secretlint

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

keyhog

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

rusty-hog

Rusty Hog is a secret scanner built in Rust for performance, and based on TruffleHog which is written in Python. Rusty Hog provides the following binaries: Ankamali Hog: Scans for secrets in a Google doc. Berkshire Hog: Scans for secrets in an S3 bucket. Choctaw Hog: Scans for secrets in a Git...

screenscrub

screenscrub Find credentials in screenshots, extract them to a secret manager, and irreversibly redact them from the images — so secrets don't rot in your notes, screenshots, and /Desktop. Local. Offline. Silent. No network, no telemetry by default. screenscrub bridges two existing tool categorie...

GitSecure

GitSecure About GitSecure GitSecure is a GitHub action that can be used to alert security teams of any exposed API keys for push and pull requests. When files are added or modified on a GitHub repo, this action will be initiated and will start looking for exposed credentials in the system. After...

trufflehog

TruffleHog 漏洩した認証情報を見つけます。 🔎 現在スキャン中 ...およびその他 TruffleHogの機能や性能について詳しくは、製品ページをご覧ください。 🌐 TruffleHog Enterprise Git、Jira、Slack、Confluence、Microsoft Teams、Sharepoint（およびその他）を継続的に監視して認証情報を探すことに興味がありますか？エンタープライズ製品が役立ちます！詳細はこちら: 。...

spacesiren

SpaceSiren SpaceSiren 是一个用于 AWS 的 蜜令 管理器与警报系统。借助这个完全无服务器的应用程序，您可以大规模创建和管理蜜令——每个 SpaceSiren 实例最多可管理 10,000 个——且成本几乎为零。1 工作原理 SpaceSiren 提供 API 来创建没有任何权限的 AWS IAM 用户及其访问密钥。 您可以将这些访问密钥散布到任何您想要的地方，例如专有代码或私有数据存储中。 如果这些源头之一被攻破，攻击者很可能会使用窃取的密钥来试探其用途。 当有人尝试使用该密钥时，您将收到警报。 警报输出方式 电子邮件 PagerDuty Slack Pushov...

database-sentinel

🛡️ Database Sentinel（数据库哨兵） 一个用于审计数据库后端安全漏洞的 Claude 技能。 将其放入 Claude Code、Cursor 或任何基于 Claude 的环境中。说“审计我的数据库”，即可获得一份全面的安全报告以及精确的修复代码——只需几分钟，而非数天。 超过 170 个 Lovable 应用遭到入侵。 YC 初创公司中 2010 万行数据被暴露。约 87,000 个 MongoDB 实例易受 MongoBleed 攻击（CVE-2025-14847，CISA KEV）。仅在 2025 年的一次事件中就有 180 万个 Firebase 密码泄露。45% ...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

anteater

Anteater - CI/CD 门禁检查框架 描述 Anteater 是一个开放框架，用于防止将指定的字符串、文件名、二进制文件、已弃用的函数、staging 环境代码/凭证等不合意的内容合并。任何可以用正则表达式语法指定的内容，都可以被 Anteater 嗅探出来。 你告诉 Anteater 你确切不想合并什么，剩下的由 Anteater 处理。 如果 Anteater 发现了什么，它会以非零码退出，从而使你的 CI 工具构建失败，从而防止拉取请求合并。任何误报都可以通过使用相同的 RegExp 框架来取消错误匹配，从而轻松解决。 整个项目也可以通过递归目录遍历进行扫描。...

gato

!WARNING This repository is deprecated and archived Gato has been superseded by Trajan , Praetorian's multi-platform CI/CD vulnerability detection and attack automation tool. Trajan consolidates GitHub Actions Gato and GitLab Glato CI/CD attack capabilities into a single, actively-maintained...

whispers

Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...

stacs

Static Token And Credential Scanner 这是什么？ STACS 是一个基于 YARA 的静态凭据扫描器，支持二进制文件格式、嵌套归档分析、可组合的规则集和忽略列表，以及 SARIF 报告。 STACS 支持什么？ 目前，STACS 支持递归解包以下格式： 7z, ar, bz2, cab, cpio, gz, iso, rar, rpm, tar, xar, xz, zip, dmg 由于 STACS 基于检测到的文件类型工作，使用这些格式的专有文件格式和其他文件类型会自动得到支持。这包括 Docker 镜像、Android APK、Java JAR...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

actions-secrets

SecureStack 密钥分析 GitHub Action 一个用于分析源代码中是否存在密钥、凭据、API 密钥、服务器和数据库主机名/URL 等更多内容的 GitHub Action！当你将此 Action 添加到 GitHub Actions 后，我们将分析你的源代码，确保你的提交中不包含敏感数据。请参阅下文了解我们扫描的特定凭据类型和文件。 root@kitploit: name: Example SecureStack Secrets Analysis GitHub Action on: push jobs: security: runs-on: ubuntu-latest...

secretlint v13.0.5

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

Agent Audit: A Security Analysis System for LLM Agent Applications

What should a developer inspect before deploying an LLM agent: the model, the tool code, the deployment configuration, or all three? In practice, many security failures in agent systems arise not from model weights alone, but from the surrounding software stack: tool functions that pass untrusted...

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

Fortinet SSL VPN Bruteforce Login Utility

This module scans for Fortinet SSL VPN web login portals and performs login brute force to identify valid credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSL VPN Bruteforc...

Cisco Policy Suite Authentication Bypass Vulnerability

Cisco Policy Suite CPS is a next-generation policy management solution from Cisco. The program provides user-based business rules, applications and real-time management of network resources and other functions. RADIUS authentication module is one of the RADIUS protocol authentication module. An...