New Cybersecurity Tools: shhgit and PersistenceSniper Exploits

• •Shhgit scans code repositories for sensitive information to prevent leaks.
• •PersistenceSniper automates detection of persistence methods on multiple machines.
• •Both tools are available for use, enhancing security practices.

Two new cybersecurity tools have emerged: shhgit, which helps teams find secrets in code repositories, and PersistenceSniper, designed for automated detection of persistence methods on machines. Shhgit scans public repositories for sensitive information like API tokens and credentials, aiming to prevent leaks before they occur. It operates in both public and local modes, requiring GitHub tokens for access. PersistenceSniper, on the other hand, focuses on identifying known persistence methods across multiple systems, providing a user-friendly interface for analysis. The tool is built on contributions from various researchers and aims to fill gaps left by existing tools like Sysinternals' Autoruns. Both tools are available for use, with shhgit having a live web interface option. As of now, there are no confirmed exploitation incidents associated with these tools, but they serve as preventive measures against potential leaks and unauthorized access.