Dominique RIGHETTO

Add other possible types of SSH key files.

4

Hi, This PR (fix and replace the PR #745) add other possible types of SSH key files and variations on the extensions: * identity * id_dsa * id_ecdsa * id_ed25519...

Dict with environment names

5

Hi, Do you think that a dictionary with the collection of environment names can be interesting/useful? A search on **[uat](https://github.com/danielmiessler/SecLists/search?q=uat)** terms shown that this environment name is already present in...

Feature: Detection of MAP files for SPA main JS bundle

6

# Describe the feature wanted Add detection of the [map file](https://developer.mozilla.org/en-US/docs/Tools/Debugger/How_to/Use_a_source_map) in the script [extract-spa-low-hanging-fruits.py](https://github.com/righettod/burp-piper-custom-scripts/blob/main/extract-spa-low-hanging-fruits.py): ```javascript //... //# sourceMappingURL=main.dqfcf86f.chunk.js.map ```

Add support for WebSocket message

2

Add logging of WebSocket message sent when support will be added in API. 

* Number of hit by verbs: `SELECT HTTP_METHOD, COUNT(HTTP_METHOD) AS CNT FROM ACTIVITY GROUP BY HTTP_METHOD ORDER BY CNT DESC,HTTP_METHOD;`  * Number of hit by domains: `SELECT TARGET_URL FROM...

grpc-replay: print response received

4

Hello, It is possible to add the capability in the tool to print the response received ? Thanks a lot again for this toolkit 👍

Update: Vulnerable Dependency Management Cheat Sheet with Dependency Confusion

7

## What is missing or needs to be updated? I have found this [post](https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610) about *Dependency Confusion* attack and I think that it can be interesting to add a section...

- [ ] [rack legacy zip encryption with Biham and Kocher's known plaintext attack. ](https://github.com/kimci86/bkcrack)

Add the following new test case based on the PortSwigger new labs in this script [identify-host-header-abuse.py](https://github.com/righettod/toolbox-pentest-web/blob/master/scripts/identify-host-header-abuse.py):  Course: https://portswigger.net/web-security/host-header/exploiting#connection-state-attacks Lab: https://portswigger.net/web-security/host-header/exploiting/lab-host-header-host-validation-bypass-via-connection-state-attack

New features for the script "identify-internal-packages"

2

Add the following features to the script [identify-internal-packages.py](https://github.com/righettod/toolbox-pentest-web/blob/master/scripts/identify-internal-packages.py). - [ ] Add support for RUST:  - [x] Add an option to detect packages for which the source repository does...