badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

titus

Titus: Scanner di Segreti ad Alte Prestazioni Titus è uno scanner di segreti ad alte prestazioni che rileva credenziali, chiavi API e token in codice sorgente, file e cronologia git. Include 487 regole di rilevamento che coprono centinaia di servizi e tipi di credenziali, tratte da NoseyParker e...

VMkatz

VMkatz كبير جدًا بحيث لا يمكن سرقته أنت في الأسبوع الثالث من عملية فريق أحمر. حركة مرورك تتسلل عبر VPN، ثم ترتد عبر أربعة بروكسيات SOCKS متسلسلة عبر مضيفين تم اختراقهم قبل أن تلمس الشبكة المستهدفة. كل حزمة تسلك الطريق الخلاب. بعد أيام من الحركة الجانبية، تهبط على NAS متصل بمجموعة المحاكاة...

conjur

Conjur Manutenibilità Copertura dei test Conjur fornisce gestione dei segreti e identità delle applicazioni per l'infrastruttura moderna: Linguaggio di markup delle autorizzazioni per macchine "MAML" , un linguaggio di policy di accesso basato sui ruoli per definire i componenti di sistema e i lo...

infisical

Платформа управления секретами с открытым исходным кодом : Синхронизируйте секреты/конфигурации в вашей команде/инфраструктуре и предотвращайте утечки секретов. Slack | Infisical Cloud | Самостоятельное развертывание | Документация | Веб-сайт | Twitter | Вакансии удаленно/SF Введение Infisical —...

CVE-2026-48786

Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint POST /api/latest/fleet/targets returned unmasked team enroll secrets and full team configuration, including credential-bearing agent options, to low-privilege observer-clas...

talisman

Talisman Ein Werkzeug, um Geheimnisse zu erkennen und zu verhindern, dass sie eingecheckt werden Inhaltsverzeichnis Was ist Talisman? Installation Installation in den Pfad empfohlener Ansatz Installation als globale Hook-Vorlage Konfiguration eines Projekts...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project...

Malicious code in self-certificates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced9167241d391937ba7b1f2625aa3f8184d832ebc61c182936100ae3a3f13bd Package advertised as a self-signed TLS certificate generator ships a fake RSA private key at test/key.pem whose body, once the PEM headers are...

Malicious code in self-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b684f78f17626dead6b3d11131179a7a1aff7fa5e903daeecdac17ce8e3b99b3 The exported generate function in [email protected] accepts an undocumented third defaults parameter. When passed a string, the code strips PEM...

trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

CVE-2026-48786 Fleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint

Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endpoint POST /api/latest/fleet/targets returned unmasked team enroll secrets and full team configuration, including credential-bearing agent options, to low-privilege observer-clas...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install cariddi Snap...

actions-secrets

GitHub Action di analisi dei segreti di SecureStack Una GitHub Action che analizza il tuo codice sorgente alla ricerca di segreti, credenziali, chiavi API, hostname/URL di server e database, e molto altro! Quando aggiungi questo alle GitHub Actions analizzeremo il tuo codice sorgente per...

sift

Sift Secrets Triage dell'esposizione di credenziali e dati sensibili per le condivisioni di file. Quando compare una condivisione aperta, la domanda non è mai "questo repo ha una chiave divulgata". È "cosa è stato esposto, e cosa devo revocare prima della chiusura dell'attività." sift è costruito...

BFScan

BFScan Strumento per l'elaborazione iniziale di applicazioni APK / XAPK / APKM / DEX / JAR / WAR. Ricerca di stringhe nel codice sorgente e nelle risorse che assomigliano a URI, percorsi o segreti Genera richieste HTTP grezze e specifiche OpenAPI basate su file di configurazione, annotazioni di...

adiskreader-secretsdump

🚩 Sponsor Se ti piace questo progetto, considera l'acquisto di licenze di OctoPwn, la nostra suite completa di pentesting che gira nel tuo browser! Per notifiche su nuove build/versioni e altre informazioni, unisciti al nostro Discord adiskreader-secretsdump Estrai i segreti del registro e NTDS d...

Malicious code in r4wk-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5cbca68751eb879140f7c896a0dc3c324e9f4dbc8a1651b38b246b299ba4eb On npm install, the package's postinstall hook runs node.worker.js, which detaches a background child, waits a jittered delay, and opens a TCP socket...

BIT-KEYCLOAK-2026-17048 Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api

A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs when the system processes requests for rotated client secrets that are stored in a secure vault. Due to improper boundary enforcement, a delegated administrator with view-only...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...