Nightcrawler: Open-Source AI Pentesting Agent Runs Locally on Smartphones

·1 views

A developer has released Nightcrawler, an open-source AI-powered penetration testing agent designed to run entirely on a smartphone. The tool is hosted on GitHub under the organization GarageHQ and allows security professionals to conduct pentesting tasks without relying on cloud infrastructure. By running locally on-device, Nightcrawler aims to offer a more private and portable alternative to traditional pentesting setups. The project was shared on Hacker News, where it attracted initial community attention.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Builds Browser-Based Password Generator to Learn SEO by Doing

A developer frustrated with endlessly reading SEO guides decided to apply the knowledge hands-on by building a real, functional web tool. The result is Get Password Generator, a free browser-based tool hosted at getpasswordgenerator.com that creates passwords locally using the Web Crypto API, meaning no data is sent to any server. The project was chosen after analyzing Google Trends for stable demand and manually reviewing competing search results to assess whether a simpler, privacy-focused tool could find an audience. Technical SEO basics — including structured data, a sitemap, canonical URLs, and mobile-responsive design — were added only after the core tool was fully functional. The developer's key takeaway is that practical, small-scale execution teaches more about SEO than consuming guides, and that useful content and genuine privacy transparency matter more than keyword tricks.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Fix Cloudflare's 'Enable JavaScript and Cookies' Error in Browsers and Scrapers

The 'Enable JavaScript and cookies to continue' error is triggered when Cloudflare detects that a client fails its security challenge, typically because JavaScript is disabled, cookies are not persisted, or the request originates from a non-human tool like curl or a headless browser. While regular users can resolve the issue by enabling JavaScript and cookies in browser settings and clearing their cache, developers face a more complex problem when using automation tools. Cloudflare intentionally blocks traffic from scripts such as Python's requests library or unconfigured headless browsers, as they cannot execute the JavaScript challenge it issues. For automation use cases, tools like Playwright are recommended, with proper configuration including a realistic User-Agent, full viewport settings, and cookie persistence to mimic human browser behavior. Mobile developers must also ensure JavaScript and cookie support are explicitly enabled in Android WebView or iOS WKWebView components.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Build a GeoIP Lookup Service in Laravel Using IPRout API

A developer tutorial published on DEV Community outlines a lightweight method for integrating GeoIP lookups into Laravel applications using the IPRout API. The approach requires no third-party PHP packages, relying instead on Laravel's built-in HTTP client to query IPRout's endpoint with an IPv4 or IPv6 address. Developers can obtain a free seven-day trial key — valid for 1,000 requests and requiring no account login — to evaluate the API before committing to production use. The tutorial walks through storing credentials securely in environment variables, configuring a dedicated service class, and returning location data such as country, city, timezone, coordinates, and ASN. The guide also cautions that GeoIP data is an estimate based on IP addresses and should not be treated as precise or verified location information.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer's Nap Sparks WordPress Upload Security Plugin With 300+ Installs

A WordPress developer built the 'Restrict WP Upload Type' plugin after years of dealing with corrupt files, oversized media, and unsafe uploads breaking client websites. The idea came during a 10-minute nap in early 2022, when recurring memories of upload-related site crashes prompted a simple question: why not let admins toggle allowed file types in one place? Having already shipped a plugin on WordPress.org, the developer mapped out the concept before writing any code. The resulting plugin gives site owners a straightforward settings screen to whitelist permitted file types and automatically block everything else. Since its release, the plugin has surpassed 300 installs on WordPress.org.

0 comments Read more at DEV Community