heck_tab

I built HackerTab, a custom new-tab page designed for bug bounty hunters and security researchers. The default Chrome new tab is pretty useless if you spend your day reading writeups, checking Shodan, and tracking HackerOne reports, so I made something that actually fits that workflow.

It’s a React app with a dark navy, cyan theme (inspired by HackTricks) that replaces your browser’s new tab with:

• A security writeup feed that pulls from Pentester Land, PortSwigger Research, InfoSec Writeups, and Intigriti Bug Bytes, so you see fresh bug bounty content every time you open a tab
• A HackerOne report tracker where you can connect your H1 API token. It tracks triage states, severity, bounty earnings, and dupes across programs(so you don’t have to check the website anxiously everytime :)
• Multi-engine search with Google, DuckDuckGo, Shodan, and GitHub. You can tab-switch between them and get live autocomplete suggestions
• A bookmarks sidebar (type “bm url” in the search bar to save one instantly)
• A scratchpad drawer for quick notes, IPs, payloads, auto-saves on every keystroke
• Network latency ping, clock, and a bunch of keyboard shortcuts to navigate everything without touching the mouse

The whole thing is keyboard-driven(press ? to see all shortcuts). Press / to search, N for notes, R to flip between feed and reports, B to bookmark, comma for settings. Everything saves to localStorage.

The HackerOne API integration was the biggest headache. Their API doesn’t send CORS headers, so you can’t just fetch from a browser tab. I had to build support for multiple CORS proxy providers (corsproxy.io, cors.sh), custom Cloudflare Worker proxies, and a direct mode for browser extensions with host permissions. Getting all those paths to work reliably with proper error handling and user-friendly setup in settings took a lot of iteration.

Mobile responsiveness was also tricky. This is naturally a desktop-first tool (it’s a new tab page), but I wanted it to still be usable on mobile. Added a minimal mobile mode that strips out verbose text and tips, shrinks stat cards, and cleans up the layout so it doesn’t feel cramped on a phone screen.

The search bar honestly feels really good to use. Tab to cycle engines, arrow keys for suggestions, bm prefix to instantly bookmark. It flows naturally. And the HackerOne tracker view makes it genuinely useful, not just a static page.

Also proud that the whole thing works with zero backend. Everything runs client-side with localStorage persistence. You can deploy it anywhere static files are served.

How to test it:

1. Visit the deployed site (link in repo)
2. Try the search bar, press / to focus, type something, use Tab to switch between Google/DuckDuckGo/Shodan/GitHub
3. Press N to open the scratchpad, type some notes
4. Press B to add a bookmark
5. Click the reports tab (or press R) to see the HackerOne tracker, you can import a CSV or log reports manually
6. Press comma to open settings and play with accent colors, toggle features on/off, try the color picker
7. Press ? to see all keyboard shortcuts

No login required. Everything persists in your browser’s localStorage.

Stack: React 19, plain CSS (no UI library), Lucide icons, deployed on Vercel

Repo: https://github.com/Its-Abhinav-Jangid/new_tab