Tools

crytic/caracal

Static Analyzer for Starknet smart contracts

soxoj/gitcolombo

🧬 Extract and analyze contributors info from git repos

owasp/cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

awslabs/git-secrets

Prevents you from committing secrets and credentials into git repositories

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

eth0izzle/shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

praetorian-inc/noseyparker

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

bishopfox/jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

matterpreter/offensivecsharp

Collection of Offensive C# Tooling

tillson/git-hound

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

anshumanbh/git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

cve-search/git-vuln-finder

Finding potential software vulnerabilities from git commit messages

josehelps/git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

mpast/mobileaudit

Django application that performs SAST and Malware Analysis for Android APKs

dionach/reposcanner

Python script to scan Git repos for interesting strings

daffainfo/git-secret

Go scripts for finding sensitive data like API key / some keywords in the github repository

elevenpaths/neto

Neto | A tool to analyse browser extensions