19 matches found
rusty-hog
Rusty Hog is a secret scanner built in Rust for performance, and based on TruffleHog which is written in Python. Rusty Hog provides the following binaries: Ankamali Hog: Scans for secrets in a Google doc. Berkshire Hog: Scans for secrets in an S3 bucket. Choctaw Hog: Scans for secrets in a Git...
keyhog
Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...
credactor
Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...
apkprobe
APKprobe APK decompiler and secrets scanner for Android security research. Automatically extract API keys , endpoints , tokens , and other leaked credentials from Android applications. Works with .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab files. Perfect for apk2url extractio...
scan4secrets
scan4secrets DAST + SAST secret scanner with live verification, source-map parsing, and CI-native reporting plus a SAST vulnerability & misconfiguration engine. Find leaked credentials in source trees, running web apps, and CI logs. Verify them live against vendor APIs. Scan the same source trees...
kingfisher
Rileva e convalida i segreti ovunque. Mappa l'accesso. Revoca rapidamente. Trova i segreti trapelati. Convalida quali sono attivi. Mappa il raggio d'impatto. Revoca rapidamente. Kingfisher è uno scanner di segreti estremamente veloce, completamente gratuito e open source, scritto in Rust. Rileva ...
noseyparker
Nosey Parker ahora es reemplazado por Titus. Nosey Parker está oficialmente retirado Consulte nuestra publicación de anuncio https://www.praetorian.com/blog/titus-open-source-secret-scanner/. El repositorio de Titus se puede encontrar en https://github.com/praetorian-inc/titus Descripción general...
Boundary-Mutation Testing for Pattern-Based Secret Detection: A Rule-Level Method and Cross-Scanner Evaluation
Pattern-based secret scanners are commonly validated with example-based fixtures that fix one variable: the text surrounding a credential. We introduce boundary-mutation testing to vary that context, generating credentials from each rule's own regular expression, embedding them in realistic sourc...
keyhog v0.5.86
Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...
keyhog v0.5.73-action
Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...
guardx
🛡️ Guard Toolkit — Full Tutorial Security toolkit: Secret S...
keyhog v0.5.47
Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...
MAL-2026-6795 Malicious code in zod-pino444 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560c3d47344d4da5dffac230236b5248d2f1856c221ffac7ff72d4e3b197957b Package [email protected] is a credential/secret harvester disguised behind a benign-sounding name. scripts/postinstall-agent.mjs is a...
Malicious code in logger-daemon-regex (npm)
The npm package logger-daemon-regex is a full-spectrum information stealer and remote-control agent disguised as a "Node.js integration layer for Autodesk Forge" all bin names are forge-. A postinstall lifecycle hook chains five scripts postinstall-clipboard-event, ensure-dist,...
sentinel
Sentinel — Agentic Code & System Quality Guardian Production-...
JavaScript Sensitive Information Disclosure Scanner
This tool performs automated crawling and heuristic scanning of JavaScript files linked within a target website. It identifies exposed secrets such as API keys, access tokens, cloud credentials, private keys, and database passwords that may be unintentionally published within frontend resources. ...
Malicious code in @postman/secret-scanner-wasm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1604689ef91985fbc1fe9f8958eb7a50835e71b7cfa4125de687ca37c2d19 The package @postman/secret-scanner-wasm was found to contain malicious code. Source: google-open-source-security...
MAL-2025-190911 Malicious code in @postman/secret-scanner-wasm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1604689ef91985fbc1fe9f8958eb7a50835e71b7cfa4125de687ca37c2d19 The package @postman/secret-scanner-wasm was found to contain malicious code. Source: google-open-source-security...
