Secrets Ninja is an GUI tool for validating & investigating API keys discovered during pentesting & bug bounty hunting.
☆177Mar 5, 2026Updated 4 months ago
Alternatives and similar repositories for secrets-ninja
Users that are interested in secrets-ninja are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC shadow SaaS and insecure credential detection system using a browser extension.☆45Jul 10, 2026Updated last week
- ☆45Jul 17, 2025Updated last year
- Scan for secrets in dangling commits on GitHub using GH Archive data.☆485Jul 3, 2025Updated last year
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆59Jul 13, 2025Updated last year
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆29Jun 13, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Abuse trust-boundaries to bypass firewalls and network controls☆422Jul 10, 2026Updated last week
- A simple browser extension to quickly find interesting security-related information on a webpage.☆182Jul 3, 2026Updated 2 weeks ago
- Cobalt Strike beacon parser and crawler☆20Dec 14, 2025Updated 7 months ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- GitHub Workflows Insights☆47Jun 27, 2026Updated 3 weeks ago
- CloudConqueror is a 4 parter tool, which provides simulation of utilizing AWS CloudControl API as an attack tool.☆15Oct 2, 2025Updated 9 months ago
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- ☆24Mar 4, 2025Updated last year
- Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.☆117Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆16Jan 9, 2025Updated last year
- An awesome collection of articles, papers, conferences, guides, and tools relating to deception in cybersecurity.☆128Jun 10, 2026Updated last month
- Script to check Azure Front Door WAF for insecure RemoteAddr variable☆30Jul 11, 2025Updated last year
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 8 months ago
- Multi-agent AI system using GPT-4o, DeepSeek v3, and Llama 3.3 to detect if CVE vulnerabilities were exploited as zero-days. Analyzes…☆20Feb 13, 2026Updated 5 months ago
- Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules.☆1,174Updated this week
- 🛡️Proactive ransomware defense for Windows, providing secure file hiding through camouflage, encrypted mappings, smart shortcuts and sea…☆16Oct 14, 2025Updated 9 months ago
- 🖥️ Windows 🚀 A Windows tool for emergency privacy: instantly deletes sensitive data and active logins to protect my information during …☆56Jul 5, 2026Updated 2 weeks ago
- Addon for BHCE☆58Apr 1, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Detect drift. Defend cloud.☆37Feb 21, 2026Updated 4 months ago
- Deptective automatically determines the native dependencies required to run any arbitrary program or command.☆132Updated this week
- CSS injection requires an attacker to load a standalone CSS file to leak HTML tag attributes.☆21Apr 19, 2024Updated 2 years ago
- Enhanced Burp Suite extension for finding links and sensitive data in JavaScript files☆26May 10, 2026Updated 2 months ago
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆443Feb 7, 2026Updated 5 months ago
- ☆42Nov 13, 2025Updated 8 months ago
- DelePwn is a security assessment tool designed to identify and demonstrate the risks associated with Google Workspace Domain-Wide Delegat…☆41Aug 8, 2025Updated 11 months ago
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆777Jul 13, 2026Updated last week
- ☆18Feb 2, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆167Jul 6, 2026Updated 2 weeks ago
- A command line Curses based json viewer and tabulator☆30Aug 3, 2025Updated 11 months ago
- GitLab Attack TOolkit☆34Apr 24, 2026Updated 2 months ago
- ☆30Oct 13, 2025Updated 9 months ago
- JWT Auditor – Analyze, break, and understand your tokens like a pro.☆585Jul 11, 2026Updated last week
- AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. …☆113Jul 21, 2025Updated last year
- SACL Scanner is a tool designed to scan and analyze SACLs.☆52Feb 13, 2025Updated last year