Checksec
Checksec is a bash script to check the properties of executables (like PIE, RELRO, Canaries, ASLR, Fortify Source). It has been originally written by Tobias Klein and the original source is available here: http://www.trapkit.de/tools/checksec.html. **MAJOR UPDATES** 2.1.0 Changed structure to be more modular and switched to getopts so options can be in any order. e.g. format=json can be at the end now, however. All options now require --$option=$value instead of --$option $value. --extended option now includes clang CFI and safe stack checks. Last Update: 2024-04-29. For OSX: Most of the tools do not work on mach-O binaries or the OSX kernel, so it is not supported. Cosign Verify Checksec: cosign verify-blob --signature checksec_new.sig --certificate checksec_new.pub checksec --certificate-identity=slimm609@gmail.com --certificate-oidc-issuer=https://github.com/login/oauth. Openssl Verify Checksec: Openssl verification is being deprecated in favor of Cosign Verification, which is backed by a hardware security module and provides a greater level of integrity. openssl dgst -sha256 -verify checksec.pub -signature checksec.sig checksec. Examples: normal (or --format=cli) $check
FEATURES
ALTERNATIVES
Kaitai Struct is a declarative language for describing binary data structures.
A portable version of XSSHunter.com for finding and exploiting Cross-Site Scripting (XSS) vulnerabilities.
A tool for malware analysts to search through base64-encoded samples and generate yara rules.
A simple framework for extracting actionable data from Android malware
A dataset release policy for the Android Malware Genome Project, requiring authentication and justification for access to the dataset.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.