Maigret – OSINT Username Search Tool
Maigret’s database lists 5,900 sites, but a default run checks 500 and the list updates itself. How to install it, use it and pin what you searched. Continue reading Maigret – OSINT Username Search Tool
Author Archives: Darknet
subfinder – Passive Subdomain Enumeration Tool
subfinder 2.17.0 tested on darknet.org.uk with no API keys: 17 subdomains in 14 seconds, and only one resolved in DNS. What needs keys, and how to install it. Continue reading subfinder – Passive Subdomain Enumeration Tool
numbat – Endpoint Visibility and Forensics for AI Coding Agents
numbat monitors Claude Code, Codex and other AI coding agents and rebuilds their sessions. Tested on a staged session; its blocking is opt-in and narrow. Continue reading numbat – Endpoint Visibility and Forensics for AI Coding Agents
Response Overview and Colonel Clustered – Grouping Burp Responses by Content
Two Burp Suite extensions that group responses by content: Response Overview, a BApp with a threshold you set, and Colonel Clustered, which picks its own. Continue reading Response Overview and Colonel Clustered – Grouping Burp Responses by Content
http-terminator – AI-Assisted HTTP Request-Smuggling Discovery
http-terminator is PortSwigger’s AI pipeline for discovering HTTP request-smuggling bugs. Which stages run, its dependencies, and its testing limits. Continue reading http-terminator – AI-Assisted HTTP Request-Smuggling Discovery
Hash Identifier Tools – Command-Line Password Hash Identification
hashID and Name-That-Hash tested against current password formats. Both miss bcrypt’s $2b$ prefix; only Name-That-Hash recognises Argon2id. Continue reading Hash Identifier Tools – Command-Line Password Hash Identification
whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms
whitelist-bypass tunnels traffic through commercial video calls, for networks that allow only approved domains. How its two tunnels work, and the claim to verify. Continue reading whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms
WRAITH – Browser Hooking and Blind XSS Page Mirroring
WRAITH combines BeEF-style browser hooks with blind-XSS capture and a credentialed Page Mirror. Tested locally, with its limits examined. Continue reading WRAITH – Browser Hooking and Blind XSS Page Mirroring
Praetorian – Offensive Security Tools Built Around Portable Go Workflows
Praetorian’s Go security tools consolidate established offensive workflows, with portable binaries, direct pipelines and a partial shared SDK. Continue reading Praetorian – Offensive Security Tools Built Around Portable Go Workflows
AI IR Overlay – Incident Response Specification for AI Agents
AI IR Overlay specifies containment for agents using valid credentials, with a working kill-switch contract and an admitted gap when no SOC is staffed. Continue reading AI IR Overlay – Incident Response Specification for AI Agents