keyFinder

KeyFinder Passive API key and secret discovery for Chrome and Firefox KeyFinder is a browser extension for Chrome and Firefox that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. What ...

Password-Analysis

Password Analysis: Basado en Entropía y Diccionarios de Contraseñas Débiles Script en Go que analiza una lista de contraseñas. Descarga y Compilación Puedes descargar el binario directamente desde los lanzamientos. Si prefieres compilarlo manualmente, considera los siguientes pasos. root@kitploit...

SubDomainizer

Cómprame un Café SubDomainizer SubDomainizer es una herramienta diseñada para encontrar subdominios ocultos y secretos presentes en una página web, en Github y en los JavaScripts externos que se encuentran en la URL proporcionada. Esta herramienta también encuentra buckets S3, URL de CloudFront y...

kyubisweep

🦊 KyubiSweep Hunt exposed secrets with the cunning of a fox! A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum performance and zero dependencies. ✨ Features 🔍 30+ Secret Patterns - Detects AWS, Stripe,...

SUNBURST

SUNBURST Detección para SUNBURST C2 Stage-1 usando la entropía de Shannon Acerca de: Usando la entropía de Shannon para detectar algoritmos de generación de dominios DGA. Solo se deben introducir FQDNs en la función o leerse desde un archivo CSV. SYNTAX: Prefixorsubdomain.Domain.TLD Hecho debido ...

DumpsterDiver

DumpsterDiver（作成者：@Rzepsky） DumpsterDiver は、大量のデータを分析し、AWS Access Key、Azure Share Key、SSHキーなどのキーやパスワードといったハードコードされたシークレットを検索するツールです。また、単純な条件（例：少なくとも10件のメールアドレスを含むCSVファイルのみを報告する）を用いた単純な検索ルールを作成することもできます。 このツールの主なアイデアは、潜在的なシークレット漏洩を検出することです。実際の動作はデモビデオでご覧いただけます。また、すべての機能についてはこちらの記事をお読みください。 主な機能：...

ALYCON-Threat-Landscape

ALYCON: 高度な脅威ランドスケープ分析 情報理論的位相空間分析を用いたマルチドメイン脅威検出 概要 ALYCON の位相空間可視化は、マルチドメインの脅威検出と異常分類を示しています。 フレームワーク: トレーニング不要で、シャノンエントロピー H、フィッシャー情報量 F、ワッサースタイン距離 W を用いた普遍的な異常検出。システム状態を幾何学的に異なる領域にマッピングします。 可視化コンポーネント 脅威ランドスケープマップは以下を示します: 位相空間座標: H, F, W 検出軸 状態クラスタリング: 正常状態 vs 異常状態 マルチドメイン分析: クロスドメイン脅威検出能力...

Analyzing Unsolicited Internet Traffic: Measuring IoT Security Threats Via Network Telescopes

Network telescopes serve as a critical passive monitoring tool for capturing unsolicited Internet traffic, providing insights into global scanning and reconnaissance behavior. This study analyzes a 10-day dataset during January 2025 consisting of approximately 22 million packets collected by the...

ShellForge: Adversarial Co-Evolution of Webshell Generation and Multi-View Detection for Robust Webshell Defense

Webshells remain a primary foothold for attackers to compromise servers, particularly within PHP ecosystems. However, existing detection mechanisms often struggle to keep pace with rapid variant evolution and sophisticated obfuscation techniques that camouflage malicious intent. Furthermore, many...

Generalized and Unified Equivalences between Hardness and Pseudoentropy

Pseudoentropy characterizations provide a quantitatively precise demonstration of the close relationship between computational hardness and computational randomness. We prove a unified pseudoentropy characterization that generalizes and strengthens previous results for both uniform and non-unifor...

Sarenka - OSINT Tool - Data From Services Like Shodan, Censys Etc. In One Place

SARENKA is an Open Source Intelligence OSINT tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices https://censys.io/ , https://www.shodan.io/. It scraps data about Common Vulnerabilities and...

Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...

Search Secrets in Various File Types: DumpsterDiver

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secret keys e.g. AWS Access Key, Azure Share Key or SSH keys based on counting the entropy. Additionally, it allows creating a simple search rules with basic conditions e.g. reports only csv file...

DumpsterDiver - Tool To Search Secrets In Various Filetypes

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secret keys e.g. AWS Access Key, Azure Share Key or SSH keys. Additionally, it allows creating a simple search rules with basic conditions e.g. reports only csv file including at least 10 email...

Cracking Cryptography and Encryption Exponentially Easier

It’s been a brutal month for crypto. Starting with the Black Hat conference, researchers, engineers and hackers have been unveiling new weaknesses and attacks in different cryptographic implementations that threaten the security of communication and commerce on the Web. Not only have holes been...