Tools

bishopfox/dufflebag

Search exposed EBS volumes for secrets

arnica/depsguard

Harden your package manager configs against supply chain attacks.

dark-warlord14/jsscanner

You can read the writeup on this script here

sourcecode-ai/aura

Python source code auditing and static analysis on a large scale

papermtn/slack-watchman

Slack enumeration and exposed secrets detection tool

greatscott/enject

enject: Hide .env secrets from prAIng eyes: secrets live in local encrypted stores (per project) and are injected directly into apps at runtime,…

redhuntlabs/httploot

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

praetorian-inc/trajan

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

brittonhayes/pillager

Pillage filesystems for sensitive information with Go 🔍

0x999-x/jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

ishannaik/agent-sweep

Find and redact secrets in AI coding agent histories (Claude Code, and more).

papermtn/gitlab-watchman

Finding exposed secrets and personal data in GitLab

avito-tech/deepsecrets

Static analysis tool that scans source code for hardcoded secrets, API keys, and credentials using semantic understanding of code context.

inceptionstack/lowkey

Deploy a FullStack Prodo-Typing Agent into your AWS Account (KiroCrew,OpenClaw, Hermes, Claude Code, Codex)

arsbr/veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data…

shubhamshubhankar/dumpthegit

Scans public GitHub repositories for accidentally uploaded sensitive data like credentials, secret keys, and tokens using a personal access token.

agentguard-ai/tealtiger

Powerful protection for AI agents - Open-source security and cost tracking for AI applications

nccgroup/ccs

Regex-based scanner for detecting hard-coded credentials in codebases, designed for CI/CD integration with suppression comment support and low…