Bug write-up for "AI Studio Auth bypass" ndevtk.github.io/writeups/20… (。_。)

Bug write-up for "Google AI Studio XSS" ndevtk.github.io/writeups/20… (ﾉ*･ω･)ﾉ

The first version of APIClient has been released chromewebstore.google.com/de… it supports API learning with key tracking based on usage and Google/Swagger discovery documents plus XSS finding also replacement for postLogger extension. It's not perfect, create GitHub issues :)

github.com/NDevTK/APIClient has been recovered does both API learning and XSS finding it's not perfect but I'm starting to get over it. Hopefully this time I will release and not delete it.

Taint analyser is replaced with CodeQL Chrome github.com/NDevTK/codeql-chr… because trying to get AI to build a code graph then integrate it with an SMT was annoying. I asked something basic like trace the internals of jquery it made a fake version.

Bug write-up for "Google XSS part 3" ndevtk.github.io/writeups/20… \^o^/

DroidProbe is getting an API client that supports Swagger and Google discovery documents. Based on past experience with a Minecraft server hosting app it's a good target for security issues.

The test release of DroidProbe is published after joining groups.google.com/g/droidpro… it can be installed at play.google.com/store/apps/d… please provide feedback :)

github.com/NDevTK/DroidProbe Contextual GUI via code analysis all the things.

A no-code web-based GUI for Chromium MojoJS security research with automated binding generation. Tempted to add an AI chat bot. github.com/NDevTK/MojoGUI

An experimental WinDbg debugging toolkit for Chromium security researchers: github.com/NDevTK/chromiumde… Bug write-up for OAuth redirects don't check for SSL/TLS: ndevtk.github.io/writeups/20… Summarizer theme on my writeups website now works on desktop chrome again! 🦆

Integrated my Chromium bugs into ndevtk.github.io/writeups/ that's more URL spoofs, COOP leaks, WAR bypass, Debugger API abuse!

Bug write-up for "Controlling the Google Assistant via Web Speech API" ndevtk.github.io/writeups/20… *^____^*

My YouTube channel is now un-deprecated 🎉 Android lock screen data leak Minecraft video PoC can now be found at youtube.com/watch?v=TUysajkS…

Been automating chromium security research using AI agents with codebase learning, VRP insights and research tracking tools. While the agent will remain private there's a nice tool for interfacing with chromium services github.com/hjanuschka/chromi… now with V8 support 🥳