I present



dSBOM

Well as of this days every major company is obsessed with supply chain security and generating Software Bill of Materials (SBOMs) to comply with government regulations.

and mainly 99% of current tools only generate Static SBOMs. They scan source code, package.json, or go.mod files. But what is written on disk is not always what runs in memory.

Hackers(non script kiddies) are exploiting this blind spot. For example, recent 2026 attacks, like the MicrosoftSystem64 RAT, hide massive 81MB payloads inside single executables disguised as native, stripped ELF binaries. A static scanner looks at the binary, sees a standard Linux file, and passes it. It completely misses the malicious libraries loaded dynamically at runtime via dlopen() or hidden Node.js runtimes packed inside.

So I will build a lightweight, C++ CLI tool that doesn't care about source code. Instead, it runs the binary and traces it to generate a Runtime SBOM.