Secrets Ninja is an GUI tool for validating & investigating API keys discovered during pentesting & bug bounty hunting.
☆177Mar 5, 2026Updated 5 months ago
Alternatives and similar repositories for secrets-ninja
Users that are interested in secrets-ninja are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆45Updated this week
- ☆45Jul 17, 2025Updated last year
- Scan for secrets in dangling commits on GitHub using GH Archive data.☆488Jul 3, 2025Updated last year
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆59Jul 13, 2025Updated last year
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆29Jun 13, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Abuse trust-boundaries to bypass firewalls and network controls☆430Jul 10, 2026Updated last month
- A simple browser extension to quickly find interesting security-related information on a webpage.☆184Jul 31, 2026Updated last week
- Cobalt Strike beacon parser and crawler☆20Dec 14, 2025Updated 7 months ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- GitHub Workflows Insights☆47Jun 27, 2026Updated last month
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated 10 months ago
- ☆24Mar 4, 2025Updated last year
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- ☆16Jan 9, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An awesome collection of articles, papers, conferences, guides, and tools relating to deception in cybersecurity.☆129Jun 10, 2026Updated 2 months ago
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆20Feb 13, 2026Updated 5 months ago
- DelePwn is a security assessment tool designed to identify and demonstrate the risks associated with Google Workspace Domain-Wide Delegat…☆41Aug 8, 2025Updated last year
- Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules.☆1,193Updated this week
- 🛡️Proactive ransomware defense for Windows, providing secure file hiding through camouflage, encrypted mappings, smart shortcuts and sea…☆16Oct 14, 2025Updated 9 months ago
- 🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during …☆56Jul 5, 2026Updated last month
- Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.☆126Jul 20, 2026Updated 3 weeks ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Addon for BHCE☆58Apr 1, 2025Updated last year
- Detect drift. Defend cloud.☆37Feb 21, 2026Updated 5 months ago
- Deptective automatically determines the native dependencies required to run any arbitrary program or command.☆132Jul 27, 2026Updated 2 weeks ago
- CSS injection requires an attacker to load a standalone CSS file to leak HTML tag attributes.☆21Apr 19, 2024Updated 2 years ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript files☆26May 10, 2026Updated 3 months ago
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆445Feb 7, 2026Updated 6 months ago
- ☆42Nov 13, 2025Updated 8 months ago
- CaptainCredz is a modular and discreet password-spraying tool.☆139Updated this week
- ☆18Feb 2, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆784Jul 13, 2026Updated 3 weeks ago
- ☆169Jul 6, 2026Updated last month
- Gain another host's network access permissions by establishing a stateful connection with a spoofed source IP☆85May 17, 2025Updated last year
- Additional active scan checks for BURP☆29Oct 3, 2024Updated last year
- GitLab Attack TOolkit☆34Apr 24, 2026Updated 3 months ago
- A command line Curses based json viewer and tabulator☆30Aug 3, 2025Updated last year
- ☆30Oct 13, 2025Updated 9 months ago