secrets-detection

There are 16 repositories under secrets-detection topic.

• deepfence / SecretScanner

  :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

  containersdevsecopsdockerhacktoberfestinfosectoolsk8skubernetespasswordscanning-toolsecret-keyssecretssecrets-detectionsecrets-managementsecuritysecurity-toolsvulnerability-scanners
  Language:Go 3078
• noseyparker

  praetorian-inc / noseyparker

  Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

  credentialsdevsecopspenetration-testingrustscannersecuritysecurity-toolssecretssecrets-detection
  Language:Rust 1627

• GitGuardian / ggshield

  Find and fix 400+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

  devsecopssecuritycredentialsapikeykeycodeleakscanningprecommitsecrets-detectionsecrets-managementiaciac-securityinfrastructure-as-code
  Language:Python 1610

• edoardottt / cariddi

  Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

  bugbountycrawlercrawlingendpoint-discoveryendpointsgogolanghacktoberfestinfosecosintpenetration-testingpentestingreconreconnaissanceredteamscrapersecret-keyssecrets-detectionsecuritysecurity-tools
  Language:Go 1473

• mazen160 / secrets-patterns-db

  Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

  gitleaksregexregular-expressionregular-expressionssecretssecrets-detectiontrufflehogtrufflehog3
  Language:Python 1000

• EwenQuim / entropy

  Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.

  clientropygosecrets-detection
  Language:Go 655

• auth0 / repo-supervisor

  Scan your code for security misconfiguration, search for passwords and secrets. :mag:

  blueteamredteamsecret-managementsecretssecrets-detectionsecurityserverless
  Language:JavaScript 635

• Skyscanner / whispers

  Identify hardcoded secrets in static structured text

  secrets-detectionpasswordsleakspipelinedevsecopssecuritysecrets-scansecretslintlinterparserstructured-datastructured-textyaml-parserjson-parserxml-parsersecurity-compliancehardcodedcredentials
  Language:Python 480
• tartufo

  godaddy / tartufo

  Searches through git repositories for high entropy strings and secrets, digging deep into commit history

  entropyentropy-checkinggithacktoberfestsecretssecrets-detectionsecrets-scansecuritysecurity-scannersecurity-tools
  Language:Python 456

• GitGuardian / ggshield-action

  GitGuardian Shield GitHub Action - Find exposed credentials in your commits

  cidevopsdevsecopsgitguardiangithub-actionssecrets-detectionsecurity-tools
  327

• dwisiswant0 / gf-secrets

  Secret and/or credential patterns used for gf.

  gfgauwaybackurlinfosecbugbountyopen-threat-exchangecrawlerwaybackwayback-machinealienvault-otxgitleakssecrets-detectiontrufflehogtrufflehog3
  Language:Shell 228

• Plazmaz / leaky-repo

  Benchmarking repo for secrets scanning

  benchmarkentropyexamplescanningsecretssecrets-detectionsecuritytesting
  Language:Python 228

• duo-labs / secret-bridge

  Monitors Github for leaked secrets

  securitysecretssecrets-detection
  Language:Python 186

• blackhatethicalhacking / SecretOpt1c

  SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

  bugbountyhackinginfosecreconnaissancesecrets-detection
  Language:Shell 182

• openclarity / vmclarity

  VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities

  cloudsecurityvulnerabilitiesvulnerability-scannersagentlessexploitsleaked-secretsmalwaremisconfigurationsrootkitssbomsecrets-detection
  Language:Go 100

• salesforce / lobster-pot

  Scans every git push to your Github organisations to find unwanted secrets.

  cigitsecopssecrets-detectionsecurity-tools
  Language:Go 88

• adeptex / whispers

  Identify hardcoded secrets in static structured text (version 2)

  hacking-toolhardcoded-secretssecrets-detectionsecurity-auditsecurity-automationsecurity-toolscredentialspasswordsscansecretscompliancecredentialcredshackingvulnerability-scanners
  Language:Python 85

• GitGuardian / py-gitguardian

  Python API client library for the GitGuardian API

  api-clientdevsecopssecrets-detectionsecurity-toolspythonlibrarygitguardiancishift-left
  Language:Python 73
• codetotal

  oxsecurity / codetotal

  Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.

  code-quality-analyzeriacmegalintersastsecrets-detectionsecuritysupply-chainsbomsbom-generatorvulnerability-scannerssupply-chain-security
  Language:TypeScript 69

• nightfallai / nightfall_dlp_action

  GitHub Data Loss Prevention (DLP) Action: Scan Pull Requests for sensitive data, like credentials & secrets, PII, credit card numbers, and more.

