#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended

A python3 script searching for secret on swaggerhub
Shell scripts to clone and mirror Git repositories, compute deltas, and run gitleaks to detect secrets hidden in deleted or reset commits.

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple…

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

a Go code to detect leaks in JS files via regex patterns

Automated GitHub dorking tool that searches user, organization, and repository code for exposed secrets, credentials, and security misconfigurations…

sprint encode (plan text) get enc password

A project security/vulnerability/risk scanning tool

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

Check rclone config files for insecure passwords

Project Aura: Security auditing and code introspection

find hardcoded strings from source code

Python script to scan Git repos for interesting strings

You can read the writeup on this script here

A wrapper around grep, to help you grep for things

SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)

One way to continuously monitor sensitive information that could be exposed on Github

Enumerates AWS environments for secrets by scanning EC2 userdata, Lambda environment variables and source code, and CodeBuild instances for…