
badsecrets
A library for detecting known secrets across many web frameworks
cryptographypenetration-testingsecret-detection+2
820

A library for detecting known secrets across many web frameworks

PoC exploit for Rails Active Storage/libvips CVE-2026-66066: uses crafted MAT/HDF5 files for arbitrary file read, recovers secret_key_base, and…