After a leisurely day, an idea struck fast and hard – four hours later, Breakbot was born. Breakbot simplifies fuzzing and pen-testing by putting disruptive strings and naughty unicode just a click away – no more googling for Zalgo or trying to copy a zero-width character. Breakbot is a click-paste solution that puts bad strings […]

Bishop is a Chrome extension-based vulnerability scanner that can automate tedious tasks of hunting for trivial vulnerabilities on your websites as you browse. It’s hassle free, easy to set up, and sits quietly in the background until it discovers something worth telling you about. It’s been available on GitHub for a while now, but I’ve […]

FreeStep, the free & encrypted chat platform, has just been pushed to v2.0.0. After a slew of issue submissions and user questions to my personal email (XP), I’ve built in a big chunk of updates in my last hour of procrastination before I drown in finals: If your username is mentioned, you can hear an […]

Just tagged v1.0.0-alpha of Bishop (“Marty”) and finalized that; it now supports background queuing if you don’t want to scan as you browse. Check out the release here.

Get Git is a Chrome extension that I hammered out today, inspired by these slides. Get Git recursively traverses the websites you browse, hunting for misconfigured web accessible Git repos what are web accessible — and of course, once you have access to the .git/ directory, it’s open season on source code, API keys, hard coded […]