At probably the hottest leHACK ever, I presented my new cybersecurity tool for penetration testers: 𝐂𝐨𝐦𝐦𝐢𝐏𝐢𝐬𝐭𝐞

CommiPiste can 𝐢𝐝𝐞𝐧𝐭𝐢𝐟𝐲 𝐭𝐡𝐞 𝐞𝐱𝐚𝐜𝐭 𝐯𝐞𝐫𝐬𝐢𝐨𝐧 𝐨𝐟 𝐨𝐩𝐞𝐧-𝐬𝐨𝐮𝐫𝐜𝐞 𝐰𝐞𝐛 𝐬𝐨𝐟𝐭𝐰𝐚𝐫𝐞 using only publicly accessible static files and then 𝐟𝐢𝐧𝐝 𝐭𝐡𝐞 𝐂𝐕𝐄𝐬 associated with that version.

It can be especially useful when version information is hidden, removed from headers, or unavailable through conventional fingerprinting methods 🔎

It already supports 300 𝐝𝐢𝐟𝐟𝐞𝐫𝐞𝐧𝐭 𝐩𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬. For some of them, CommiPiste uses a complete index of commits, while others are identified through smart heuristics 🛠️

👉 𝐆𝐢𝐯𝐞 𝐢𝐭 𝐚 𝐭𝐫𝐲: https://github.com/soxoj/CommiPiste

A huge thank you to the person behind the idea and just an awesome guy, paranoid android