Gareth Heyes 

2.7K Followers
236 Following
727 Posts
javascript:/*--></title></style></textarea></script></xmp><svg/onload='-/"/-/onmouseover=1/-/[*/[]/-alert(1)//'>

https://garethheyes.co.uk/#latestBook

https://leanpub.com/javascriptforhackers/
My web sitehttps://garethheyes.co.uk/
PortSwigger Researchhttps://portswigger.net/research
Githubhttps://github.com/hackvertor/
My bloghttp://www.thespanner.co.uk/
JavaScript for hackershttps://leanpub.com/javascriptforhackers/
Shazzer now displays ranges in nice unicode groups. I made the decision to convert large amount of character logs into ranges a while ago, this compresses the data really well and I can show massive amounts of data like JS variables easily.
Shazzer can now fuzz over 1 million characters now. I got Claude to refactor the fuzzing code and now it fuzzes in chunks. This is amazingly fast on Chromium based browsers because sandboxed iframes are process isolated. Firefox is pretty slow because it does not do this.

I wanted to see what Claude was capable of and I have a keen interest in football statistics. So I started a new side project called False 9, it was meant to take a few days to get some interesting stats. It escalated. I started off manually syncing from the data provider.

Then I thought wait a minute let's automate this, now the site updates itself and syncs football score every minute they are playing. Then I decided to see if I could predict scores, I got Claude to create various prediction models. These were kinda cool they all used different signals to try and predict football scores.

I decided to automate adjusting the signals based on previous results so I got Claude to do a cron task to manipulate the signals and see if I could improve predictions. It worked quite well.

I got incredible juice out of a per month $20 budget but unfortunately I would need to spend more which I'm not willing to do. You can't get positional data for example without spending considerably more. Anyway if you like football stats check it out

https://false9.uk/teams/40?season=2025&league=39&tab=conceded&compare=42

Smart paste is in Hackvertor v2.2.60 and has been released to the BApp store!
I've just added the coolest feature to Burp Hackvertor. Smart paste. If you have multiple encodings on your clipboard, you can use CMD+SHIFT+V and Hackvertor will convert all the data and wrap it with encoding tags 😎

Your Shazzer profile page now evolves the more public vectors you have. It changes colour, increases connected circles and your level changes.

https://shazzer.co.uk/profile?id=6605740959c283fb174e7998

Shazzer - Shared online fuzzing

An app to enable to fuzz all sorts of browser behaviour. Share your fuzz results with the world and discover new bugs!

You may have noticed I've been a bit quiet on social media recently, this is why...I'm going to present at Black Hat!

Can't wait to present these techniques! Here is a link to the abstract in case the screenshot is hard to read:

https://blackhat.com/us-26/briefings/schedule/index.html#css-the-bomb-inside-your-inbox-51909

Allowed you to use Chrome's local AI model in Hackvertor tags. Warning it's very slow but should get better with time. You have to enable the local model in chrome://flags for it to work.
https://hackvertor.co.uk/urls/33

Added AI features to Shazzer using Chrome's local model. They aren't very useful yet because the local model is very slow and isn't very smart but should improve over time when the model is updated. I've added:

- AI write description
- AI generate vector
- AI generate variant

I broke Shazzer, should be fixed now