Vitor Falcao

gecko. Chrome extension for automating CSPT discovery

queryxss. Tool for testing reflections in the HTTP responses

hacks. Collection of scripts that I use while bug hunting

lemma-fork. Python

spammer. Request every path for every host

bob. Bob is an automated tool for building and pushing multiple Docker images in a monorepo

rssnotifier. Go

jsmon. a javascript change monitoring tool for bugbounties

videt. Python

awesome-autonomous-hacking-agents. Curated AI-agent papers for building autonomous security bots — offensive AI, multi-agent architecture, memory, and tool use.

Interceptor. Agent-driven Chrome extension for full browser control via CLI

lemure. Lemure is a Go engine built for learning

checkscope. Check if your URLs are in scope or not

FancyTracker. A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage tracker.

goforces. Scrapes and tests fastly everything from the CodeForces contest so you don't waste your precious time

frameye. TypeScript

cfaster. CFaster is a tool to easily set all you need to start a programming contest as fast as possible

getapex. Go

brutecat. Brute force services credentials with ease

katana. A Rust 3D printing slicer

vitorfalcao.com. This is my personal blog, access at vitorfalcao.com

use-semver-tool. A wrapper for using fsaintjacques/semver-tool with Actions

AstAnalysis. Claude skill for running AST parsing and analysis dinamically on JS files

cgql. Caido GraphQL CLI interface