
metabigor
OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

Slack enumeration and exposed secrets detection tool

Terminal UI for attack surface discovery: DNS recon, subdomain enumeration, port scanning, reverse IP, leaked login URLs, and JavaScript secret…

GitHub Actions Pipeline Enumeration and Attack Tool

Read-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…

automated web assets enumeration & scanning [DEPRECATED]

Simple Secure Keeper for Secrets

Incredibly fast crawler designed for OSINT.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Find leaked secrets via github search

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github,…

Notes about attacking Jenkins servers

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Tool for advanced mining for content on Github

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.