22 matches found
ShellSweep
ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...
ScrapPY
🐕 ScrapPY: PDF Scraping Made Easy ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate targeted wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, and dictionary attacks. ScrapPY performs word frequency,...
binwalk
Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...
deepsecrets
DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...
HexWalk
HexWalk - Hex Editor/Viewer/Analyzer HexWalk is an Hex editor, viewer, analyzer. Built on qhexedit2, Capstone and Qt, with a built-in signature scanner, HexDig, inspired by binwalk. It is cross platform and has plenty of features: Advanced Find can find patterns in binary files based on...
XMachOViewer
XMachOViewer Overview XMachOViewer is a Mach-O viewer for Windows, Linux, and macOS. Features Heuristic Scan : Automatically detect various characteristics and anomalies in Mach-O files. String Viewer : Display all readable strings within the Mach-O file. Hex Viewer : Inspect the raw hexadecimal...
SentinelNav
SentinelNav SentinelNav is a zero-dependency, pure Python binary visualization and forensics tool. It transforms binary data into an interactive spectral map, allowing analysts to visually identify file structures, entropy anomalies, code sections, and potential cryptographic blobs. It combines a...
truehunter
Truehunter El objetivo de Truehunter es detectar contenedores cifrados mediante un enfoque rápido y eficiente en memoria, sin dependencias externas para facilitar la portabilidad. Fue diseñado para detectar contenedores de Truecrypt y Veracrypt, aunque puede detectar cualquier archivo cifrado cuy...
MalwareForge---Advanced-Static-Malware-Analyzer
🛡️ MalwareForge - Advanced Static Malware Analyzer MalwareForge is a powerful static malware analysis tool that detects malicious behavior without executing the file. ✨ Features 🦠 Behavior Analysis : Process Injection, Persistence, Network, Stealer, Evasion 💉 8 Injection Techniques : Process...
Hash-Eye
🔍 HashEye - Advanced Hash Type Detection Tool HashEye is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats, security levels, entropy analysis, and pattern detection. Powered byIsaac Security Labs 🔗 Links: GitHub:...
zero-copy-web-application-firewall
Z-WAF — Zero-Copy Web Application Firewall Z-WAF is a Windows...
Exploit for CVE-2025-14847
🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Explo...
Binwalk
This is an implementation of the Binwalk firmware analysis tool in Rust, written for speed and accuracy. Binwalk can identify and optionally extract files and data embedded inside other files, with a focus on firmware analysis. It supports a wide variety of file and data types and can even help...
GUARD-CAN: Graph-Understanding and Recurrent Architecture for CAN Anomaly Detection
Modern in-vehicle networks face various cyber threats due to the lack of encryption and authentication in the Controller Area Network CAN. To address this security issue, this paper presents GUARD-CAN, an anomaly detection framework that combines graph-based representation learning with time-seri...
Dual Protection Ring: User Profiling Via Differential Privacy and Service Dissemination through Private Information Retrieval
User profiling is crucial in providing personalised services, as it relies on analyzing user behaviour and preferences to deliver targeted services. This approach enhances user experience and promotes heightened engagement. Nevertheless, user profiling also gives rise to noteworthy privacy...
MalVis: a Large-Scale Image-Based Framework and Dataset for Advancing Android Malware Classification
As technology advances, Android malware continues to pose significant threats to devices and sensitive data. The open-source nature of the Android OS and the availability of its SDK contribute to this rapid growth. Traditional malware detection techniques, such as signature-based, static, and...
ShellSweep
ShellSweep ShellSweeping the evil Why ShellSweep "Shell...
New Research Paper: Prevalence and impact of low-entropy packing schemes in the malware ecosystem
Detection of malware is a constant battle between the technologies designed to detect and prevent malware and the authors creating them. One common technique adversaries leverage is packing binaries. Packing an executable is similar to applying compression or encryption and can inhibit the abilit...
[Binwalk] Firmware Analysis Tool
Binwalk is a firmware analysis tool designed to assist in the analysis, extraction, and reverse engineering of firmware images and other binary blobs. It is simple to use, fully scriptable, and can be easily extended via custom signatures, extraction rules, and plugin modules. Binwalk supports...