Pinned Tweet
I'm looking for a new role.
For four years I've been building Grroxy, BurpSuite alternative with advanced features, I learned a lot about entrepreneurship and art of decision making (by failing at it).
I'd love to do this kind of work with a security team. If you're hiring, please reach out or share.
#cyber #security
gitesh sharma retweeted
Our research team has released h3fuzz:
a fork of ffuf with HTTP/3 support and a web UI for content discovery, based on PortSwigger's Turbo Intruder research.
It reaches 120k requests per second on local benchmarks, and we cover why that rarely holds up against real targets.
You can read more here:
slcyber.io/research/how-prac…
Repository: github.com/assetnote/h3fuzz
gitesh sharma retweeted
one of my engineers reached out to me about how they struggled to find satisfaction in their work in the age of AI. I asked them if I could publish our brief exchange, and they agreed. I know people are feeling similarly, so maybe they can relate. shubs.io/do-we-still-enjoy-s…
gitesh sharma retweeted
YSoNet v2026.8.1 is live.
50 to 62 gadgets, new .NET Framework 2.0 to 3.5 support, dedicated 4.0 coverage, stronger testing, and 508 archived references for researchers in the markdown format! 🔥
Thanks @cjm00n and @sinsinology!
github.com/irsdl/ysonet/rele…
This is one of the projects that feels so right!
HuntProxy enables your AI agents to perform BurpSuite level actions and feels almost invisible.
Been using it for a few weeks and it just melts into my existing workflow and feels very natural. Must try it out!
gitesh sharma retweeted
I forked gau, optimized it for better performance, and added DuckDuckGo support.
These improvements should significantly boost results and make the overall experience smoother.
Enjoy.
github.com/BehiSecc/fgau
gitesh sharma retweeted
We’re expanding Trusted Access for Cyber with additional tiers for authenticated cybersecurity defenders.
Customers in the highest tiers can request access to GPT-5.4-Cyber, a version of GPT-5.4 fine-tuned for cybersecurity use cases, enabling more advanced defensive workflows.
openai.com/index/scaling-tru…
In Grroxy, you can launch multiple intercepting proxies with isolated Chrome profiles.
Test admin / employee / guest roles — or different targets — in separate sandboxes. Resume any session in a click.
Or just ask Claude to spin up multiple proxies and test for you.
#bugbounty #pentest
gitesh sharma retweeted
Nothing Fancy... just experimenting and exploring with the available ones before exploring the new trending ones..
The core trick here:
ctx.measureText() pre-computes every word into a data object with a baseX, current x, and targetX.
Each frame, a 120-segment dragon emits collision nodes with anatomically-computed radii.
For every line of text, it projects each node onto the line's Y axis, compute the X exclusion span via √(r² - dy²), merge overlapping intervals, then run a relaxation solver (forward + backward pass) to find stable non-overlapping target positions.
Words lerp toward those targets each frame - giving the parting/closing flow you see.
Sometimes i feel platform APIs that's already shipped in every browser are still criminally underexplored.
#CreativeCoding #Canvas #WebDev #TypeScript #InteractiveDesign #GenerativeArt #Frontend #TechArt
future would be so artistic!🫶
🚨SOMEONE REINVENTED HOW TEXT RENDERS ON THE WEB AND ITS ABSOLUTELY INSANE.
the goated dev behind react, reasonML, and midjourney’s frontend, just dropped Pretext. a tiny typescript library that measures and lays out text 500x faster than the DOM.
he trained models against real browser rendering for weeks until the output matched safari, chrome, and firefox exactly.
the demos are insane!! hundreds of thousands of text boxes at 120fps. magazine layouts and chat bubbles that actually wrap right.
engineers from Vercel, Remix, Figma, and shadcn all cosigned. this is the kind of open source that makes you want to be a better dev.
here are some cool demos in the past 24hrs👇
gitesh sharma retweeted
One of my less known-about tools is called hakoriginfinder, but it's really impactful. It finds origin servers behind WAFs using a technique that I haven't seen anywhere else (at least, not at scale).
It's a weird one because, unlike my other tools, the messages I get about this tool only come from really top hackers.
Check it: github.com/hakluke/hakorigin…
gitesh sharma retweeted
Hey everyone! I’ve been building rep+, a lightweight HTTP Repeater inside Chrome DevTools. No proxy setup or certificates. Just open DevTools and start poking requests. It also has built-in AI for explanations and attack ideas. I’ll share one rep+ feature every day.
Try it 👇
⚠️ Imp bug fix: Electron wasn't killing child processes on quit. Patched now.
Btw this is human error, on quit I checked for the main binary, it was closed and I assumed subprocesses started by this binary would be closed as well
fix: update to v2026.3.7 and kill the orphans and then start back
mac/linux: pkill -f 'grroxy-(app|tool)'
windows: taskkill /F /IM grroxy-app.exe & taskkill /F /IM grroxy-tool.exe
github.com/glitchedgitz/grro…
![Release [IMP] Mcp Support, Terminal, Claude Code and Dev UI [v2026.3.7] 🚀 · glitchedgitz/grroxy](https://pbs.twimg.com/card_img/2118998186501001216/rqeEDTsD?format=jpg&name=800x419)