SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
β2,440May 26, 2024Updated last year
Alternatives and similar repositories for SecretFinder
Users that are interested in SecretFinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A python script that finds endpoints in JavaScript filesβ4,335Apr 13, 2024Updated 2 years ago
- BBT - Bug Bounty Tools (examplesπ‘)β1,890Apr 5, 2024Updated 2 years ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probingβ3,060Mar 7, 2026Updated last month
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β4,907Mar 20, 2026Updated last month
- Automation for javascript recon in bug bounty.β1,083Sep 9, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer β’ AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,419Sep 13, 2024Updated last year
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β4,959Updated this week
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,197Aug 14, 2024Updated last year
- Fetches javascript file from a list of URLS or subdomains.β840Jul 22, 2025Updated 9 months ago
- A tool to fastly get all javascript sources/filesβ869Jul 4, 2025Updated 9 months ago
- declutters url lists for crawling/pentestingβ1,551Feb 23, 2025Updated last year
- HTTP parameter discovery suite.β6,209Feb 20, 2025Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domainβ4,414May 1, 2024Updated 2 years ago
- Gospider - Fast web spider written in Goβ2,928Apr 21, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient β’ AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A wrapper around grep, to help you grep for thingsβ2,099Jun 8, 2024Updated last year
- Rockyou for web fuzzingβ3,141Mar 11, 2026Updated last month
- Hidden parameters discovery suiteβ2,050Sep 8, 2024Updated last year
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationβ5,040Dec 21, 2024Updated last year
- Pull out bits of URLs provided on stdinβ1,311Aug 12, 2023Updated 2 years ago
- A Python program to scrape secrets from GitHub through usage of a large repository of dorks.β2,512Aug 3, 2024Updated last year
- A tool to check a bunch of URLs that contain reflecting params.β598Aug 4, 2024Updated last year
- Quick SQLMap Tamper Suggesterβ1,400Jul 18, 2022Updated 3 years ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,618Mar 8, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,481Apr 23, 2026Updated last week
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3β2,069Jan 2, 2024Updated 2 years ago
- A collection of hacks and one-off scriptsβ2,461Mar 13, 2025Updated last year
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlistβ1,511Jan 8, 2026Updated 3 months ago
- Contextual Content Discovery Toolβ3,158Apr 29, 2024Updated 2 years ago
- A collection of tools to perform searches on GitHub.β1,487Feb 9, 2023Updated 3 years ago
- Subdomain takeover vulnerability checkerβ1,536Sep 10, 2024Updated last year
- Accept URLs on stdin, replace all query string values with a user-supplied valueβ871Nov 23, 2022Updated 3 years ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)β1,603Jun 6, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer β’ AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automatic SSRF fuzzer and exploitation toolβ3,534Sep 4, 2025Updated 8 months ago
- A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attβ¦β5,907Updated this week
- DNS Takeover tool written in Goβ2,051Mar 16, 2026Updated last month
- A tool for adding new lines to files, skipping duplicatesβ1,626Jan 12, 2024Updated 2 years ago
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelβ¦β1,064Jan 3, 2025Updated last year
- httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.β9,870Updated this week
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokensβ¦β5,327Mar 13, 2026Updated last month