Fnord
Fnord is a pattern extractor for obfuscated code that extracts byte sequences and creates statistics by processing the file with a sliding window to extract sequences of varying lengths, presenting the most frequent sequences in a table with details like length, occurrences, sequence, and entropy. It also generates an experimental YARA rule by calculating a score based on the length and occurrences of sequences, processing each sequence to detect interesting ones using a list of keywords, and calculating Levenshtein distance to skip irrelevant sequences.
FEATURES
ALTERNATIVES
A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.
Kiterunner is a tool for lightning-fast traditional content discovery and bruteforcing API endpoints in modern applications.
Guidelines for secure coding in Java SE to avoid bugs that could weaken security and open holes in Java's security features.
A static code analysis tool for parsing common data formats to detect hardcoded credentials and dangerous functions.
API Security is a comprehensive solution that provides continuous discovery, vulnerability assessment, threat detection, compliance monitoring, dynamic testing, and remediation capabilities to protect APIs against various threats and vulnerabilities.
Identifies misconfigured CloudFront domains vulnerable to hijacking
ARM TrustZone provides a secure execution environment for applications on ARM processors.
An API security platform that discovers, documents, and tests APIs throughout the development lifecycle while maintaining a centralized catalog of all API assets.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.