Startup-SBOM - A Tool To Reverse Engineer And Inspect The RPM And APT Databases To List All The Packages Along With Executables, Service And Versions

This utility provides insights into executed packages on Linux systems. It supports static analysis for APT and RPM package managers, allowing users to inspect installed packages in various modes: - Static Info Analysis: Examines package information directories to determine installed packages. - Static Service Analysis: Analyzes service files to identify packages providing specific services. - Chroot Analysis: Mounts a disk image, analyzes installed packages, and presents visual plots of execution data. To use the tool, mount the disk image, install dependencies, set environment variables, and run the command with appropriate options. The utility generates a JSON output file containing package execution information. The graphical output feature provides visual representations of execution data for Chroot analysis. The tool currently supports Debian and Red Hat-based images, with RPM support limited to static analysis. Future plans include support for Pacman package manager, versioning, and enhancements to the graphical output feature. Discussions and ideas related to the tool are welcome.