Automating Security @Tekion | Product Security Engineer | DevSecOps | SSDLC | Shift Left | Cloud Security | Python

github

Shivam Saraswat  • Peerlist

An AI-powered tool for detecting and remediating security vulnerabilities in codebases. This tool uses advanced language models to perform static analysis, vulnerability chaining, and provide actionable security recommendations.<h2>✨ Features</h2><ul><li>🔍 AI-powered static analysis for security vulnerabilities</li><li>🎯 Detection of OWASP Top 10 and SANS Top 25 vulnerabilities</li><li>⛓️ Vulnerability chaining to identify interconnected risks (may not work perfectly)</li><li>🛠️ Detailed remediation suggestions with secure code examples</li><li>🐍 Support for Python code analysis (other languages need further testing)</li><li>⚡ Real-time analysis via API endpoints</li><li>📊 Comprehensive vulnerability reports with CVSS scoring</li></ul>

SeCoRA

PGrab is a banner grabber tool used to gather information about a remote server or device, specifically the banner or header information that is sent when a connection is made.

PGrab

• WebXCrawler is a fast static crawler to crawl a website and get all the links.
• It has options for maximum depth of crawling and the number of threads to optimize performance.
• It can also be used in Docker Container.
• It also have the Poetry (better than PIP) installation part.

WebXCrawler

PYrevDNS is a simple tool for performing reverse DNS lookups on IP addresses. It can be used to perform a single lookup or to perform lookups on a list of IP addresses.

PYrevDNS

Certify is a powerful and easy-to-use Python tool designed to check the security of SSL/TLS certificates. It provides a range of options for analyzing certificates and identifying potential security risks, including the ability to display subject alternative names, subject common names, organization name, TLS version, cipher, certificate fingerprint hashes, JARM hash, certificate serial number, certificate pinning status, certificate authority verification, and certificate validity.

Certify also includes a number of features for identifying common certificate misconfigurations, such as expired, self-signed, mismatched, revoked, and untrusted certificates. The tool supports scanning individual hosts or lists of hosts, and allows for flexible output options, including the ability to write output to a file or display it in JSON format.

Whether you're a security researcher, network administrator, or just someone who wants to ensure the security of your online communications, Certify is an indispensable tool for analyzing SSL/TLS certificates and identifying potential security risks. With its powerful features and intuitive interface, it makes it easy to stay on top of the latest security threats and keep your systems safe and secure.

Certify

• It can retrieve all the domains and the subdomains associated with a domain using crt.sh.
• It has options to give the domain name and output file name as CLI input.
• It can be used in conjunction with other tools to know the active domains.

crt.sh Domain Finder

• Made customized scripts using Bro (Zeek) Scripting for enhancing Zeek’s logging capability.

REFINEMENTS IN ZEEK INTRUSION DETECTION SYSTEM

• Developed a tool for bruteforcing the SSH service, allowing for testing and analysis of SSH security measures.
• Created a detection tool to identify when a bruteforce attack is occurring on the SSH service.
• Provided a detailed description of a tool to prevent bruteforce attacks on SSH service, improving overall security
and resilience.

SSH Bruteforcer and Bruteforce Detector

• This is an Online Transaction Fraud Detection System (FDS) to detect payment frauds.
• Implemented using Python, Django Framework, Bootstrap, and Behavior and Location Analysis (BLA).

DJ-Mart

• This is a basic port scanner written in Python.
• Implemented using Socket Programming, Threading, Exception, and Queue.
• It has options like - scan reserved ports, scan all ports, scan according to the custom range, scan well-known ports and scan your chosen ports.

NETMAPPY

• This program is used to securely modify the MAC Address of the desired network interface in Linux.
• Implemented using Regular Expression, OptParse, and Subprocess modules of Python.