HexWalk

HexWalk - Hex Editor/Viewer/Analyzer HexWalk is an Hex editor, viewer, analyzer. Built on qhexedit2, Capstone and Qt, with a built-in signature scanner, HexDig, inspired by binwalk. It is cross platform and has plenty of features: Advanced Find can find patterns in binary files based on...

entropy

Paranoïd about having secrets leaked in your huge codebase? Entropy is here to help you find them! Entropy Entropy is a CLI tool that will scan your codebase for high entropy lines , which are often secrets. Installation From source with Go preferred root@kitploit: go install...

m4ngl3m3

m4ngl3m3! Quick Installation: root@kitploit: $ git clone https://github.com/localh0t/m4ngl3m3 $ cd m4ngl3m3 $ ./main.py Basic Help: root@kitploit: usage: main.py -h -fy FROMYEAR -ty TOYEAR -sy -nf NUMBERSFILE -sf SYMBOLSFILE -cf CUSTOMFILE -sbs -sap -mm MUTATIONMETHODS MUTATIONMODE STRINGSFILE...

Shelltropy

Shelltropy The more predictable you are, the less you get detected A technique of hiding malicious shellcode based on low-entropy via Shannon encoding. Entropy is the measure of the randomness in a set of data here: shellcode. The higher the entropy, the more random the data is. Shannon Entropy i...

Hash-Eye

🔍 HashEye - Advanced Hash Type Detection Tool HashEye is a powerful Python CLI tool for instantly detecting and analyzing hash types. It provides detailed information about hash formats, security levels, entropy analysis, and pattern detection. Powered byIsaac Security Labs 🔗 Links: GitHub:...

ScrapPY

🐕 ScrapPY: Scrapeo de PDFs Hecho Fácil ScrapPY es una utilidad de Python para extraer información de manuales, documentos y otros PDFs sensibles para generar listas de palabras personalizadas que pueden ser utilizadas por herramientas de seguridad ofensiva para realizar ataques de fuerza bruta,...

SentinelNav

SentinelNav SentinelNav is a zero-dependency, pure Python binary visualization and forensics tool. It transforms binary data into an interactive spectral map, allowing analysts to visually identify file structures, entropy anomalies, code sections, and potential cryptographic blobs. It combines a...

Password-Analysis

Password Analysis: Based on Entropy and Dictionaries of Weak Passwords Script in Go that analyzes a list of passwords. Download and Compilation You can download the binary directly from the releases. If you prefer to compile it manually, consider the following steps. root@kitploit: git clone...

kyubisweep

🦊 KyubiSweep Hunt exposed secrets with the cunning of a fox! A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum performance and zero dependencies. ✨ Features 🔍 30+ Secret Patterns - Detects AWS, Stripe,...

ALYCON-Threat-Landscape

ALYCON: Advanced Threat Landscape Analysis Multi-Domain Threat Detection using Information-Theoretic Phase Space Analysis Overview ALYCON phase space visualization showing multi-domain threat detection and anomaly classification. Framework: Training-free, universal anomaly detection using Shannon...

AWS-Loot

AWSLoot Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services. Install root@kitploit: pip install -r requirements.txt An AWS credential file .aws/credentials is requir...

password_generator

PassForge - All-in-One Password Generator CLI A production-ready, cryptographically secure password generator CLI with 17 generation modes, entropy transparency, and comprehensive customization options. Features 17 Generation Modes...

openentropy

openentropy Measure and operationalize hardware entropy for research and security. Collect entropy from on-device hardware sources, analyze source quality with statistical tests, and deliver raw or conditioned output through CLI, Rust, Python, and HTTP interfaces...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Versión: 0.4 Bytes Revealer es una potente herramienta de ingeniería inversa y análisis binario diseñada para investigadores de seguridad, analistas forenses y desarrolladores. Con funciones como vista hexadecimal,...

SubDomainizer

Buy Me A Coffee SubDomainizer SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascripts present in the given URL. This tool also finds S3 buckets, cloudfront URL's and more from those JS files which could be interesting like...

keyFinder

KeyFinder Passive API key and secret discovery for Chrome and Firefox KeyFinder is a browser extension for Chrome and Firefox that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. What ...

malwoverview

Malwoverview !Alt...

cracken

Cracken Cracken is a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool written in pure safe Rust more on talk/. Inspired by great tools like maskprocessor, hashcat, Crunch and 🤗 HuggingFace's tokenizers. What? Why? Woot?? At DeepSec2021 we presented a new...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...