realistic look at DNA in action: molecular crowding matters (phys.org)

California Forever's tech money looks to revive shipbuilding in the Golden State (bizjournals.com)

Show HN: TinyMCP – Write MCP tools in Ruby and serve them (github.com)

Show HN: DeepTeam – Penetration Testing for LLMs (github.com)

CheerpJ 4.1: Java in the browser via WebAssembly with Java 17 support (cheerpj.com)

People, ideas, machines XII: Theories of regime change and civil war (dominiccummings.substack.com)

Getting a Cease and Desist from Waffle House (jack.bio)

Discord explores virtual rewards for its ad product as it prepares for an IPO (techcrunch.com)

Apache Spark 4.0 (spark.apache.org)

Downtown, TX (downtowntx.org)

Building a Data Team That Never Sleeps with Pydantic AI (pydantic.dev)

Server-Side Tagging versus Edge Component Platform (edgee.cloud)

Threat of Meta breakup looms as FTC's monopoly trial ends (arstechnica.com)

Why is it so hard to get families to live in community houses? (supernuclear.substack.com)

Getty Images spending millions to battle a 'world of rhetoric' in AI suit (cnbc.com)

The first human pest, which has been bugging us for 60k years (newatlas.com)

What the Em Dash Says About AI-assisted Writing—And Us (every.to)

The mystery of neutrino mass is now smaller (bigthink.com)

Building smarter farming irrigation with Raspberry Pi and IoT (raspberrypi.com)

U.S. Mint Moves Forward with Plans to Kill the Penny (apnews.com)

How Russian Data on Sanctioned Companies is disappearing and how we put it back (opensanctions.org)

T-Mobile records iPhone screens and claims it's being helpful (droid-life.com)

Dr. Steel – TVD, Vol.1 [video] (youtube.com)

Building a Distributed Cache for S3 (clickhouse.com)

Are museums 'guilt tripping' their visitors? No, they aren't doing enough (theartnewspaper.com)

iPhone 16 was the best-selling smartphone in Q1 2025 (9to5mac.com)

Show HN: Tesseral – Open-Source Auth (github.com)

Show HN: Sequor – dbt for API Integration (sequor.dev)

White House scraps plan to block data brokers from selling Americans' data (techcrunch.com)

The fundamental misunderstanding in Team Topologies (patricia.no)

Microsoft Says It's Censoring Employee Emails Containing the Word "Palestine" (theintercept.com)

Someone using AI won't take your job. AI will (harysdalvi.com)

Show HN: Wombcore 3K – Procedural Sound Machine for Baby Sleep (No Audio Files) (github.com)

Euro execs mull use of US clouds, eyeing American hyperscaler escape hatch (theregister.com)

Aviation industry is 'failing dramatically' on climate, insiders say (theguardian.com)

Cosmic mystery deepens as astronomers find object flashing in radio and X-rays (phys.org)

Why we chose OpenID Connect for SpacetimeDB (spacetimedb.com)

The Classic HP 16C Programmer's Calculator (2022) (bigdanzblog.wordpress.com)

OWASP PTK – browser extension all-in-one for pentesters and bug hunters

Comments (0)