News for hackers. Stuff that matters.

bscript

Hey all! I’m the maintainer of rep+. Happy to answer any questions or hear feature suggestions. Repo is here: https://github.com/bscript/rep

Show HN: Rep+: Burp Repeater Inside Chrome DevTools for Bug Bounty and AppSec

https://github.com/bscript/rep

Lightweight Chrome DevTools extension for capturing, replaying, and editing HTTP requests. No proxy or CA setup needed. Features regex search, Base64/URL/JWT converters (will add more), screenshots, request history, and pinned requests, the extension is ideal for bug bounty hunters, AppSec engineers, and DevSecOps engineers :D

( Read More... | 1 comment | 2 points | on HN )
There are a few Chrome extensions that let you edit or replay HTTP requests, but none matched the fast, Burp-Repeater-style workflow I wanted inside DevTools. So I built rep+, with the help of an LLM.

rep+ gives you:

- Automatic capture of all HTTP requests

- Replay + full editing of method, path, headers, and body

- Search & filters

- Star important requests, copy raw blocks, browse edit history

It’s perfect when you need quick, iterative testing without spinning up the full Burp Suite UI.

Open DevTools → rep+ panel → start hacking.

Re:AI Content Declaration on Friday August 23, 2024 @07:12AM (#41327979)
I like it, but this will add more work to people …
Re:Stop Using UUIDs: The Modern ID Spec on Thursday August 22, 2024 @06:48AM (#41318762)
Can’t see the cons ?
Re:How I Cracked the Park Locks in 20 Seconds on Thursday August 22, 2024 @06:29AM (#41318620)
True, the information-gathering phase did take a couple of days, but the actual process of cracking the lock was incredibly quick once I had that info. It just goes to show how a little bit of observation can significantly cut down the time and effort needed for tasks like this. It's more about the strategy than the brute force!
Re:How I Cracked the Park Locks in 20 Seconds on Wednesday August 21, 2024 @08:16AM (#41309506)
Yes, using a true random combination is significantly better than sticking to a fixed number or making minor adjustments. True randomness ensures that the sequence of numbers is unpredictable, making it much harder for anyone to guess the combination.

If you consistently scramble the digits but only move them by small increments (like ±2), you're essentially creating a pattern that can be detected over time, which is exactly what happened in this case. A better approach would be to randomly choose entirely different digits each time you reset the lock, making it much more difficult for someone to exploit any predictable patterns …

Re:AWS Security Review Tool on Wednesday July 17, 2024 @11:58AM (#40987293)
The AWS Security Review tool helps you create multiple applications and select AWS services for your project, generating targeted questions on security, performance, and data management. It allows customization, labeling, and easy report sharing for a thorough review process.

Features:

- Create multiple applications and select AWS services to be used in the project.

- Automatically generate relevant questions on security, performance, and data management.

- Add custom questions based on your business requirements.

- Label and mark questions as reviewed, not applicable, or needing investigation.

- Export and share reports with your team or clients.

Will Add more AWS services + detailed descriptions about the questions, steps to implement solutions, and helpful resources in the future.

A note on privacy: The application is just a front-end tool and does not store any data on servers. All the information you use is stored in IndexDB in your browser. Your custom questions and data remain in your browser and won't be deleted unless you clear the database from the developer tools or use the delete functionality in the tool.

The tool enhances the review process by providing a more customized approach, working alongside scanners to ensure a robust and comprehensive

Thoughts?

Thanks

Re:Awsviz.dev simplifying AWS IAM policies on Wednesday July 10, 2024 @09:15AM (#40926525)
Will add the link to the website ;)
Re:Awsviz.dev simplifying AWS IAM policies on Wednesday July 10, 2024 @08:39AM (#40926237)
Client side only, you can check the github repo
Re:Awsviz.dev simplifying AWS IAM policies on Wednesday July 10, 2024 @05:47AM (#40925254)
you can move the section to the top, just drag and drop.

Older »