Behind the handle
Learning by breaking things
I am allowed to break.
Bobernator is the offensive-security identity of a self-taught hobbyist from Hungary. Free time goes into hands-on TryHackMe and Hack The Box labs, then into building open-source tools that make the next run cleaner, faster and easier to understand.
Curiosity over credentials.
Practice over posturing.
Recon orchestration
BoberAutoScanner
Recon, connected.
A Python workflow for CTF, Hack The Box and OSCP-style labs. It connects port discovery, service enumeration, web testing and Active Directory recon, keeping the output structured while leaving the decisions to the operator.
View repository ↗Web application discovery
BoberCrawler
Follow the surface.
An asynchronous, Playwright-based crawler built for scoped security exploration. It understands modern browser-driven applications, supports authenticated sessions and stays Burp-friendly without losing sight of scope.
View repository ↗Active Directory paths
BloodBober
See the path.
A local Flask interface for reviewing BloodHound ZIP exports. The Bober Edition surfaces interesting ACLs, delegation findings, roasting opportunities and attack paths without sending the dataset anywhere.
View repository ↗Bober Edition based on the original project by MRXH4X.
Burp Suite extension
BoberProxy
Control the request.
A Jython extension that adds a programmable request pipeline to Burp Suite. It combines request and response logging, template-driven transformations, automatic cookie and CSRF handling, redirect chains and precise traffic filtering in one tab.
View repository ↗Disable the extension while using Burp's built-in intercepting workflow.