👾 Tetstack👾
64 subscribers
54 photos
1 video
27 links
Download Telegram
Just finished the landing page now to go, are the login/signup page, The main dashboard including instory and scanning process which holds the api , Documentation, Roadmap, Plugins, Security Blog, Threat Intel, API Reference, Changelog, Twitter/X, Contact. Damn bruhh
2
This media is not supported in your browser
VIEW IN TELEGRAM
😁1
not gonna include this cuz i don't want their mess i will stick with google and change it to GitHub.
😁2
Good night, I will do the same tomorrow, I feel like I am locking in on the wrong stuff.
For anyone new here, here is what's being built. This project is a direct, full-scale advancement of the KASCVE-PROJECT.
​The goal is a unified, API-backed ecosystem:
​Web: Landing page done. Dashboard, scanning, history, and threat intel up next.
​Desktop: Native clients for Linux and Windows.
​Mobile: Android app.
​Backend: Full API system powering everything.
​Landing page is complete. Moving onto the auth system, dashboard, and API integration next
👾 Tetstack👾 pinned «For anyone new here, here is what's being built. This project is a direct, full-scale advancement of the KASCVE-PROJECT. ​The goal is a unified, API-backed ecosystem: ​Web: Landing page done. Dashboard, scanning, history, and threat intel up next. ​Desktop:…»
I am not sure how I will design the dashboard
i will just mess around until it's enough or use a template
Sorry for zoning out (again) i had to re-write the api structure fully as there is a change in what the full app will be.
As the feature that were gonna be implemented being there it will have an automated penetration testing which might take time. and also full audit on your website and how it performs.
Forgot to add .gitignore and added the whole venv
🤯2
This media is not supported in your browser
VIEW IN TELEGRAM
This media is not supported in your browser
VIEW IN TELEGRAM
😁1
At last
1🤷1
Anyone knows how to bypass WAF-based protection. I ma stay on this for a while.
well fuck me ... The project need way more work than I thought. Standard tools like Puppeteer get clapped instantly because sites check under the hood for automation flags. I ma be deep in the actual browser source code changing things from the root.

​Here is the plan for the five layers I need to fix:

​JS and DOM stuff: Standard scripts try to hide flags using basic JS injection, but sites catch that by checking prototype chains. I have to change the actual C++ files so navigator.webdriver looks clean from the start. Also need to fill up the plugins and mimeTypes arrays with real data so they aren't empty, and sync the languages array with the system clock so it doesn't look sus.

​Headless mode flags: Running without a UI changes how the browser starts up. Things like window.chrome don't even load right in headless. I'm rewriting how frames are made to force them to load normally, and keeping the User-Agent and client hints completely matching.

​Graphics and hardware: Virtual servers are an instant ban. If a site checks WebGL and sees a software renderer like SwiftShader or Mesa instead of a real GPU, you're done. I'm changing those queries to report real graphics cards and fixing how canvas renders text and pixels so it matches a normal 1080p desktop baseline.

​Input and prototype checks: If you change a native function, calling .toString() on it leaks the wrapper. I'm patching the engine to keep the native formatting clean so checks don't flag it, and making sure permission states respond like a normal browser.

​Network stack: This is the hardest part. TLS fingerprinting (JA3/JA4) and HTTP/2 settings frames give you away instantly. I have to tweak the crypto settings, cipher suites, and stream window sizes to match standard browser releases perfectly.

​I am not sure how I will handle all the custom compilation runs yet. Well I ma fuck around,"The more you fuck around the more you find out".
👾 Tetstack👾
Yeap, fuck me for real
This media is not supported in your browser
VIEW IN TELEGRAM