Elephant Hunt

A new risk-based methodology to identify application attack-surface by analyzing the running processes.

Currently supported:

• quantification of attack-surface with size of executable binary and its shared libraries (excluding non-executable code)

Future:

• a risk-score approach instead of raw technical numbers (e.g. bytes)
• privileged vs unprivileged user
• analyse and assess language safeness
• analyse open ports (needs privileged user)
• report with break-down per executable and size of each loaded shared library

Required Software

• GoLang

  $ apt-get install golang

Build

go build main.go

Run

go run main.go