#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended
shiftleftsecurity/sast-scanScan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and…
oxsecurity/codetotalAnalyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security,…
controlplaneio/truffleproctruffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
zupit/horusecHorusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
randomrobbiebf/static-file-checkerChecks Djangos /static/staticfiles.json for exposed creds using nuclei
nccgroup/ccsRegex-based scanner for detecting hard-coded credentials in codebases, designed for CI/CD integration with suppression comment support and low…
gmh5225/actions-secretsAdding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API…
anteater/anteaterAnteater - CI/CD Gate Check Framework
randomrobbiebf/super-secret-finderBurp Plugin for Secret Matching
stacscan/stacsStatic Token And Credential Scanner
daffainfo/oneliner-bugbountyA collection oneliner scripts for bug bounty
securing/dumpsterdiverTool to search secrets in various filetypes.
bishopfox/dufflebagSearch exposed EBS volumes for secrets
bountystrike/bountystrike-shPoor (rich?) man's bug bounty pipeline https://dubell.io
vagnerd/cve-2023-27587-pocThe simple PoC of CVE-2023-27587
maweil/bidi_char_detectorChecks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574
secware-ru/cve-2022-43959Bitrix Vulnerability CVE-2022-43959
