# Penetration Testing Kit

> Attention! This version is no longer supported. Use /firefox/addon/owasp-penetration-testing-kit/ extension instead.

Canonical page: [https://chrome-stats.com/d/penetration-testing-kit](https://chrome-stats.com/d/penetration-testing-kit)

## Overview

- **ID:** `penetration-testing-kit`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Removed
- **Publisher:** pentestkit.co.uk
- **Daily users:** 633
- **Weekly downloads:** 9
- **Rating:** 4.71 / 5 (14 ratings)
- **Version:** 8.9.3
- **Last updated:** 2025-05-12
- **First published:** 2020-10-14
- **Size:** 7.22 MB
- **Data as of:** 2026-07-28
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/penetration-testing-kit/)
- **Website:** [https://pentestkit.co.uk/](https://pentestkit.co.uk/)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/penetration-testing-kit/privacy/](https://addons.mozilla.org/firefox/addon/penetration-testing-kit/privacy/)

## Description

The Penetration Testing Kit (PTK) is a comprehensive browser extension designed to streamline application security testing for penetration testers, Red Teams, and security practitioners.

Features include in-browser Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA), powerful JWT inspection and manipulation, a proxy with traffic logging, and the R-Builder tool for advanced HTTP request tampering including request smuggling. Additional utilities such as cookie management and encoder/decoder tools further enhance your workflow. Integrated with Swagger.IO and Selenium, PTK supports API security assessments and early-stage vulnerability detection. Note: This Chrome extension version is no longer supported; users are advised to switch to the Firefox alternative.

Upgrade your application security process with PTK’s all-in-one capabilities, helping uncover complex vulnerabilities and optimize testing efficiency.

## Permissions and access

### Permissions

- `<all_urls>`
- `activeTab`
- `cookies`
- `notifications`
- `storage`
- `unlimitedStorage`
- `tabs`
- `webRequest`
- `webRequestBlocking`
- `scripting`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension is not longer available in the store

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Review summary

The OWASP Penetration Testing Kit is praised for its powerful features, unique functionality, and especially the user-friendly Request Builder ideal for penetration testers. Users report it greatly improves productivity and meets expectations. However, multiple reviews mention concerns about the extension requesting permissions to read all webpage inputs, including sensitive data. There are also recurring issues with the extension initially showing a blank window or failing to open, requiring reinstallations or time to load, indicating possible bugs that need addressing.

### Pros

- Powerful and greatly improves productivity of penetration testers
- User-friendly Request Builder for testing modified requests
- Unique and very useful functionality
- Meets user expectations and works great
- Considered a great and awesome extension by users

### Cons

- Asks for permission to read all information filled on webpages, including sensitive data
- Initial loading issues causing the extension to show a blank window
- Some users experienced bugs preventing opening the extension on Firefox, requiring reinstall or waiting for fixes

## Similar extensions and apps

- [OWASP Penetration Testing Kit](https://chrome-stats.com/d/owasp-penetration-testing-kit) — 943 users, 5.00 / 5
- [Web Explode](https://chrome-stats.com/d/web-explode) — 19 users, 5.00 / 5
- [Pentester Helper](https://chrome-stats.com/d/pentester-helper) — 11 users
- [WebTester](https://chrome-stats.com/d/webtester) — 17 users, 5.00 / 5
- [KHackBar](https://chrome-stats.com/d/khackbar) — 14 users, 5.00 / 5
- [threatmap](https://chrome-stats.com/d/w3security-bar) — 2 users
- [HackTools](https://chrome-stats.com/d/hacktools) — 1,578 users, 4.70 / 5
- [Hack-mate (OSCP)](https://chrome-stats.com/d/hack-mate-oscp) — 4 users
- [Endpoint Hunter](https://chrome-stats.com/d/endpoint-hunter) — 10 users
- [SecExplorer Pro](https://chrome-stats.com/d/secexplorer-pro) — 2 users
- [Tyre-Kicker-Security](https://chrome-stats.com/d/tyre-kicker-security) — 1 users
- [CyberPost Lab](https://chrome-stats.com/d/cyberpost-lab) — 3 users, 5.00 / 5

---

Source: [Chrome-Stats](https://chrome-stats.com/d/penetration-testing-kit)