SUNBURST

SUNBURST Rilevamento per C2 Stage-1 di SUNBURST utilizzando l'Entropia di Shannon Informazioni: Utilizzo dell'Entropia di Shannon per rilevare algoritmi di generazione di domini DGA. Dovrebbero essere inseriti solo FQDN nella funzione o letti da un file CSV. SYNTAX:...

keyFinder

KeyFinder Rilevamento passivo di chiavi API e segreti per Chrome e Firefox KeyFinder è un'estensione per browser per Chrome e Firefox che analizza passivamente ogni pagina visitata alla ricerca di chiavi API, token, segreti e credenziali trapelati. Funziona silenziosamente in background senza...

SubDomainizer

Offrimi un Caffè SubDomainizer SubDomainizer è uno strumento progettato per trovare sottodomini nascosti e segreti presenti sia in pagine web, che in Github, che in javascript esterni presenti nell'URL dato. Questo strumento trova anche bucket S3, URL di CloudFront e altro da quei file JS che...

ALYCON-Threat-Landscape

ALYCON: Analisi Avanzata del Panorama delle Minacce Rilevamento di Minacce Multi-Dominio tramite Analisi dello Spazio delle Fasi Information-Theoretic Panoramica Visualizzazione dello spazio delle fasi di ALYCON che mostra il rilevamento di minacce multi-dominio e la classificazione delle anomali...

Password-Analysis

Passwortanalyse: Basierend auf Entropie und Wörterbüchern schwacher Passwörter Skript in Go, das eine Liste von Passwörtern analysiert. Herunterladen und Kompilieren Sie können die Binärdatei direkt von den Releases herunterladen. Wenn Sie sie lieber manuell kompilieren möchten, beachten Sie die...

kyubisweep

🦊 KyubiSweep Scova i segreti esposti con l'astuzia di una volpe! Uno strumento CLI leggero e cross‑platform che scansiona il tuo filesystem per rilevare segreti esposti, chiavi API e token. Realizzato con Go per massime prestazioni e zero dipendenze. ✨ Caratteristiche 🔍 30+ Pattern di Segreti –...

DumpsterDiver

DumpsterDiver di @Rzepsky DumpsterDiver è uno strumento in grado di analizzare grandi volumi di dati alla ricerca di segreti hardcoded come chiavi ad es. AWS Access Key, Azure Share Key o chiavi SSH o password. Inoltre, consente di creare semplici regole di ricerca con condizioni di base ad es...

Analyzing Unsolicited Internet Traffic: Measuring IoT Security Threats Via Network Telescopes

Network telescopes serve as a critical passive monitoring tool for capturing unsolicited Internet traffic, providing insights into global scanning and reconnaissance behavior. This study analyzes a 10-day dataset during January 2025 consisting of approximately 22 million packets collected by the...

ShellForge: Adversarial Co-Evolution of Webshell Generation and Multi-View Detection for Robust Webshell Defense

Webshells remain a primary foothold for attackers to compromise servers, particularly within PHP ecosystems. However, existing detection mechanisms often struggle to keep pace with rapid variant evolution and sophisticated obfuscation techniques that camouflage malicious intent. Furthermore, many...

Generalized and Unified Equivalences between Hardness and Pseudoentropy

Pseudoentropy characterizations provide a quantitatively precise demonstration of the close relationship between computational hardness and computational randomness. We prove a unified pseudoentropy characterization that generalizes and strengthens previous results for both uniform and non-unifor...

Sarenka - OSINT Tool - Data From Services Like Shodan, Censys Etc. In One Place

SARENKA is an Open Source Intelligence OSINT tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices https://censys.io/ , https://www.shodan.io/. It scraps data about Common Vulnerabilities and...

Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...

Search Secrets in Various File Types: DumpsterDiver

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secret keys e.g. AWS Access Key, Azure Share Key or SSH keys based on counting the entropy. Additionally, it allows creating a simple search rules with basic conditions e.g. reports only csv file...

DumpsterDiver - Tool To Search Secrets In Various Filetypes

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secret keys e.g. AWS Access Key, Azure Share Key or SSH keys. Additionally, it allows creating a simple search rules with basic conditions e.g. reports only csv file including at least 10 email...

Cracking Cryptography and Encryption Exponentially Easier

It’s been a brutal month for crypto. Starting with the Black Hat conference, researchers, engineers and hackers have been unveiling new weaknesses and attacks in different cryptographic implementations that threaten the security of communication and commerce on the Web. Not only have holes been...