6 tools and resources
A tool for security researchers and penetration testers to automate the process of finding sensitive information on a target domain.
A tool for identifying sensitive secrets in public GitHub repositories
Find leaked credentials by scanning repositories for high entropy strings.
A tool for detecting secrets in your code
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets in git repos.
DumpsterDiver is a tool for analyzing big volumes of data to find hardcoded secrets like keys and passwords.