DOM Source / Sink Locator
A Burp Suite extension for surfacing DOM source indicators from textual Proxy responses and exporting findings for review.

PROJECTS
Security tooling, poker study projects, tracking systems, and experiments that grew out of the Dreams of Tragedy journey.
FEATURED PROJECTS
Public tools link directly to GitHub, while site projects open into their own Dreams of Tragedy pages.
A Burp Suite extension for surfacing DOM source indicators from textual Proxy responses and exporting findings for review.
A personal framework for organizing SSRF discovery and testing workflows during authorized bug bounty research.
ALL PROJECTS
Burp Suite extension for locating DOM source indicators in Proxy responses and exporting findings for review.
A personal framework for organizing SSRF discovery and testing workflows during authorized bug bounty research.
A Burp Suite helper for identifying reflected parameters and collecting them into a list for review and export.
An offline SIEM query builder for Splunk, CrowdStrike, Microsoft Sentinel, and IBM QRadar, featuring IOC searches, visual filters, and customizable result tables.
A structured 18-phase workflow for turning scope into attack surface, functionality mapping, vulnerability hypotheses, and targeted testing.
Custom reports for reviewing specific database situations, hand strength, and post-session study without exposing private leak details.
A future interactive trainer concept built around real solver-backed spots. The project is intentionally paused until a practical strategy-data workflow is available.
BUILT, NOT JUST LISTED
Public repositories stay on GitHub for source, releases, and technical details. Dreams of Tragedy provides the visual overview, screenshots, project context, and progress history.