cariddi

输入域名列表，爬取 URL 并扫描端点、密钥、API 密钥、文件扩展名、令牌等 由 edoardottt 用 💙 编写 分享到 Twitter！ 安装 • 用法 • 快速开始 • 更新日志 • 贡献 • 许可证 安装 📡 Homebrew brew install cariddi Snap sudo snap install cariddi Golang go install -v github.com/edoardottt/cariddi/cmd/cariddi@latest Pacman pacman -Syu cariddi NixOS nix-shell -p cariddi...

reposcanner

Reposcanner Reposcanner es un script en Python para buscar a través del historial de commits de repositorios Git cadenas interesantes como claves API, inspirado en truffleHog. Instalación El módulo Git de Python es necesario python3-git en Debian. Docker docker build -t reposcanner . docker run -...

SubDomainizer

请我喝杯咖啡 SubDomainizer SubDomainizer 是一款旨在发现隐藏子域名和秘密的工具，这些秘密可能存在于目标网页、GitHub 以及给定 URL 中包含的外部 JavaScript 文件中。 该工具还能从这些 JS 文件中查找 S3 存储桶、CloudFront URL 等，这些内容可能很有价值，例如 S3 存储桶可公开读写、子域名接管或 CloudFront 的类似情况。 它还会扫描包含文件的给定文件夹。 支持的云存储服务： SubDomainizer 可以查找以下云存储服务的 URL： 1. Amazon AWS 服务（CloudFront 和 S3 存储桶） ...

mantra

「🔑」 关于 Mantra 本工具使用 Go 编写，主要目标是搜索 JavaScript 文件和 HTML 页面中的 API 密钥。 它的工作原理是检查网页和脚本文件的源代码，查找与 API 密钥相同或相似的字符串。这些密钥通常用于对第三方 API 等在线服务进行身份验证，属于机密信息，不应公开共享。 通过使用此工具，开发者可以快速发现 API 密钥是否泄露，并在密钥被滥用前采取措施修复问题。此外，安全人员也可利用它来验证使用外部 API 的应用程序和网站是否对其密钥进行了充分保护。 总之，本工具是帮助保护 API 密钥、防止敏感信息泄露的高效且精准的解决方案。 帮助 使用 安装 通过...

keyFinder

KeyFinder Passive API key and secret discovery for Chrome and Firefox KeyFinder is a browser extension for Chrome and Firefox that passively scans every page you visit for leaked API keys, tokens, secrets, and credentials. It runs silently in the background with zero configuration required. What ...

secret-regex-list

Lista de expresiones regulares para secretos Lista de regex para extraer claves de API secretas e información jugosa. Puedes copiarla directamente y ponerla en tu código de Python; algunas regex pueden requerir tres comillas o se romperá el código. "Cloudinary" : "cloudinary://.", "Firebase URL":...

paranoid_crypto

Proyecto Paranoid Descripción general El proyecto Paranoid comprueba debilidades conocidas en artefactos criptográficos, como claves públicas, firmas digitales y números pseudoaleatorios en general. Esta biblioteca contiene implementaciones y optimizaciones de trabajos existentes en la literatura...

Git-Secret

Git-Secret 用于在仓库中查找 API 密钥 / 某些关键字的 Go 脚本 更新 V1.0.2 🚀 移除了一些检查器 添加了包含 GitHub dorks 的示例文件 添加对 go install 命令的支持（issue 5） 截图 📷 如何安装 要安装最新版本： go install github.com/daffainfo/Git-Secret@latest 或者，你可以克隆此仓库并在克隆的仓库内运行 go build 来构建项目。 如何使用 ./Git-Secret 对于包含 dorks 的路径，你可以填入一些关键字，例如 keyword.txt password...

PT-2026-102364

Name of the Vulnerable Software and Affected Versions PyJWT versions 2.13.0 through 2.13.x Description An issue exists in the HMACAlgorithm.prepare key function within jwt/algorithms.py where the raw-JWK detector fails to normalize Unicode byte-order marks BOM before JSON validation. When a publi...

clan-nxt-toolkit

🔴 CLAN NXT Toolkit ██████╗██╗ █████╗ ███╗ ██╗...

PT-2026-29968

Name of the Vulnerable Software and Affected Versions fast-jwt affected versions not specified Description The fast-jwt library contains an incomplete fix for a JWT algorithm confusion issue. The public key matcher regex in fast-jwt/src/crypto.js uses a leading anchor that can be bypassed by...

Application allows to add same SSH key among different users

Description With SSH keys, you can connect to Rdiffweb without supplying your username and personal access token at each visit. Rdiffweb allows the same SSH key to be used by multiple users . For Example: User A has used SSH key '1' , the same key can be used by User B , User C . The application ...

Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring System

A batch-catching, pattern-matching, patch-attacking secret snatcher. GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. GitHound has earned me over $7500 applied to Bug Bounty research...

Gitleaks - Searches Full Repo History For Secrets And Keys

Searches Full Repo History For Secrets And Keys. Installing go get -u github.com/zricethezav/gitleaks Usage and Explanation ./gitleaks options Gitleaks audits local and remote repos by running regex checks against all commits. Options usage: gitleaks options / Options: -u --user Git user mode -r...

F-Secure Key Detection (Mac OS X)

Binary data macosxfsecurekeyinstalled.nbin...

F-Secure Key Detection

Binary data fsecurekeyinstalled.nbin...

openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)

seamonkey version 2.6 fixes several security issues : dbg114-seamonkey-5574 newupdateinfo seamonkey-5574 MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards dbg114-seamonkey-5574 newupdateinfo seamonkey-5574 MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular...

SuSE Update for seamonkey openSUSE-SU-2012:0007-1 (seamonkey)

Check for the Version of seamonkey OpenVAS Vulnerability Test $Id: gbsuse201200071.nasl 8253 2017-12-28 06:29:51Z teissa $ SuSE Update for seamonkey openSUSE-SU-2012:0007-1 seamonkey Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

seamonkey (important)

seamonkey version 2.6 fixes several security issues: MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access MFSA...

FreeBSD : mozilla -- multiple vulnerabilities (e3ff776b-2ba6-11e1-93c6-0011856a6e37)

The Mozilla Project reports : MFSA 2011-53 Miscellaneous memory safety hazards rv:9.0 MFSA 2011-54 Potentially exploitable crash in the YARR regular expression library MFSA 2011-55 nsSVGValue out-of-bounds access MFSA 2011-56 Key detection without JavaScript via SVG animation MFSA 2011-58 Crash...