secrets-detection

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Find leaked secrets everywhere.

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

Searches through git repositories for high entropy strings and secrets, digging deep into commit history