The Rapid7 AppSec plugin works with Rapid7 InsightAppSec and AppSpider dynamic application security testing solutions to improve application scanning coverage and assist in validating vulnerabilities with these capabilities: Macro Recording - Use the plugin to record macros required by InsightAppSec and AppSpider Enterprise when selecting the Macro Authentication scan configuration. Macro Authentication enables the crawling engine of InsightAppSec and AppSpider to authenticate with complex login workflows. Vulnerability Validator - Use the vulnerability validator in conjunction with the Attack Replay feature in InsightAppSec and AppSpider. This feature of the Chrome plugin enables users to replay and edit recorded traffic generated during an InsightAppSec or AppSpider scan. Bootstrap Authentication - The Chrome plugin is required to use AppSpider Enterprises Bootstrap Authentication feature, which gives the user the ability to interactively login to the target application during an active scan. Used for login workflows that require human interaction for example 2FA (Two-factor authentication). Traffic Recorder - Record the interactions (like HTTP GET and POST requests) between the front end application and the back end server in a Traffic File. InsightAppSec can replay these interactions to authenticate into your application. For support related to this plugin, please contact chrome_plugin@rapid7.com
You can Follow the below Step By Step procedure to install the Rapid7 AppSec Plugin Chrome Extension to your Chrome Web browser.
It is the Rapid7 AppSec Plugin Chrome extension download link you can download and install Chrome Browser.
Chrome extension to analysis your website security. It provides various tools to find web security loopholes.
The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open.
Qualys Browser Recorder is a free browser extension to record & play back scripts of any web application.
Highlight IPs, domains, and URLs on any website to enrich them using Pulsedive's free threat intelligence data set.
The Recorded Future Browser Extension provides real-time threat intelligence that is just a click away in any web-based application.
Scanning website for vulnerable js libraries
This extension helps you easily create and manage your web application scans for Tenable.io Web Application Scanning.
Quick access to IP, DNS & Network Tools. Check DNS, Whois, ASN, Traceroute, Ping and more. Tools for technical operators.
Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!
A browser extension for Penetration Testing