Alternatives
Products that do what Silent Recon does
Passive browser-native security reconnaissance
- 1
- 2
- 3
- 4IM
2022 · github.com
- 5LP
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Dec 2025 · github.com
- 6
Voice dictation that adapts to what’s on your screen
Jun 2026 · chromewebstore.google.com
- 7
- 8
- 9BB
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com
- 10PC
2018 · chrome.google.com
- 11IB
BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.
Nov 2025 · github.com
- 12KD
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com
- 13AH
I wrote a small Chrome extension that allows the user to replace all usernames on Hacker News with either the string `anonymous` or a deterministic hashed value.
2023 · chrome.google.com
- 14MN
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com
- 15FH
Download: https://chrome.google.com/webstore/detail/hapackcnjagkljgfjlgonohbabnfgopc Source: https://github.com/ImFatYoureFat/follow_hackers I built this extension this past weekend. It uses Javascript (obviously), python (Flask) and Redis. I would love to hear any comments or suggestions.Thanks.
2012
- 16DN
Hello HN! A few days ago I saw a comment on reddit which proposed a service that allowed the user to spam a website's server logs with messages objecting to the presence of various anti-features like popups, noisy ads, and autoplaying content. The idea tickled my fancy, so I've put together a Chrome extension which detects if a page is using Google Analytics, and if so it injects a small script which sends bunk utm (urchin tracking module) data to the GA backend. It sets the traffic source to "DO NOT WANT!", and the campaign name to various things like "I do NOT want noisy ads!" Here's the…
2017
- 17
Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry. - taylannuhogluofficial-png/Tblue
13d ago · github.com
- 18
- 19KB
Konform Browser is a Firefox ESR fork focused on security, privacy, and user freedom. This might sound familiar but I think we still have something worthwhile to bring to the browser ecosystem. The project started as a fork of LibreWolf and now stands on its own four feet. It takes a harder stance on the three goals of security, privacy and freedom. It's intended to be suitable as a general-purpose daily driver for everything from managing the intranet to surfing the murkier tubes. This week we added a simple "onboarding" page replacing the about:welcome of Firefox with a page where the user…
Feb 2026 · codeberg.org
- 20SS
Nov 2025 · smart.mcpshark.sh
- 21
- 22IB
Code base is here https://github.com/clairefro/aribotle Screenshots and learnings in tweet https://twitter.com/clairefroe/status/1684692302843838464?t=... I experimented with a "Bring your own API Key" approach that I think is sufficiently secure. I'll Venmo $50 to whoever can hack my OpenAI API key
2023 · twitter.com
- 23
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →