binviz

binviz Binary visualiser & triage tool: linked interactive views entropy, histograms, image/dot-plot surfaces, control-flow graphs over a single shared address-space model. pipx install binviz && binviz serve What it does Open a file and every view is looking at the same address space. Select a...

sift

Sift Secrets Credential and sensitive-data exposure triage for file shares. When an open share turns up, the question is never "does this repo have a leaked key". It is "what just got exposed, and what do I have to roll before close of business." sift is built for that question: high recall, a fa...

tanuki

Tanuki Operator Non-Human Identity & Hybrid Active Directory Operator for Linux Workloads Protocol-first, zero root privileges, zero host configuration footprint, zero noise. -dea584.svg?logo=rust&logoColor=white -3776ab.svg?logo=python&logoColor=white Overview • Quick Start • Dual-Engine...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Security Assessor Offline, evidence-aware triage fo...

auto_re

AutoRE Funcionalidades 1. Renombrado automático de funciones con nombres ficticios, que tienen una llamada API o salto a la API importada Antes Después 2. Asignación de TAGS a las funciones según los indicadores de API llamados en su interior Establece los tags como comentarios de función...

msidump

msidump MSI Dump - una herramienta que analiza paquetes de instalación MSI maliciosos, extrae archivos, flujos, datos binarios e incorpora un escáner YARA. En documentos de Office con macros, podemos usar rápidamente oletools mraptor para determinar si un documento es malicioso. Si queremos...

CVE-Hunter

CVE Hunter Pro A Chrome extension for fast, single-lookup CVE...

AttackSim

AttackSim — Automated Attacker Simulation & CVE Verification F...

Triage Uncontrolled Resource Consumption DoS

The vulnerability of the malware analysis tool Triage is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

[EyeWitness] A Rapid Web Application Triage Tool

EyeWitness is a rapid web application triage tool designed to take screenshots of websites, provide some server header info, and identify default credentials if possible. The author would love for EyeWitness to identify more default credentials of various web applications. So as you find devices...