#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended
daffainfo/git-secretGo scripts for finding sensitive data like API key / some keywords in the github repository
0xteles/jsleaka Go code to detect leaks in JS files via regex patterns
daddycocoaman/dumpscanFinding secrets in kernel and user memory
borenstein/yolo-cageAI coding agents that can't exfiltrate secrets or merge their own PRs.
stacscan/stacsStatic Token And Credential Scanner
jeremylong/dependencycheckThe dependency-check repository has moved:
playtikaoss/leaktopusAutomated secret and leak detection scanner for GitHub and paste sites, with heuristic filtering, IOL enrichment via Shhgit/TruffleHog, and ELK-based…
praetorian-inc/gatoGitHub Actions Pipeline Enumeration and Attack Tool
rootlug/auraProject Aura: Security auditing and code introspection
maweil/bidi_char_detectorChecks your files for existence of Unicode BIDI characters which can be misused for supply chain attacks. See CVE-2021-42574
