Quimera od Julen Garrido

Quimera is a security inspection extension designed for authorized web application testing.

It provides:

• Cookie inspection and management.
• Analysis of Secure, HttpOnly, SameSite and domain attributes.
• Inspection of localStorage and sessionStorage.
• Detection of exposed JWTs, tokens and authentication-related values.
• Browser-side security findings that cannot always be observed through an HTTP proxy.
• Optional integration with the Quimera extension for Burp Suite through a local bridge on 127.0.0.1.
• Optional synchronization with the Burp Suite Target Scope.

Quimera does not send browsing data to external servers. Burp integration is disabled by default and must be enabled and paired explicitly by the user. When enabled, selected browser observations are sent only to the locally running Quimera bridge on 127.0.0.1.

This tool is intended exclusively for systems you own or are explicitly authorized to test.