High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, private keys, etc.).
CredStalker is a powerful automated security tool designed to hunt down exposed credentials, API keys, passwords, tokens, and sensitive data lurking in websites. Perfect for bug bounty hunters, penetration testers, and security auditors.
NFS share secret and credential finder
Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which exposures to trust. Active verification, orphan-signal triage, SARIF dedup. OWASP LLM + MITRE ATLAS tagged.
A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum performance and zero dependencies.
MCP-native secret scanner in one fast Rust binary: engine, CLI, and MCP server. Finds API keys and secrets, skips known-public fixtures, verifies live keys with a real provider call, and applies env-var rewrites. Privacy invariant: the raw secret never leaves disk.
Local-first LLM secret scanner — scan ChatGPT, Claude, Cursor & Kimi K3 chat history for leaked API keys, PII & credentials. HTML dashboard + rotation guides.
Global term search for GitLab via gitlab-python
System instructions and tools for AI assistant
JavaScript Intelligence Engine - SPA bundle'larindan secret/endpoint/source-map cikartan tek dosya ofansif recon araci. 63 secret regex'i, Source Map V3 dekoderi, webpack chunk parser, multi-format cikti. Bug bounty + self-audit.
Zero-dependency C++17 secret scanner - AWS/GitHub/Slack/Stripe keys, PEM, JWTs, entropy heuristics. Single binary, CI-friendly exit codes.
Ruby gem for leakferret, the MCP-native secret scanner. gem install leakferret, then leakferret scan . Precompiled platform gems bundle the Rust binary (no download; audit with gem unpack); honors LEAKFERRET_BIN. No scanning logic in the wrapper.
A desktop GUI application for scanning GitHub repositories and commit history to detect sensitive information such as API keys, passwords, tokens, environment files, and other security vulnerabilities.
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
Local machine secret scanner — find exposed credentials, API keys, and sensitive data. Zero dependencies, cross-platform.
Python CLI tool that detects exposed API keys, passwords, and credentials in codebases using regex pattern matching and Shannon entropy analysis.
GitHub Action for leakferret, the MCP-native secret scanner. uses: leakferrethq/leakferret-action@v1. Composite action that scans your repo for verified secret leaks and uploads SARIF to GitHub Code Scanning. Baseline support fails CI only on new leaks.
Scans your code for leaked secrets before commit. Fast, offline, zero configuration.
🛡️ Find your own leaked AI/LLM API keys before someone else does — local-first secret scanner that never validates, pools, or stores a key. pip install holtzman