deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

NuReaper

NuReaper — Scanner de Sécurité de Paquets NuGet ⚠️ Travail en cours — Le projet est activement développé. Le moteur de scan principal est fonctionnel ; la persistance en base de données, le cache et la couverture complète des tests sont prévus pour les prochaines itérations. NuReaper est une API...

OSCE3-Complete-Guide

OSCE³ and OSEE Study Guide OSWE Contenu Outils et méthodologies de sécurité web Analyse de code source Cross-site scripting persistant Détournement de session Désérialisation .NET Exécution de code à distance Injections SQL aveugles Exfiltration de données Contournement des restrictions de...

Weggli_rules_SSTIC2023

Aqui está uma lista curada de consultas weggli Você pode lê-las e usá-las uma a uma, ou lançá-las em lote: Uso: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ Existem três categorias: 1. funções perigosas: como strcpy, system, etc.. 2. stack: tenta...

DakshSCRA

Daksh SCRA स्रोत कोड समीक्षा सहायक Author: Debasis Mohanty [email protected] Twitter / X: @coffeensecurity www.coffeeandsecurity.com root@kitploit: दक्ष SCRA के बारे में दक्ष SCRA स्रोत कोड समीक्षा सहायता उपकरण स्रोत कोड समीक्षा प्रक्रिया की दक्षता बढ़ाने के लिए बनाया गया है, जो कोड समीक्षको...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

kube-score

kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...

cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| Com o ApkVuln, você obterá os arquivos .java de um APK e eles serão analisados em busca de possíveis vulnerabilidades no código, utilizando expressões...

ngrev

ngrev Graphical tool for reverse engineering of Angular projects. It allows you to navigate in the structure of your application and observe the relationship between the different modules, providers, and directives. The tool performs static code analysis which means that you don't have to run you...

slythestx

🐍 Slythestx मोबाइल सुरक्षा के लिए स्विस आर्मी वर्म iOS और Android पर स्टेटिक कोड विश्लेषण और डायनामिक भेद्यता खोज के लिए एक एकीकृत फ्रेमवर्क। !Buy Me A...

wpbullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation Simply clone the repository, install requirements and run the script $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py Usage...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

ghostrings

Ghostrings Scripts para recuperar definições de strings em binários Go com análise de P-Code. Testado com x86, x86-64, ARM e ARM64. Scripts Golang Estes podem ser encontrados na categoria Golang no Gerenciador de Scripts. GoDynamicStrings.java Analisa o P-Code para encontrar estruturas de string...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

static-code-analysis-helper

Static-Code-Analysis-Helper विवरण यह आपके प्रोजेक्ट फ़ोल्डर में कई वेब प्रोग्रामिंग भाषाओं और फ्रेमवर्क्स में उन फ़ंक्शनों का पता लगाता है जो हमले की कार्यप्रणाली का कारण बन सकते हैं। यह आपको स्थैतिक कोड विश्लेषण करने में सहायता करता है। नोट : यहाँ वर्णित कई फ़ंक्शन असुरक्षाएँ उत्पन्न नहीं कर सकत...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

whispers

Whispers "मेरे छोटे पक्षी हर जगह हैं, यहाँ तक कि उत्तर में भी, वे मुझे सबसे अजीब कहानियाँ फुसफुसाते हैं।" - लॉर्ड वैरीस Whispers एक स्थैतिक कोड विश्लेषण उपकरण है जो विभिन्न सामान्य डेटा प्रारूपों को पार्स करने के लिए डिज़ाइन किया गया है, ताकि हार्डकोडेड क्रेडेंशियल्स और खतरनाक फ़ंक्शन खोजे जा सके...

multiplier

Multiplier encontra mais bugs mais rápido Multiplier fornece capacidades precisas e abrangentes de compreensão de código. Isso é feito salvando artefatos de build em um banco de dados e, em seguida, tornando-os persistentemente acessíveis por meio de uma API C++ ou Python. Multiplier enfatiza a...