CAPA
Capa is a tool that detects capabilities in executable files, providing insights into what a program can do, such as installing services, relying on HTTP to communicate, or being a backdoor. It supports various file formats, including PE, ELF, .NET, and shellcode files. Capa provides a detailed report of the capabilities of a given executable, including ATT&CK tactics and techniques, and can be used to analyze CAPE sandbox reports for dynamic capability extraction.
FEATURES
ALTERNATIVES
Yaramod is a library for parsing YARA rules into AST and building new YARA rulesets with C++ programming interface.
Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
A web application firewall and API security platform that combines API discovery, runtime protection, vulnerability testing, and security posture management.
ConDroid performs concolic execution of Android apps to observe 'interesting' behavior in dynamic analysis.
A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.
A tool for building and installing PhoneyC with optional Python version configuration and root privileges.
Instrumentation-based approach for resolving reflective calls in Android apps.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.