  data-loss-preventiondata-protectiondata-securitysecrets-detectioncode-scannerdata-privacynightfalldevsecopsgithub-action
  58

• Comcast / xGitGuard

  AI based Secrets Detection Python Framework

  githubmlopensourcepythonsecrets-detectionsecurity-tools
  Language:Python 53

• riza / indextree

  Generates the tree of the directory listing page.

  attack-surface-detectoroffensive-securitysecrets-detection
  Language:Go 48

• valayDave / tell-me-your-secrets

  Find secrets on any machine from over 120 Different Signatures.

  securitysecurity-auditsecret-filespython3aws-accesskeysssh-keyssecrets-detectionfind-secrets
  Language:Python 46

• dwisiswant0 / secpat2gf

  convert secret patterns to gf compatible.

  credentials-gatheringcredentials-scannergfgit-secretsgitguardiangitleakssecrets-detectionsecrets-scansecrets-scannertrufflehogtrufflehog3gf-secrets
  Language:Python 37

• spark1security / n0s1

  Secret Scanner for Slack, Jira, Confluence, Asana, Wrike and Linear

  confluencecredential-scanjiraleaked-secretsscan-toolscannersecrets-detectionsecuritycve-2023-22515security-scannerasanawrikedata-loss-preventionslack
  Language:Python 36

• dmno-dev / dmno

  Full-stack configuration & secrets. Batteries included.

  configconfiguration-managementenvenvironment-variablesleak-detectionnodejssecret-sharingsecretssecrets-detectionsecrets-managementtypescript
  Language:TypeScript 32
• actions-secrets

  SecureStackCo / actions-secrets

  Adding this GitHub Action will scan your repository for sensitive data in your source code. We find things like passwords, server host strings, API keys, .env and config files and more

  actionsdeploymentdevsecopsgithub-actionssecretssecrets-detectionsecrets-discovery-servicesecrets-scansecrets-scannersecuritysecurity-automationsecurity-toolsvulnerability-detection
  28

• nightfallai / nightfall-python-sdk

  Python Data Loss Prevention (DLP) SDK - Nightfall Developer Platform

  data-loss-preventionpiisecrets-detectiondata-protectiondata-privacynightfallsdkapidata-classificationpython
  Language:Python 25
• actions-exposure

  SecureStackCo / actions-exposure

  A GitHub Action that scans your public web applications after every deployment. Add this to your dev, staging and prod steps and SecureStack will make sure that what you've just deployed is secure and meets your requirements.

  actionscloud-securitycloud-security-posture-managementdeploymentdeployment-automationdeployment-pipelinedynamic-analysisgithub-actionssecrets-detectionsecuritysoftware-composition-analysisvulnerability-detectionvulnerability-scanningweb-applicationweb-vulnerabilityweb-vulnerability-scanner
  22

• DariuszPorowski / github-action-gitleaks

  This GitHub Action allows you to run Gitleaks in your GitHub workflow.

  gitleakssecrets-managementsecrets-scannergithub-actionssecrets-detectionsecretssecrets-scansecurity-scannersecurity-scanstatic-code-analysissastdevsecops
  Language:Shell 19

• sergiomarotco / Password-Finder

  Fast password finder in MS office files (doc, xls) and other files (rtf, txt, xml) in folders

  password-finderpassword-searchersearch-passwords-in-folderfolder-auditfile-share-password-finderfolder-analyzerhardcoded-passwordssecrets-detectionpassword-detectorhardcoded-secretspassword-crawlercredential-findercredential-analyzer
  Language:C# 17
• steampipe-plugin-code

  turbot / steampipe-plugin-code

  Use SQL to instantly query secrets and more from source code. Open source CLI. No DB required.

  steampipesteampipe-pluginsqlpostgresqlpostgresql-fdwcode-scannersecrets-detectionhacktoberfestbackupetlsqlitezero-etl
  Language:Go 15

• FrodeHus / ludvig

  Security scanner using YARA

  secrets-detectionyara
  Language:Python 14

• nightfallai / nightfall-go-sdk

  Go Data Loss Prevention (DLP) SDK - Nightfall Developer Platform

  dlpdata-securitydata-privacygogolangapisdkdata-loss-preventionsecrets-detection
  Language:Go 14

• BluBracket / aws-s3-secret-scanner

  BluBracket CLI Recipes

  secrets-detectionrisk-scanner
  Language:Python 12
• hellsing

  Fricciolosa-Red-Team / hellsing

  Sniper. Passive Secrets Hunting.🚬

  tokenapisecretssecret-keyssecrets-scansecrets-detectionapi-securityinformation-extractioninformation-disclosureinformation-discovery
  Language:JavaScript 12