reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker root@kitploit: docker build -t reposcanner...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

keyFinder

KeyFinder Passive API key and secret discovery for Chrome and Firefox KeyFinder is a browser extension for Chrome and Firefox that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. What ...

cariddi

ドメインのリストを取得し、URLをクロールしてエンドポイント、シークレット、APIキー、ファイル拡張子、トークンなどをスキャンします edoardottt 💙 によってコード化されました Twitterで共有！ インストール • 使い方 • はじめよう • 変更履歴 • 貢献 • ライセンス インストール 📡 Homebrew root@kitploit: brew install cariddi Snap root@kitploit: sudo snap install cariddi Golang root@kitploit: go install -v...

secret-regex-list

Secret Regex List List of regex for scraping secret API keys and juicy information. You can directly copy this and put into your python code, some regexes might require three quotes or else it will break the code. root@kitploit: "Cloudinary" : "cloudinary://.", "Firebase URL": ".firebaseio.com",...

Git-Secret

Git-Secret Go scripts for finding an API key / some keywords in repository Update V1.0.2 🚀 Removing some checkers Adding example file contains github dorks Add support to go install command issue 5 Screenshoot 📷 How to Install To install the latest version: root@kitploit: go install...

clan-nxt-toolkit

🔴 CLAN NXT Toolkit ██████╗██╗ █████╗ ███╗ ██╗...

Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring System

A batch-catching, pattern-matching, patch-attacking secret snatcher. GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. GitHound has earned me over $7500 applied to Bug Bounty research...