Alternatives and similar repositories for github-secrets

Users that are interested in github-secrets are comparing it to the libraries listed below

• nccgroup / web3-decoder
  ☆112Updated 3 years ago
• siamthanathack / Passkey-Raider
  Burp Suite extension for testing Passkey systems.
  ☆75Updated 9 months ago
• nikitastupin / pwnhub
  How GitHub Actions workflows can be hacked
  ☆174Updated last year
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆65Updated last year
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆120Updated 2 years ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆28Updated last year
• RichardoC / gitlab-secrets
  This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…
  ☆47Updated last year
• Aqua-Nautilus / CVE-Half-Day-Watcher
  ☆314Updated 6 months ago
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆136Updated 2 months ago
• dreadnode / burpference
  A research project to add some brrrrrr to Burp
  ☆196Updated 11 months ago
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆227Updated last month
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆140Updated 2 months ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆153Updated last year
• kulkansecurity / gitxray
  A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.
  ☆170Updated last week
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆312Updated 3 months ago
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆240Updated last month
• chris-anley / cq
  CQ, a code security scanner
  ☆100Updated last year
• appsecco / vulnerable-mcp-servers-lab
  A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
  ☆196Updated last month
• nccgroup / ccs
  ☆114Updated 2 years ago
• omar2535 / GraphQLer
  🔍A cutting edge context aware GraphQL API fuzzing tool!
  ☆156Updated this week
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆275Updated 8 months ago
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆303Updated this week
• happycakefriends / certainly
  Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scena…
  ☆223Updated last year
• adeptex / whispers
  Identify hardcoded secrets in static structured text (version 2)
  ☆96Updated 11 months ago
• r3volved / CVEAggregate
  Build a CVE library with aggregated CISA, EPSS and CVSS data
  ☆29Updated 2 years ago
• spaceraccoon / ogp-ctf-2024
  A web CTF for training developers in bug hunting and secure coding!
  ☆100Updated last year
• johnsaigle / scary-strings
  If these strings are in your code, you might have a problem!
  ☆49Updated last month
• synacktiv / DepFuzzer
  ☆94Updated last month
• Adversis / NextjsServerActionAnalyzer
  A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.
  ☆41Updated 5 months ago
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆109Updated last year