A lightweight Firebase tool for pentesters and developers. Inspect tokens, compare access, and explore your data through an interactive graph.
https://github.com/theLabXHQ/firelab
By the community, for the community.
Please open Telegram to view this post
VIEW IN TELEGRAM
A fast HTTP prober for recon. Feed it hosts, URLs or whole ranges, and see what's alive, what it runs and why the rest failed. Memory stays low, even on huge lists.
https://github.com/theLabXHQ/pulse
By the community, for the community.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥8
pulse-vs-httpx.pdf
3.2 MB
Our research: building Pulse and benchmarking it against httpx
We built Pulse, a fast HTTP probing tool, and tested it head-to-head against ProjectDiscovery's httpx 1.12.0 under identical conditions, with repeated runs.
Key results:
• 5,000 real domains: 1.5–1.8x faster, ~60x less CPU, 2x less memory
• 20,000 hosts (JSON output): 10x faster, 9x less memory
• 14 tricky server types: httpx returned 33–38 wrong statuses/titles per run, Pulse returned 0
(These numbers come from our own machine and network. Results on your hardware may differ, so try it yourself and tell us what you get.)
The full methodology, every number and all the charts are in the PDF.
github.com/theLabXHQ/pulse
We built Pulse, a fast HTTP probing tool, and tested it head-to-head against ProjectDiscovery's httpx 1.12.0 under identical conditions, with repeated runs.
Key results:
• 5,000 real domains: 1.5–1.8x faster, ~60x less CPU, 2x less memory
• 20,000 hosts (JSON output): 10x faster, 9x less memory
• 14 tricky server types: httpx returned 33–38 wrong statuses/titles per run, Pulse returned 0
(These numbers come from our own machine and network. Results on your hardware may differ, so try it yourself and tell us what you get.)
The full methodology, every number and all the charts are in the PDF.
github.com/theLabXHQ/pulse
🔥6
This media is not supported in your browser
VIEW IN TELEGRAM
See what’s alive, what it runs, and how it responds. Here’s a quick Pulse demo—from input to results.
Already tried it? We’d like to hear what you found.
github.com/theLabXHQ/pulse
By the community, for the community.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥7
Meet LabX. 🇺🇿
LabX is more than a community — it’s a growing cybersecurity ecosystem where research, collaboration, and innovation come together.
We’re bringing together people and teams working across security research, AI security, bug bounty, offensive and defensive security, and open source. Each brings a different perspective, and together we explore new challenges and build ideas into solutions.
We believe cybersecurity moves forward when we share what we learn and create what’s next — together.
By the community, for the community.
#LabX #CyberSecurity #SecurityResearch #OpenSource
LabX is more than a community — it’s a growing cybersecurity ecosystem where research, collaboration, and innovation come together.
We’re bringing together people and teams working across security research, AI security, bug bounty, offensive and defensive security, and open source. Each brings a different perspective, and together we explore new challenges and build ideas into solutions.
We believe cybersecurity moves forward when we share what we learn and create what’s next — together.
By the community, for the community.
#LabX #CyberSecurity #SecurityResearch #OpenSource
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥7
This media is not supported in your browser
VIEW IN TELEGRAM
Firelab helps developers and pentesters inspect Firebase tokens, compare what different users can access, and check whether security rules protect data as intended.
For developers, it’s a way to verify access controls. For pentesters, it helps uncover unintended access and investigate security misconfigurations.
github.com/theLabXHQ/firelab
By the community, for the community.
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥8