#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended
kemal-arslan/reposherlockAnalyze any GitHub repo (URL or local path) → architecture map, verified run commands, risks, and actionable issues - in minutes.
sivaadityacoder/cve-2026-22038Detailed analysis of CVE-2026-22038, a high-severity vulnerability in AutoGPT Stagehand blocks that logs API keys in plaintext, including root cause,…
gmh5225/actions-secretsAdding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API…
perufitlife/dotclaude-securityScan a repo's .claude/ config (settings.json hooks, MCP servers, env, allowed-tools) for the RCE & API-key-exfiltration footguns (CVE-2025-59536,…
jchable/miasma-toolkitDetection & remediation toolkit for the Miasma / Shai-Hulud worm and CVE-2026-35603 (AI-agent/IDE config injection)
caixa-git/tanstack-shield🛡️ One-command scanner for CVE-2026-45321 — TanStack npm supply-chain attack
w4r10ck423/envvisualizerParse and visualize /proc/self/environ on compromised Linux boxes — categorizes env vars by tech stack (AWS, Django, Rails, NodeJS, MySQL, K8s,…
digi4care/shai-scanZero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…
aliksir/nextjs-security-scannerBash script to detect CVE-2025-55182 (React2Shell) and credential exposure in Next.js projects. Zero dependencies.
cain66666/openclaw-hardening-checkOffline, read-only hardening check for a self-hosted OpenClaw install — gateway exposure, auth, CVE-2026-25253. Never prints secrets, makes no…
nedlir/dasel-hardened-containerHardened dasel v3.3.1 package and image built via Melange and apko. Patching CVE-2026-33320.
roninforge/roninforge-honoCursor plugin for Hono v4 (TypeScript edge web framework). 59 LLM regressions with BAD/CORRECT pairs. Pinned to hono ^4.12.19 (>= 4.9.7 for…
az9713/cve-lite-on-piRunning OWASP cve-lite-cli against the pi monorepo: scan journey and key finding (vitest CVE-2026-47429).
checkmarx/checkmarx-cve-2025-30066-detection-toolScans GitHub workflows and logs for indicators of CVE-2025-30066, detecting malicious actions and exposed secrets using Checkmarx 2ms integration.
arzaan789/keyguardScan codebases and GCP projects for exposed API credentials
simoesctt/ctt-heartbleed-temporal-resonance-memory-leak-exploit-heartbleed-cve-2014-0160Heartbleed (CVE-2014-0160) was devastating because it leaked adjacent memory. CTT-Heartbleed goes further—it uses 33-layer temporal resonance to map,…
im-hanzou/mongobleedCVE-2025-14847 PoC exploit for MongoDB heap memory disclosure
cappricio-securities/behat-config-leaksBeHat Configuration file leaking
