keyFinder

KeyFinder Descubrimiento pasivo de claves API y secretos para Chrome y Firefox KeyFinder es una extensión de navegador para Chrome y Firefox que examina pasivamente cada página que visitas en busca de claves API, tokens, secretos y credenciales filtrados. Se ejecuta silenciosamente en segundo pla...

cariddi

Toma una lista de dominios, rastrea urls y escanea en busca de endpoints, secretos, claves de API, extensiones de archivo, tokens y más Codificado con 💙 por edoardottt ¡Comparte en Twitter! Instalación • Uso • Comienza • Registro de cambios • Contribuir • Licencia Instalación 📡 Homebrew...

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

SubDomainizer

Cómprame un Café SubDomainizer SubDomainizer es una herramienta diseñada para encontrar subdominios ocultos y secretos presentes en una página web, en Github y en los JavaScripts externos que se encuentran en la URL proporcionada. Esta herramienta también encuentra buckets S3, URL de CloudFront y...

reposcanner

Reposcanner Reposcanner es un script en Python para buscar a través del historial de commits de repositorios Git cadenas interesantes como claves API, inspirado en truffleHog. Instalación El módulo Git de Python es necesario python3-git en Debian. Docker root@kitploit: docker build -t reposcanner...

secret-regex-list

Secret Regex List List of regex for scraping secret API keys and juicy information. You can directly copy this and put into your python code, some regexes might require three quotes or else it will break the code. root@kitploit: "Cloudinary" : "cloudinary://.", "Firebase URL": ".firebaseio.com",...

paranoid_crypto

Project Paranoid Overview Paranoid project checks for well known weaknesses on cryptographic artifacts such as public keys, digital signatures and general pseudorandom numbers. This library contains implementations and optimizations of existing work found in the literature. The existing work show...

Git-Secret

Git-Secret Scripts en Go para encontrar una clave API / algunas palabras clave en un repositorio Actualización V1.0.2 🚀 Eliminación de algunos verificadores Añadido archivo de ejemplo que contiene dorks de GitHub Añadido soporte para el comando go install issue 5 Captura de pantalla 📷 Cómo instal...

clan-nxt-toolkit

🔴 CLAN NXT Toolkit ██████╗██╗ █████╗ ███╗ ██╗...

PT-2026-29968

Name of the Vulnerable Software and Affected Versions fast-jwt affected versions not specified Description The fast-jwt library contains an incomplete fix for a JWT algorithm confusion issue. The public key matcher regex in fast-jwt/src/crypto.js uses a leading anchor that can be bypassed by...

Application allows to add same SSH key among different users

Description With SSH keys, you can connect to Rdiffweb without supplying your username and personal access token at each visit. Rdiffweb allows the same SSH key to be used by multiple users . For Example: User A has used SSH key '1' , the same key can be used by User B , User C . The application ...

Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring System

A batch-catching, pattern-matching, patch-attacking secret snatcher. GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. GitHound has earned me over $7500 applied to Bug Bounty research...

Gitleaks - Searches Full Repo History For Secrets And Keys

Searches Full Repo History For Secrets And Keys. Installing go get -u github.com/zricethezav/gitleaks Usage and Explanation ./gitleaks options Gitleaks audits local and remote repos by running regex checks against all commits. Options usage: gitleaks options / Options: -u --user Git user mode -r...

F-Secure Key Detection (Mac OS X)

Binary data macosxfsecurekeyinstalled.nbin...

F-Secure Key Detection

Binary data fsecurekeyinstalled.nbin...

openSUSE Security Update : seamonkey (openSUSE-SU-2012:0007-1)

seamonkey version 2.6 fixes several security issues : dbg114-seamonkey-5574 newupdateinfo seamonkey-5574 MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards dbg114-seamonkey-5574 newupdateinfo seamonkey-5574 MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular...

SuSE Update for seamonkey openSUSE-SU-2012:0007-1 (seamonkey)

Check for the Version of seamonkey OpenVAS Vulnerability Test $Id: gbsuse201200071.nasl 8253 2017-12-28 06:29:51Z teissa $ SuSE Update for seamonkey openSUSE-SU-2012:0007-1 seamonkey Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

seamonkey (important)

seamonkey version 2.6 fixes several security issues: MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access MFSA...

FreeBSD : mozilla -- multiple vulnerabilities (e3ff776b-2ba6-11e1-93c6-0011856a6e37)

The Mozilla Project reports : MFSA 2011-53 Miscellaneous memory safety hazards rv:9.0 MFSA 2011-54 Potentially exploitable crash in the YARR regular expression library MFSA 2011-55 nsSVGValue out-of-bounds access MFSA 2011-56 Key detection without JavaScript via SVG animation MFSA 2011-58 Crash...

mozilla -- multiple vulnerabilities

The Mozilla Project reports: MFSA 2011-53 Miscellaneous memory safety hazards rv:9.0 MFSA 2011-54 Potentially exploitable crash in the YARR regular expression library MFSA 2011-55 nsSVGValue out-of-bounds access MFSA 2011-56 Key detection without JavaScript via SVG animation MFSA 2011-58 Crash...