Tools
A short, hand-maintained list of AppSec tools I've built or use regularly. No frameworks, no database — just edit this file to add or remove one.
-
AssetViz
Turns a flat list of subdomains into a coherent mind map, making it easy to spot structure and outliers during recon. Built for penetration testers and bug bounty hunters.
-
ReTab
A Burp Suite extension for Repeater. Anyone who has used Repeater for more than 20 minutes knows the problem: every tab is named 1, 2, 3… and fifty tabs in, you've lost track of which one was the password reset endpoint. ReTab fixes that.