
badsecrets
A library for detecting known secrets across many web frameworks
cryptographypenetration-testingsecret-detection+2
820

A library for detecting known secrets across many web frameworks

Runtime Security for tool-using AI agents, with local policies, pre-action enforcement, and forensic audit trails.

CVE-2026-66066 (KindaRails2Shell) PoC - Rails Active Storage/libvips arbitrary file read to RCE; for authorized security testing