LeakRadar
Automated API Reconnaissance & BOLA Detection
What it does
LeakRadar is an open-core DAST security engine for REST APIs. It detects Broken Object Level Authorization (BOLA/IDOR) flaws and exposed credentials with near-zero false positives using a pairwise token heuristic algorithm. Includes Executive PDF Reports, automated Python remediation code fixes, and Custom Agency Logo White-Labeling for pen-testers and vCISOs.
An open-core API security reconnaissance engine. Harvests JWT identity claims, prunes dynamic response volatility across three baselines, and generates automated code fixes for detected BOLA vulnerabilities before production compromise. Specifically designed for security researchers, pentest teams, and bug bounty hunters to audit REST APIs and patch authorization flaws automatically. Generates drop-in authorization patch code (FastAPI, Django, Express, Spring Boot) for confirmed BOLA vulnerabilities. Supports pay-as-you-go metered tokens or local air-gapped models. Executes triple identical User A requests before cross-token evaluation to identify and strip dynamic nonces, session…from ajmax76.github.io
Does the same job
all alternatives →
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, August 2026
the whole month →- TL
Life & fun · 10d ago · louisabraham.github.io
- SA
Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…
Life & fun · Aug 2026 · toneyalexander.github.io
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com