{"repo":"nxenon/grpc-pentest-suite","free":true,"listed":false,"github":"https://github.com/nxenon/grpc-pentest-suite","clone":"git clone https://github.com/nxenon/grpc-pentest-suite.git","description":"gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)","language":"Python","stars":260,"topics":["grpc","grpc-web","grpc-pentesting","grpc-tool","pentesting-grpc","burp","burp-extensions","burpsuite","extension","protobuf"],"license":"GPL-3.0","category":"networking-infra","readme_excerpt":"gRPC Web Pentest Suite gRPC-Pentest-Suite is set of tools for pentesting / hacking gRPC Web applications. Available Content Types: - [x] application/grpc-web-text - [x] application/grpc-web+proto gRPC-Pentest-Suite contains these 2 tools: - grpc scan scanning the gRPC-web javascript webpacked files to detect grpc endpoints, services, messages and field types - grpc web burp extension.py extension for burp suite to easily using gRPC-Coder tool - [x] application/grpc-web-text support - [x] application/grpc-web+proto support - You can download this one using BApp - grpc coder encoding and decoding gRPC-web payloads for pentesting (manipulating payloads) - [x] only application/grpc-web-text support - grpc protobuf decoder standalone pure-Python protobuf decoder/encoder (no dependencies, no protoscope needed ) - [x] decodes & encodes the protobuf wire format directly - [x] supports grpc-web-text, grpc-web+proto, raw protobuf bytes and hex (e.g. a Kafka protobuf message) - big string chunker this tool chunks a big string into pieces of 80 characters, so that gRPC-coder can encode it (also reverse) - old grpc web burp extension with dependency.py old extension for burp suite which has some dependencies - [x] only application/grpc-web-text support Official gRPC-Web Coder in BApp gRPC-web Coder BApp URL Video of New Extension grpc web burp extension.py file is new extension which does not have any dependencies and all dependencies are in this repo (in lib dir). gRPC-Web Burp Extension","default_branch":null,"files":null,"tree":[],"storefront":"/r/nxenon","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/nxenon/grpc-pentest-suite/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}