SAP / credential-diggerLinks
A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models
☆360Updated last week
Alternatives and similar repositories for credential-digger
Users that are interested in credential-digger are comparing it to the libraries listed below
Sorting:
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…☆135Updated this week
- Find secrets in your codebase☆125Updated 11 months ago
- ☆124Updated 2 years ago
- drHEADer helps with the audit of security headers received in response to a single request or a list of requests.☆112Updated last year
- 🧮 An online calculator to assess the risk of web vulnerabilities based on OWASP Risk Assessment☆163Updated 4 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆350Updated 5 years ago
- Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterp…☆214Updated 3 weeks ago
- threatspec - continuous threat modeling, through code☆377Updated 5 years ago
- A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs☆51Updated 2 years ago
- Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration☆304Updated 2 weeks ago
- ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.☆712Updated 2 years ago
- Finding potential software vulnerabilities from git commit messages☆419Updated 2 years ago
- ☆114Updated 2 years ago
- Static security checker for Dockerfiles☆102Updated last week
- Host and manage multiple Juice Shop instances for security trainings and Capture The Flags☆308Updated this week
- Software Component Verification Standard (SCVS)☆153Updated 10 months ago
- An open source intelligence tool to crawl the graph of certificate Alternate Names☆366Updated 5 months ago
- CLI component of OWASP PurpleTeam☆134Updated 2 years ago
- OWASP Foundation Threat Dragon Project Web Repository☆88Updated last week
- The DevSecOps toolset for REST APIs☆278Updated 3 years ago
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆597Updated 10 months ago
- App that simplifies building decision trees to model adverse scenarios☆225Updated last year
- OWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions☆102Updated 2 years ago
- Damn Vulnerable Python Web App☆183Updated last year
- OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.☆182Updated 6 months ago
- Monthly CVE Stats☆44Updated last week
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆775Updated last year
- Scan DockerHub images that match a keyword to find secrets.☆61Updated 4 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆262Updated 2 weeks ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Updated 4 years ago