Checksec
Checksec is a bash script to check the properties of executables (like PIE, RELRO, Canaries, ASLR, Fortify Source). It has been originally written by Tobias Klein and the original source is available here: http://www.trapkit.de/tools/checksec.html. **MAJOR UPDATES** 2.1.0 Changed structure to be more modular and switched to getopts so options can be in any order. e.g. format=json can be at the end now, however. All options now require --$option=$value instead of --$option $value. --extended option now includes clang CFI and safe stack checks. Last Update: 2024-04-29. For OSX: Most of the tools do not work on mach-O binaries or the OSX kernel, so it is not supported. Cosign Verify Checksec: cosign verify-blob --signature checksec_new.sig --certificate checksec_new.pub checksec --certificate-identity=slimm609@gmail.com --certificate-oidc-issuer=https://github.com/login/oauth. Openssl Verify Checksec: Openssl verification is being deprecated in favor of Cosign Verification, which is backed by a hardware security module and provides a greater level of integrity. openssl dgst -sha256 -verify checksec.pub -signature checksec.sig checksec. Examples: normal (or --format=cli) $check
FEATURES
ALTERNATIVES
PinCTF is a tool for using Intel's Pin Tool to instrument reverse engineering binaries and count instructions.
A tool for translating Dalvik bytecode to Java bytecode for analyzing Android applications.
ICSREF is a modular framework for automated reverse engineering of industrial control systems binaries
A comprehensive guide to malware analysis and reverse engineering, covering topics such as lab setup, debugging, and anti-debugging.
A modified version of Cuckoo Sandbox with enhanced features and capabilities.
Binary Ninja is an interactive decompiler, disassembler, debugger, and binary analysis platform with a focus on automation and a clean GUI.
Automates the process of preparing Android APK files for HTTPS inspection
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
RoboShadow
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.