#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended
jricramc/aigateAI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs
adversis/screenscrubFind credentials in screenshots, save them to your secret manager, and irreversibly redact them from the image — local, offline, OCR-based.
wadingporque/apkprobeAPK decompiler & secrets scanner for Android security research! Extract leaked API keys, hardcoded credentials, endpoints from APK files. apk2url,…
appomni-labs/heisenberg-ssc-ghaGitHub Action for Heisenberg SSC
owasp/trisuella-aidlca-frameworkPolicy-governed LLMSecOps framework providing AST-based SAST, secret scanning, supply-chain and multi-cloud CSPM checks, AI-BoM generation, and CI/CD…
mbennett-labs/crypto-scannerCLI tool to scan codebases for quantum-vulnerable cryptography
nccgroup/secretscrubProcesses SARIF output from static analysis tools to detect and redact hard-coded secrets in source code, creating a clean copy without the original…
dracondev/dracon-utilitiesInvisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
ak-cybe/cve-2025-68664-langgrinch-pocA testing framework to identify and demonstrate deserialization vulnerabilities in LangChain Core (<0.3.81). Educational use only
reverseclabs/azuredevops-enumRead-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…
fleralex/ensealSecure, ephemeral secret sharing for developers.
sam00/poc-cve-2026-42826-2026-42826-microsoft-azure-devops-information-disclosure-vulnerabilityExploits CVE-2026-42826 to enumerate and extract sensitive Azure DevOps data via unauthenticated REST API requests: pipeline YAML, variable groups,…
pqcworld/pqauditScan codebases for quantum-vulnerable cryptography. Detect RSA, ECDSA, Ed25519, ECDH before Q-Day. CycloneDX CBOM + SARIF output.
secware-ru/cve-2022-43959Bitrix Vulnerability CVE-2022-43959
yeee3642/edu-reconAuthorized education-sector recon & triage orchestrator (nmap/dirsearch/sqlmap/hydra + CVE-2024-4577, secret/API-key leak, XSS, wp2shell) with a web…
razureink/arisuScans public code repositories and code snippet platforms to extract and validate AI service API keys with real-time dashboard and multi-format…
wattocyber/agentic-dm-gatewaySecurity control plane for LLM agents: allowlists, owner kill switch, PIN sessions, rate limits, prompt-injection detection, and output scrubbing to…
roxanne_ardary/aureaAurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…
