Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
☆731Oct 24, 2026Updated 2 weeks ago
Alternatives and similar repositories for keyFinder
Users that are interested in keyFinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,369Aug 7, 2026Updated 3 months ago
- gorobots - robots.txt recon & path discovery in Go. Structured parsing, 29-category sensitivity classification, concurrent path probing, …☆19Apr 10, 2026Updated 6 months ago
- a JS tool that let you take screenshot of many hosts.☆16Oct 24, 2026Updated 2 weeks ago
- Automate exploit/PoC execution against Shodan search results - concurrent dispatch, filtering, structured output, and export.☆12Apr 10, 2026Updated 6 months ago
- A collection of tools to perform searches on GitHub.☆1,519Feb 9, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Automation for javascript recon in bug bounty.☆1,110Sep 9, 2023Updated 3 years ago
- A python script that finds endpoints in JavaScript files☆4,473Apr 13, 2024Updated 2 years ago
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,459Sep 13, 2024Updated 2 years ago
- Fetches javascript file from a list of URLS or subdomains.☆866Jul 22, 2025Updated last year
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆1,083Jan 3, 2025Updated last year
- ☆248Jun 6, 2018Updated 8 years ago
- a .js scanner, built in php. designed to scrape urls and other info☆227Aug 22, 2017Updated 9 years ago
- A fast and minimal JS endpoint extractor☆391Nov 10, 2024Updated last year
- Path traversal / LFI fuzzer in Go - 66 encoding bypass techniques, response analysis, goroutine concurrency, wordlist support, proxy (Bur…☆16Apr 10, 2026Updated 6 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…☆1,034Feb 5, 2021Updated 5 years ago
- Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…☆222Jul 10, 2020Updated 6 years ago
- Wireless penetration testing framework. Automates WPA/WPA2/WEP/WPS attacks - recon to exploitation in one command. aircrack-ng + hashcat …☆77Oct 24, 2026Updated 2 weeks ago
- Accept URLs on stdin, replace all query string values with a user-supplied value☆885Nov 23, 2022Updated 3 years ago
- Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.☆41Dec 27, 2019Updated 6 years ago
- A collection of hacks and one-off scripts☆2,521Mar 13, 2025Updated last year
- ☆31Apr 6, 2021Updated 5 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,912Apr 5, 2024Updated 2 years ago
- ☆298Jul 16, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- The Swiss Army knife for automated Web Application Testing☆2,384Jun 20, 2026Updated 4 months ago
- "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.☆5,837Feb 8, 2025Updated last year
- Automatic SSRF fuzzer and exploitation tool☆3,648Aug 10, 2026Updated 2 months ago
- a javascript change monitoring tool for bugbounties☆734Jul 31, 2024Updated 2 years ago
- You can read the writeup on this script here☆270Jul 12, 2020Updated 6 years ago
- Python tool that probes websites for open redirection via headers, JavaScript, and meta-tag refresh, pulls candidate URLs from the Waybac…☆834Sep 28, 2026Updated last month
- ☆851Nov 13, 2023Updated 2 years ago
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆2,541May 26, 2024Updated 2 years ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, G…☆2,468Mar 26, 2026Updated 7 months ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,201Mar 7, 2026Updated 8 months ago
- A tool to fastly get all javascript sources/files☆902Aug 29, 2026Updated 2 months ago
- HTTP parameter discovery suite.☆6,435Feb 20, 2025Updated last year
- Contextual Content Discovery Tool☆3,304Jul 10, 2026Updated 3 months ago
- An hourly updated list of subdomains gathered from certificate transparency logs☆349Oct 13, 2021Updated 5 years ago
- ☆636Feb 1, 2024Updated 2 years ago