Features

01 / address bar

Bang shortcuts

Prefix a query with a bang, land on the source. Sixteen built in. Adding your own takes a key and a URL with %s in it.

• !cve NVD · !edb Exploit-DB · !att ATT&CK
• !shodan · !crt · !vt VirusTotal
• !gtfo GTFOBins · !ht HackTricks · !kali
• !gh · !mdn · !npm · !so

!cve log4shell
  nvd.nist.gov/vuln/search?query=log4shell

!crt example.com
  crt.sh/?q=example.com

!gtfo tar
  gtfobins.github.io, scoped

localhost:8080
  address, not a search

02 / credentials

Encrypted vault

Standard primitives, not a homemade scheme. scrypt is memory-hard, so a stolen file is expensive to attack offline. GCM authenticates as well as encrypts, so tampering fails loudly.

• Key stays in the main process, never crosses IPC
• Auto-lock from one minute to never
• Clipboard clears itself after twenty seconds
• Generator uses rejection sampling, live entropy
• Plaintext export — a vault you can't leave is a trap

What it doesn't protect against →

{
  "kdf": {
    "name": "scrypt",
    "N": 32768, "r": 8, "p": 1,
    "salt": "..."
  },
  "iv":   "..."  // fresh every write
  "tag":  "..."  // GCM auth tag
  "data": "..."  // ciphertext
}

03 / hardening

Security levels

Three steps, modelled on Tor Browser. Higher levels break more sites. That's the trade, not a bug.

Notifications, MIDI, HID, serial and USB are refused at every level.

04 / network

Content blocking

84 host rules matched by domain suffix, so doubleclick.net covers ad.doubleclick.net. Dropped before a connection opens.

• Your own rules, one host per line
• Session counters
• Top-level navigation never blocked — that makes dead tabs
• Applies in private windows too

05 / everyday

The basics

A browser missing these is a demo, not a tool.

• Tabs, bookmarks bar, downloads with pause and resume, history
• Find in page, zoom, page source, contextual menus
• Private windows · docked DevTools
• Bookmark import and export, JSON or CSV