kyubisweep

🦊 KyubiSweep Caza secretos expuestos con la astucia de un zorro. Una herramienta CLI ligera y multiplataforma que escanea tu sistema de archivos para detectar secretos expuestos, claves API y tokens. Construida con Go para máximo rendimiento y cero dependencias. ✨ Características 🔍 Más de 30...

ALYCON-Threat-Landscape

ALYCON: Análisis Avanzado del Panorama de Amenazas Detección de Amenazas Multi-Dominio mediante Análisis de Espacio de Fases Teórico-Informacional Resumen Visualización del espacio de fases de ALYCON que muestra la detección de amenazas multi-dominio y la clasificación de anomalías. Marco:...

SubDomainizer

Cómprame un Café SubDomainizer SubDomainizer es una herramienta diseñada para encontrar subdominios ocultos y secretos presentes en una página web, en Github y en los JavaScripts externos que se encuentran en la URL proporcionada. Esta herramienta también encuentra buckets S3, URL de CloudFront y...

keyFinder

KeyFinder Descubrimiento pasivo de claves API y secretos para Chrome y Firefox KeyFinder es una extensión de navegador para Chrome y Firefox que examina pasivamente cada página que visitas en busca de claves API, tokens, secretos y credenciales filtrados. Se ejecuta silenciosamente en segundo pla...

SUNBURST

SUNBURST Detection for SUNBURST C2 Stage-1 using Shannon Entropy About: Using Shannon Entropy to detect Domain-Generation Algorithms DGA. It should only be fed FQDNs into the function or read from a CSV file. SYNTAX: Prefixorsubdomain.Domain.TLD Made due to APTs leveraging long-string DGA for Kil...

Password-Analysis

Password Analysis: Based on Entropy and Dictionaries of Weak Passwords Script in Go that analyzes a list of passwords. Download and Compilation You can download the binary directly from the releases. If you prefer to compile it manually, consider the following steps. root@kitploit: git clone...

DumpsterDiver

DumpsterDiver by @Rzepsky DumpsterDiver is a tool, which can analyze big volumes of data in search of hardcoded secrets like keys e.g. AWS Access Key, Azure Share Key or SSH keys or passwords. Additionally, it allows creating a simple search rules with basic conditions e.g. report only csv files...

Analyzing Unsolicited Internet Traffic: Measuring IoT Security Threats Via Network Telescopes

Network telescopes serve as a critical passive monitoring tool for capturing unsolicited Internet traffic, providing insights into global scanning and reconnaissance behavior. This study analyzes a 10-day dataset during January 2025 consisting of approximately 22 million packets collected by the...

ShellForge: Adversarial Co-Evolution of Webshell Generation and Multi-View Detection for Robust Webshell Defense

Webshells remain a primary foothold for attackers to compromise servers, particularly within PHP ecosystems. However, existing detection mechanisms often struggle to keep pace with rapid variant evolution and sophisticated obfuscation techniques that camouflage malicious intent. Furthermore, many...

Generalized and Unified Equivalences between Hardness and Pseudoentropy

Pseudoentropy characterizations provide a quantitatively precise demonstration of the close relationship between computational hardness and computational randomness. We prove a unified pseudoentropy characterization that generalizes and strengthens previous results for both uniform and non-unifor...

Sarenka - OSINT Tool - Data From Services Like Shodan, Censys Etc. In One Place

SARENKA is an Open Source Intelligence OSINT tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices https://censys.io/ , https://www.shodan.io/. It scraps data about Common Vulnerabilities and...

Nameles - Open Source Entropy Based Invalid Traffic Detection And Pre-Bid Filtering

Nameles provides an easy to deploy, scalable IVT detection and filtering solution that is proven to detect at a high level of accuracy ad fraud and other types of invalid traffic such as web scraping. For a high level overview you might want to check out the website If you have any questions or...

Search Secrets in Various File Types: DumpsterDiver

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secret keys e.g. AWS Access Key, Azure Share Key or SSH keys based on counting the entropy. Additionally, it allows creating a simple search rules with basic conditions e.g. reports only csv file...

DumpsterDiver - Tool To Search Secrets In Various Filetypes

DumpsterDiver is a tool used to analyze big volumes of various file types in search of hardcoded secret keys e.g. AWS Access Key, Azure Share Key or SSH keys. Additionally, it allows creating a simple search rules with basic conditions e.g. reports only csv file including at least 10 email...

Cracking Cryptography and Encryption Exponentially Easier

It’s been a brutal month for crypto. Starting with the Black Hat conference, researchers, engineers and hackers have been unveiling new weaknesses and attacks in different cryptographic implementations that threaten the security of communication and commerce on the Web. Not only have holes been...