binwalk

Binwalk v3 Esta es una versión actualizada de la herramienta de análisis de firmware Binwalk, reescrita en Rust para mayor velocidad y precisión. ¿Qué hace? Binwalk puede identificar y, opcionalmente, extraer archivos y datos que han sido incrustados dentro de otros archivos. Aunque su enfoque...

ShellSweep

ShellSweep 扫描网络中的邪恶 为什么选择 ShellSweep "ShellSweep" 是一款基于 PowerShell/Python/Lua 的工具，旨在检测指定目录中的潜在 Web Shell 文件。 ShellSweep 及其工具套件通过计算文件内容的熵来估算文件成为 Web Shell 的可能性。高熵表明随机性更高，这是加密或混淆代码的特征，常见于 Web Shell 中。 它只处理具有特定扩展名（.asp、.aspx、.asph、.php、.jsp）的文件，这些扩展名常用于 Web Shell。 可以排除某些目录不进行扫描。 在扫描过程中，可以忽略具有特定哈希值的文...

XMachOViewer

XMachOViewer Resumen XMachOViewer es un visor de Mach-O para Windows, Linux y macOS. Características Escaneo heurístico : Detecta automáticamente diversas características y anomalías en archivos Mach-O. Visor de cadenas : Muestra todas las cadenas legibles dentro del archivo Mach-O. Visor...

SentinelNav

SentinelNav SentinelNav es una herramienta de visualización binaria y análisis forense escrita en Python puro, sin dependencias externas. Transforma datos binarios en un mapa espectral interactivo que permite a los analistas identificar visualmente estructuras de archivos, anomalías de entropía,...

HexWalk

HexWalk - Editor/Visor/Analizador Hex HexWalk es un editor, visor y analizador hexadecimal. Construido sobre qhexedit2, Capstone y Qt, con un escáner de firmas integrado, HexDig, inspirado en binwalk. Es multiplataforma y tiene muchas funciones: Búsqueda avanzada puede encontrar patrones en...

ScrapPY

🐕 ScrapPY: 轻松实现PDF数据提取 ScrapPY 是一款 Python 实用工具，用于提取手册、文档及其他敏感 PDF 中的内容，生成针对性的单词列表，可供进攻性安全工具用于暴力破解、强制浏览和字典攻击。ScrapPY 可执行词频、熵和元数据分析，并支持完整输出模式以定制针对特定攻击的单词列表。该工具深入挖掘可能指向密码或隐藏目录的关键词和短语，输出为 Hydra、Dirb 和 Nmap 等工具可读取的文本文件。借助 ScrapPY，加速初始访问、漏洞发现和横向移动！ Demo:...

truehunter

Truehunter Truehunter 的目标是使用快速且内存高效的方法检测加密容器，无需任何外部依赖，便于移植。它被设计用于检测 Truecrypt 和 Veracrypt 容器，但也可能检测到任何其“头部”不在数据库中包含的加密文件。 Truehunter 执行以下检查： 1. 将文件的前 8 个字节与其自身数据库进行比对。 2. 文件大小模 64 必须为零。 3. 计算文件的熵。 Truehunter 是 BlackArch 取证工具的一部分。 https://blackarch.org/forensic.html 安装 任何 Python 版本从 2.7 到 3.7...

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

MalwareForge---Advanced-Static-Malware-Analyzer

🛡️ MalwareForge - Analizador Avanzado de Malware Estático MalwareForge es una potente herramienta de análisis estático de malware que detecta comportamiento malicioso sin ejecutar el archivo. ✨ Características 🦠 Análisis de comportamiento : Inyección de procesos, persistencia, red, stealer, evasió...

Hash-Eye

🔍 HashEye - 高级哈希类型检测工具 HashEye 是一个强大的Python命令行工具，用于即时检测和分析哈希类型。它提供关于哈希格式、安全级别、熵分析和模式检测的详细信息。 由Isaac Security Labs 提供支持 🔗 链接： GitHub: @ishaklaz Telegram: @isaacsecuritylabs ✨ 功能特性 🔎 多格式检测 ：支持十六进制和Base64编码的哈希 🎯 广泛哈希支持 ：检测 MD5、SHA1、SHA224、SHA256、SHA384、SHA512、NTLM、bcrypt、scrypt 等 📊 熵分析 ：计算香农熵以评估哈希随机...

Exploit for CVE-2025-14847

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Explo...

Binwalk

This is an implementation of the Binwalk firmware analysis tool in Rust, written for speed and accuracy. Binwalk can identify and optionally extract files and data embedded inside other files, with a focus on firmware analysis. It supports a wide variety of file and data types and can even help...

GUARD-CAN: Graph-Understanding and Recurrent Architecture for CAN Anomaly Detection

Modern in-vehicle networks face various cyber threats due to the lack of encryption and authentication in the Controller Area Network CAN. To address this security issue, this paper presents GUARD-CAN, an anomaly detection framework that combines graph-based representation learning with time-seri...

Dual Protection Ring: User Profiling Via Differential Privacy and Service Dissemination through Private Information Retrieval

User profiling is crucial in providing personalised services, as it relies on analyzing user behaviour and preferences to deliver targeted services. This approach enhances user experience and promotes heightened engagement. Nevertheless, user profiling also gives rise to noteworthy privacy...

MalVis: a Large-Scale Image-Based Framework and Dataset for Advancing Android Malware Classification

As technology advances, Android malware continues to pose significant threats to devices and sensitive data. The open-source nature of the Android OS and the availability of its SDK contribute to this rapid growth. Traditional malware detection techniques, such as signature-based, static, and...

ShellSweep

ShellSweep ShellSweeping the evil Why ShellSweep "Shell...

New Research Paper: Prevalence and impact of low-entropy packing schemes in the malware ecosystem

Detection of malware is a constant battle between the technologies designed to detect and prevent malware and the authors creating them. One common technique adversaries leverage is packing binaries. Packing an executable is similar to applying compression or encryption and can inhibit the abilit...

[Binwalk] Firmware Analysis Tool

Binwalk is a firmware analysis tool designed to assist in the analysis, extraction, and reverse engineering of firmware images and other binary blobs. It is simple to use, fully scriptable, and can be easily extended via custom signatures, extraction rules, and plugin modules. Binwalk supports...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware...

[Binwalk v1.2.2] Firmware Analysis Tool

Binwalk is a firmware analysis tool designed to assist in the analysis, extraction, and reverse engineering of firmware images and other binary blobs. It is simple to use, fully scriptable, and can be easily extended via custom signatures, extraction rules, and plugin modules. Binwalk supports...