Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

golang security crawler scraper osint crawling web-scraping penetration-testing infosec pentesting recon bugbounty security-tools endpoints reconnaissance secret-keys redteam endpoint-discovery secrets-detection secret-scanning

• Updated Nov 5, 2026
• Go

🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

docker kubernetes security containers secrets password k8s hacktoberfest vulnerability-scanners security-tools devsecops secret-keys secrets-management secrets-detection scanning-tool infosectools

• Updated Mar 7, 2026
• Go

Find leaked secrets everywhere.

github git go golang security devops credentials static-analysis secret secrets developer-tools dynamic-analysis cicd security-tools devsecops sast secrets-management gitleaks secrets-detection secrets-scanning

• Updated Nov 9, 2026
• Go

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

rust security credentials scanner secrets penetration-testing security-tools devsecops secrets-detection noseyparker

• Updated Feb 21, 2026
• Rust

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

security credentials code key scanning leak apikey precommit devsecops secrets-management secrets-detection

• Updated Nov 12, 2026
• Python

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

regex regular-expression secrets regular-expressions trufflehog gitleaks secrets-detection trufflehog3

• Updated Aug 6, 2025
• Python

Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

security mcp opencode cursor security-scanner devsecops ai-agents ai-security runtime-security secrets-detection supply-chain-security prompt-injection gemini-cli agent-security claude-code mcp-security ai-agent-security openclaw vulnify ai-antivirus

• Updated Nov 12, 2026
• Rust

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

chrome-extension go golang security penetration-testing appsec red-team devsecops credential-scanner capability secrets-detection secret-scanner burp-suite-extension external-network-security

• Updated Nov 5, 2026
• Go

Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.

go cli entropy secrets-detection

• Updated May 27, 2026
• Go

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

javascript golang cybersecurity bug-bounty web-security recon appsec ethical-hacking attack-surface secrets-detection

• Updated Sep 20, 2026
• Go

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

git security entropy secrets secrets-scan hacktoberfest security-scanner security-tools entropy-checking secrets-detection

• Updated Sep 29, 2026
• Python

Identify hardcoded secrets in static structured text

lint security parser credentials pipeline linter secrets json-parser secrets-scan yaml-parser xml-parser passwords structured-data structured-text leaks devsecops hardcoded security-compliance secrets-detection

• Updated Oct 11, 2023
• Python

Open source (AGPL-3.0) evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

open-source static-analysis code-review github-actions secrets-detection agpl-3 mcp-server dependency-vulnerabilities

• Updated Nov 12, 2026
• Python

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

devops ci security-tools devsecops github-actions secrets-detection gitguardian

• Updated Oct 26, 2026

LLM privacy gateway in Go — millisecond-latency PII and secret redaction. Used in production by PackyCode.

golang middleware privacy grpc http-server redact gitleaks secrets-detection pii-detection data-redaction llm-security ai-gateway

• Updated Jun 9, 2026
• Go

The missing middleware for your configuration and secrets.

nodejs config typescript secrets environment-variables configuration-management env secret-sharing leak-detection secrets-management secrets-detection

• Updated Jun 10, 2026
• TypeScript

SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

hacking infosec bugbounty reconnaissance secrets-detection

• Updated Oct 11, 2026
• Python

Benchmarking repo for secrets scanning

testing security benchmark entropy example secrets scanning secrets-detection

• Updated Aug 18, 2024
• Python

Secret and/or credential patterns used for gf.

crawler infosec bugbounty wayback-machine wayback alienvault-otx gf trufflehog gitleaks secrets-detection waybackurl gau open-threat-exchange trufflehog3

• Updated Feb 10, 2023
• Shell

Monitors Github for leaked secrets

security secrets secrets-detection

• Updated Oct 25, 2024
• Python