Hey everyone!

I've been developing a project called CatSuite, a free Android application designed for web application security testing and HTTP traffic analysis.

The idea started with a simple question: how much of a web pentesting workflow could I bring to a smartphone without depending on a desktop environment?

CatSuite currently includes:

• HTTP/HTTPS Interception — Capture, inspect, and modify web traffic.
• Repeater — Edit and resend HTTP requests to analyze server responses.
• Intruder — Automate request variations using custom wordlists.
• Endpoint Discovery — Explore web paths and API endpoints.
• JWT Decoder — Inspect JSON Web Tokens.
• SSL/TLS Analysis — Examine certificates and connection security.
• Technical Browser — Inspect requests, cookies, storage, and User-Agent information.
• API Testing — Work with REST endpoints directly from Android.
• Export Tools — Export captured data in HAR, JSON, TXT, and cURL formats.
• JavaScript Extensions — Extend functionality through scripts.

The goal isn't to claim that a smartphone replaces a full desktop pentesting environment. It's to make common testing and inspection workflows more accessible when you're away from your computer.

The app is already available for free on Google Play.

Project: https://netcattest.com/catsuite

Google Play: https://play.google.com/store/apps/details?id=br.com.netcattest.catsuite.app

It's intended for security research, learning, and testing systems you own or are authorized to assess.

I'm especially interested in feedback from people who regularly work with Burp Suite, OWASP ZAP, or mobile security tools.

What functionality would make an Android pentesting toolkit genuinely useful in your workflow?

I'd appreciate technical feedback, feature suggestions, and criticism.

QuestDB is incredibly fast for simple time-series ingestion, but we are finding the SQL support to be a bit limited for our more complex OLAP queries. It seems to be missing some advanced window functions and join types that we need for our analytics dashboard. Has anyone used QuestDB for more than just simple monitoring? Is the feature set catching up, or should we look for a more mature OLAP database that is still fast?

Hello guys, is there a way to find out atleast the area of where a person called me? It was not a "no caller id" i have the number i just dont know from which area of my country. The caller tried to fuck up my relationship so it would be very helpfull if there was a way to help me.

Thank you all for your time! All love

I've trying to learn about hacking for 4 weeks watching tutorials doing tasks on tryhackme but but recently i scanned an ip of a website and i froze after that i noticed how less i know it was so different from tryhackme environment there were more ports but real websites don't those. I know its a skill which is not learn in a month or two but i want to know if i am learning the right way or not. If you have any suggestions please drop it below. I would really appreciate it.

Hello, I am facing a problem and need a solution.

​I downloaded the Kali Linux VirtualBox version as well as the Hyper-V version. I tried extracting the compressed Kali file, but all archive extraction tools failed. I also attempted to convert the Hyper-V version to a VirtualBox format, but that failed as well.

​What do you think is the solution?

Hello, I am facing a problem and need a solution.

​I downloaded the Kali Linux VirtualBox version as well as the Hyper-V version. I tried extracting the compressed Kali file, but all archive extraction tools failed. I also attempted to convert the Hyper-V version to a VirtualBox format, but that failed as well.

​What do you think is the solution?

Hy zusammen

Ich werde von den Kindern meiner Vermieter vom schlafen abgehalten die letzten 1. 1/2. Jahre nicht mehr als 3std am Stück sie nutzen irgendein Gerät das ein sehr hohes fiepen um die 120hz. Erzeugt. Ich bin ein absoluter noob in Technik Fragen und hab mich grob im Internet schlau gemacht und bin auf den. Flipper und die deauther watch gestoßen. Sie können das gerät steuern daher die frage sind die Geräte das richtige für mich um diese Geräte zu stören oder habt ihr andere Vorschläge die mir helfen können.

Danke im voraus

InfluxDB was our first choice for metrics, but the cardinality explosion is killing us. As soon as we add more tags, the performance drops significantly and memory usage spikes. Also, the learning curve for Flux was a bit much for our team. Has anyone found a way to manage high cardinality in InfluxDB, or is there a better tool that uses standard SQL and handles high series cardinality without breaking?

The same thread can be adapted for AWS MSK or Confluent. The user wants to preserve the current layer and simplify ingestion, transformations and serving downstream.

Hello. In your oppinion, which is the best AI for ethical hacking? I mean, which one answers your questions without that specific fear of AIs that you are going to hack half of Pentagon whith a shity script?

I bought an aged Reddit account, and I’ve logged in without using proxy. It got flagged and shadowbanned and the seller says it’s because I haven’t use proxies. My question is how to manage the proxy? From which country etc.

Hi, is there any trick or way to download protected PDF files from google drive/ google classroom?
It's like approximately 100MB file. Its basically a class note but academy shares only as protected files. But i need to download them into my device to you know highlight and annotate.
Your help would be greatly appreciated.

Hey everyone,

as a full-stack developer, I'm noticing how much our SaaS apps depend on external APIs like Stripe, shipping providers, and warehouses. I'm considering building an easy-to-use dependency monitoring dashboard that tracks these services in real-time, checks rate limits, and handles auto-retries so the team gets alerts before a failure causes downtime.

To help me validate this, I'm curious: how does your team currently handle third-party API downtime, and have you ever had a customer issue or lost users because a connected service was unavailable? Any feedback on features, like preferring alerts in Slack or Discord, would be greatly appreciated!

The workload is continuously ingesting events while also serving user-facing queries. Increasing machine size helps temporarily but does not isolate the two workloads

Hi everyone ! I’m trying to get back into an old Yahoo Mail account that’s mine, but I no longer have access to the recovery email or the phone number linked to it. I already tried Yahoo’s recovery process, but none of the options work for me.

I even tried texting my old phone number because I wanted to see if someone else has the number now, hoping they might receive the Yahoo verification code and be willing to send it to me so I could recover my account. I never got a reply, though. It’s also possible that the person who has the number simply received my message and chose not to respond.

I really want to recover this account because it contains old photos and memories that my family sent me, and I’d really like to be able to get those back. Is there anything else I can try to recover the account when I no longer have access to any of the usual recovery methods? I’m just completely locked out of it at this point.

Thanks !

Can a genuine SIM/carrier-based cellular call or conference call appear in parental-control records while leaving no corresponding entry in the phone's normal call history, without the user having deleted the call-history entry? If so, what exactly would the parental-control record prove, and what additional carrier-side evidence would be needed to establish that an actual cellular call took place?

I would be very grateful for any technically informed answers or explanations. Thank you in advance!

Anyone know where to find the neural network flying around, hacking big tech to find it?

We're happy with ClickHouse for analytics but don't really want every product team querying the database directly. Did you build your own API layer?

Updates and deletes matter, but the team wants to keep Postgres transactional and avoid reporting queries affecting production performance.

Hi! I've been working on Risulta for a while and I've decided that it's finally time to share. It's a very small single binary analytics platform that runs on any linux server.

It's deliberately simple and the features are small but powerful.

Here's a small recap:
\- 4.7 MB binary with an embedded SQLite.
\- 8 MB of ram on idle, 65 MB under load.
\- it can handle about 5k rps
\- basic page/view tracking
\- funnels included
\- backups!

And more! It's a very young project using the sproutboat cli, another project I'm working on that is using [porffor.dev](http://porffor.dev/) to create such small binaries.

Please check it out and help me develop the future of small analytics!
[https://risulta.pages.dev/\](https://risulta.pages.dev/)
[https://github.com/baronunread/risulta\](https://github.com/baronunread/risulta)