americanexpress / earlybirdLinks
EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.
☆742Updated this week
Alternatives and similar repositories for earlybird
Users that are interested in earlybird are comparing it to the libraries listed below
Sorting:
- Private key usage verification☆429Updated 4 months ago
- ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.☆692Updated last year
- Telling tales on you for leaking secrets!☆234Updated last month
- A suite of secret scanners built in Rust for performance. Based on TruffleHog (https://github.com/dxa4481/truffleHog) which is written in…☆524Updated last month
- Fast HTTP enumerator☆486Updated 4 months ago
- Go rules for semgrep and go-ruleguard☆474Updated 9 months ago
- Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pag…☆523Updated 4 months ago
- A Server Side Request Forgery (SSRF) protection library. Made with 🖤 by Doyensec LLC.☆104Updated 2 months ago
- all paths lead to clouds☆638Updated last year
- Uncover forgotten secrets and bring them back to life, haunting security and operations teams.☆208Updated 2 years ago
- Yar is a tool for plunderin' organizations, users and/or repositories.☆238Updated 4 years ago
- A container analysis and exploitation tool for pentesters and engineers.☆670Updated last year
- Detect and remediate misconfigurations and security risks across all your GitHub and GitLab assets☆815Updated 4 months ago
- Get (security) info about IP addresses☆234Updated 4 months ago
- A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index☆589Updated 2 months ago
- Semgrep queries developed by Trail of Bits.☆427Updated last month
- Scan your code for security misconfiguration, search for passwords and secrets.☆649Updated 2 years ago
- Slack enumeration and exposed secrets detection tool☆387Updated last month
- A CLI-based HTTP intercept and replay proxy☆262Updated last week
- A simple HTTP proxy that fogs over naughty URLs☆1,179Updated this week
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆963Updated last week
- Find cloud assets that no one wants exposed 🔎 ☁️☆348Updated 5 years ago
- A checklist of practices for organizations dealing with account takeover (ATO)☆271Updated 10 months ago
- FestIn - Open S3 Bucket Scanner☆233Updated 4 years ago
- Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.☆278Updated 11 months ago
- An open source intelligence tool to crawl the graph of certificate Alternate Names☆355Updated 3 weeks ago
- Threat matrix for CI/CD Pipeline☆757Updated last year
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆850Updated last year
- Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure D…☆149Updated 4 years ago
- OWASP Domain Protect - prevent subdomain takeover☆397Updated 8 months ago