gitGraber

About gitGraber gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon AWS, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, Twilio... How it works ? It's important to understand th...

jsubfinder

JSubFinder is a tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go's amazing performance allowing it to utilize large data sets & be easily chained with other tools...

Apkx-Hunter

APKX-Hunter v3.0.0 -- Debian Package APKX-Hunter at Black Hat Arsenal Europe 2026 View APKX-Hunter on Black Hat Europe Arsenal APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware...

smbcrawler

SmbCrawler SmbCrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' or 'spiders' through those shares. Features: takes host names, IP addresses, IP ranges, or an nmap xml file as input checks permissions check for 'write' permissions is opt-in, because it requires...

JSFScan.sh

JSFScan.sh Blog can be found at https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to...

Pinkerton

🕵️ Pinkerton Investigating JavaScript files since 1850 Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded passwords, or related data. ⚡ Getting started A quick guide on how to install and use Pinkerton. 1. Clone the repository with:...

entropy

Paranoïd about having secrets leaked in your huge codebase? Entropy is here to help you find them! Entropy Entropy is a CLI tool that will scan your codebase for high entropy lines , which are often secrets. Installation From source with Go preferred go install github.com/EwenQuim/entropy@latest...

subjs

subjs subjs fetches javascript files from a list of URLS or subdomains. Analyzing javascript files can help you find undocumented endpoints, secrets, and more. It's recommended to pair this with gau and then https://github.com/GerbenJavado/LinkFinder Resources Usage Installation Usage: Examples: ...

slack-watchman

Slack Watchman Monitoring and enumerating Slack for exposed secrets About Slack Watchman Slack Watchman is an application that uses the Slack API to find potentially sensitive data exposed in a Slack workspace, and to enumerate other useful information for red, blue and purple teams. More...

codetotal

CodeTotal CodeTotal analyzes any snippet , file , or repository to detect possible security flaws such as secret in code , open source vulnerability , code security , vulnerability , insecure infrastructure as code , and potential legal issues with open source licenses. To see how to use CodeTota...

secret-stripper

A small Rust CLI that strips secrets from your clipboard on demand. Bind a hotkey, highlight text, press the chord - the clipboard holds a redacted version. Normal Ctrl+C / Ctrl+V is never intercepted. Contents Quick Start Supported OS Platform setup macOS setup Windows setup What It Detects Reda...

gitlab-watchman

GitLab Watchman About GitLab Watchman GitLab Watchman is an application that uses the GitLab API to detect exposed secrets and personal data. It also enumerates the GitLab instance for any useful information. Features Secrets Detection It searches GitLab for internally shared projects and looks a...

GiveMeSecrets

GiveMeSecrets Use regular expressions to get sensitive information from a given repository GitHub, pip or npm. Dependencies You only need to have python 3.6 or higher installed to launch this script. In addition you must have installed in the system git, pip and npm. How to use It's very easy to...

LLMReaper

Passive LLM Conversation Capture & Sensitive Data Exposure Research Chromium MV3 Extension • Real-Time DOM Capture • Secret Detection • FastAPI Backend !WARNING This project is provided strictly for security research, educational use, and defensive awareness purposes. Unauthorized deployment...

mavd

mavd Mobile Application Vulnerability Detection Receives a domain or APK name from CLI, identifies most applications tied to the domain and downloads the APKs locally. It then reverses the APK to a jar file using dex2jar, extracts the class files and objects then searches the code for 'secret' ty...

reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker docker build -t reposcanner . docker run -it...

kyubisweep

🦊 KyubiSweep Hunt exposed secrets with the cunning of a fox! A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum performance and zero dependencies. ✨ Features 🔍 30+ Secret Patterns - Detects AWS, Stripe,...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks está completo en cuanto a funcionalidades. No estoy incorporando nuevas funciones en Gitleaks. Las versiones futuras serán solo parches de seguridad. Estoy centrando mi atención en Betterleaks license:...

dora

dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...

git-secrets

=========== git-secrets Evita que comprometas contraseñas y otra información sensible en un repositorio de git. .. contents:: :depth: 2 Sinopsis :: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets --list...