SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
β2,489May 26, 2024Updated 2 years ago
Alternatives and similar repositories for SecretFinder
Users that are interested in SecretFinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A python script that finds endpoints in JavaScript filesβ4,427Apr 13, 2024Updated 2 years ago
- BBT - Bug Bounty Tools (examplesπ‘)β1,904Apr 5, 2024Updated 2 years ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probingβ3,140Mar 7, 2026Updated 4 months ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β5,045Mar 20, 2026Updated 4 months ago
- Automation for javascript recon in bug bounty.β1,102Sep 9, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,443Sep 13, 2024Updated last year
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,290Aug 14, 2024Updated last year
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β5,161Updated this week
- Fetches javascript file from a list of URLS or subdomains.β859Jul 22, 2025Updated last year
- A tool to fastly get all javascript sources/filesβ885Jul 4, 2025Updated last year
- declutters url lists for crawling/pentestingβ1,581Feb 23, 2025Updated last year
- HTTP parameter discovery suite.β6,358Feb 20, 2025Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domainβ4,519May 1, 2024Updated 2 years ago
- Gospider - Fast web spider written in Goβ2,986Apr 21, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI β’ AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Rockyou for web fuzzingβ3,201Mar 11, 2026Updated 4 months ago
- A wrapper around grep, to help you grep for thingsβ2,128Jun 8, 2024Updated 2 years ago
- Hidden parameters discovery suiteβ2,085Sep 8, 2024Updated last year
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationβ5,097Dec 21, 2024Updated last year
- Pull out bits of URLs provided on stdinβ1,328Aug 12, 2023Updated 2 years ago
- A Python program to scrape secrets from GitHub through usage of a large repository of dorks.β2,571Aug 3, 2024Updated last year
- A tool to check a bunch of URLs that contain reflecting params.β602Aug 4, 2024Updated last year
- Quick SQLMap Tamper Suggesterβ1,410Jul 18, 2022Updated 4 years ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,698Jun 11, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient β’ AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,875Jun 29, 2026Updated 3 weeks ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3β2,090Jan 2, 2024Updated 2 years ago
- A collection of hacks and one-off scriptsβ2,511Mar 13, 2025Updated last year
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlistβ1,523Jan 8, 2026Updated 6 months ago
- Contextual Content Discovery Toolβ3,233Jul 10, 2026Updated last week
- Subdomain takeover vulnerability checkerβ1,581Sep 10, 2024Updated last year
- A collection of tools to perform searches on GitHub.β1,500Feb 9, 2023Updated 3 years ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)β1,651Jun 6, 2022Updated 4 years ago
- Accept URLs on stdin, replace all query string values with a user-supplied valueβ882Nov 23, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automatic SSRF fuzzer and exploitation toolβ3,595Sep 4, 2025Updated 10 months ago
- A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attβ¦β6,092Updated this week
- DNS Takeover tool written in Goβ2,102Jul 3, 2026Updated 2 weeks ago
- A tool for adding new lines to files, skipping duplicatesβ1,648Jan 12, 2024Updated 2 years ago
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokensβ¦β5,477Jul 1, 2026Updated 3 weeks ago
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelβ¦β1,074Jan 3, 2025Updated last year
- httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.β10,192Updated this week