Bashir Kabir Zarewa

My thoughts on Hacking, AI, Security, and More.

Security Tools

Collection of open-source security tools I've developed to help bug bounty hunters, pentesters, and security researchers work more efficiently.

Extract

Chrome Extension | Released: May 2025

A Chrome extension that automates the discovery of API endpoints directly from inline scripts and external JS files during security assessments.

Key Features:

Scans all JS files (inline + external)
Removes duplicate URLs for clean results
Export results as TXT, CSV, or JSON
Live filtering with keywords

GitHub Read More

AuthScan

CLI Tool | Coming Soon

Automated authentication testing tool that identifies vulnerabilities in login mechanisms, session management, and access controls.

Key Features:

Tests for common auth vulnerabilities
Supports multiple authentication protocols
Generates detailed security reports
CI/CD pipeline integration

GitHub Coming Soon

AI-Sec

Python Package | Coming Soon

Security testing framework for AI applications that identifies vulnerabilities in machine learning models and AI-powered systems.

Key Features:

Prompt injection testing
Model evasion techniques
Training data extraction
API security assessments

GitHub Coming Soon