Secrets Ninja is an GUI tool for validating & investigating API keys discovered during pentesting & bug bounty hunting.
☆184Mar 5, 2026Updated 7 months ago
Alternatives and similar repositories for secrets-ninja
Users that are interested in secrets-ninja are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆44Aug 5, 2026Updated 2 months ago
- ☆23Mar 4, 2025Updated last year
- ☆44Jul 17, 2025Updated last year
- Scan for secrets in dangling commits on GitHub using GH Archive data.☆489Jul 3, 2025Updated last year
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆60Jul 13, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆168Jul 6, 2026Updated 3 months ago
- Cobalt Strike beacon parser and crawler☆20Oct 11, 2026Updated 2 weeks ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆31Jun 13, 2025Updated last year
- A simple browser extension to quickly find interesting security-related information on a webpage.☆190Oct 23, 2026Updated last week
- Abuse trust-boundaries to bypass firewalls and network controls☆434Jul 10, 2026Updated 3 months ago
- 🛡️Proactive ransomware defense for Windows, providing secure file hiding through camouflage, encrypted mappings, smart shortcuts and sea…☆17Oct 14, 2025Updated last year
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated last year
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- GitHub Workflows Insights☆47Jun 27, 2026Updated 4 months ago
- 🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during …☆57Jul 5, 2026Updated 3 months ago
- Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.☆127Jul 20, 2026Updated 3 months ago
- ☆16Jan 9, 2025Updated last year
- An awesome collection of articles, papers, conferences, guides, and tools relating to deception in cybersecurity.☆132Oct 22, 2026Updated last week
- Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the passwor…☆40May 7, 2023Updated 3 years ago
- Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.☆1,284Updated this week
- AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. …☆113Jul 21, 2025Updated last year
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Detect drift. Defend cloud.☆37Sep 19, 2026Updated last month
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆21Feb 13, 2026Updated 8 months ago
- CaptainCredz is a modular and discreet password-spraying tool.☆141Aug 5, 2026Updated 2 months ago
- CSS injection requires an attacker to load a standalone CSS file to leak HTML tag attributes.☆21Apr 19, 2024Updated 2 years ago
- Deptective automatically determines the native dependencies required to run any arbitrary program or command.☆134Updated this week
- DelePwn is a security assessment tool designed to identify and demonstrate the risks associated with Google Workspace Domain-Wide Delegat…☆42Aug 8, 2025Updated last year
- Addon for BHCE☆58Apr 1, 2025Updated last year
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆452Feb 7, 2026Updated 8 months ago
- Autonomous AI C2☆31Jul 23, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Scripts that automate portions of pentests.☆60Oct 7, 2026Updated 3 weeks ago
- Advanced Client-Side Prototype Pollution Scanner☆247Oct 22, 2026Updated last week
- Framework for Monitoring File Ingestion Source for Yara Matches☆53Mar 10, 2025Updated last year
- An OpenAI API Compatible Honeypot Gateway☆27Mar 17, 2025Updated last year
- ☆18Feb 2, 2026Updated 8 months ago
- ☆72Sep 28, 2026Updated last month
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 11 months ago