bscript
Rep+ Helped Me Identify a Critical Supabase JWT Exposure
Gmail Same-Tab Switcher: keep account switches in one tab
Rep+ – Chrome DevTools HTTP Repeater with AI Insights
Rep+: Fast AI-Powered HTTP Repeater in Chrome
Rep+: A Lightweight Alternative to Burp Suite for Quick Browser Testing
Show HN: Rep+: Burp Repeater Inside Chrome DevTools for Bug Bounty and AppSec
https://github.com/bscript/rep
Lightweight Chrome DevTools extension for capturing, replaying, and editing HTTP requests. No proxy or CA setup needed. Features regex search, Base64/URL/JWT converters (will add more), screenshots, request history, and pinned requests, the extension is ideal for bug bounty hunters, AppSec engineers, and DevSecOps engineers :D
rep+ gives you:
- Automatic capture of all HTTP requests
- Replay + full editing of method, path, headers, and body
- Search & filters
- Star important requests, copy raw blocks, browse edit history
It’s perfect when you need quick, iterative testing without spinning up the full Burp Suite UI.
Open DevTools → rep+ panel → start hacking.
rep+: A Lightweight Burp Suite Repeater Inside Chrome DevTools
What If an LLM Could Profile You from the Browser History?
What If an LLM Could Profile You from the Browser History?
Show HN: AWS IAM Policy Visualizer – Interactive Graphs
For reference, here's the older version I built 9 months ago: https://www.awsviz.dev/
I Built a Bitcoin Investment Tracker to Replace My Messy Spreadsheet
A Forgotten Receipt Can Lead to a Clever Scam
I accidentally became an admin on 600 servers
How I Cracked the Park Locks in 20 Seconds
If you consistently scramble the digits but only move them by small increments (like ±2), you're essentially creating a pattern that can be detected over time, which is exactly what happened in this case. A better approach would be to randomly choose entirely different digits each time you reset the lock, making it much more difficult for someone to exploit any predictable patterns …
How I Cracked the Park Locks in 20 Seconds
Features:
- Create multiple applications and select AWS services to be used in the project.
- Automatically generate relevant questions on security, performance, and data management.
- Add custom questions based on your business requirements.
- Label and mark questions as reviewed, not applicable, or needing investigation.
- Export and share reports with your team or clients.
Will Add more AWS services + detailed descriptions about the questions, steps to implement solutions, and helpful resources in the future.
A note on privacy: The application is just a front-end tool and does not store any data on servers. All the information you use is stored in IndexDB in your browser. Your custom questions and data remain in your browser and won't be deleted unless you clear the database from the developer tools or use the delete functionality in the tool.
The tool enhances the review process by providing a more customized approach, working alongside scanners to ensure a robust and comprehensive
Thoughts?
Thanks