ntoskernel / deepsecrets
Secrets scanner that understands code
☆137Updated last month
Alternatives and similar repositories for deepsecrets:
Users that are interested in deepsecrets are comparing it to the libraries listed below
- Secrets scanner that understands code☆188Updated last year
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens☆155Updated 3 months ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆253Updated 10 months ago
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆156Updated 4 months ago
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆258Updated 2 weeks ago
- Damn Vulnerable SCA Application☆30Updated 3 months ago
- The Most Advanced Client-Side Prototype Pollution Scanner☆179Updated this week
- ☆48Updated last week
- A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery☆283Updated 4 months ago
- tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such …☆220Updated last month
- Chat automates Nuclei template generation☆106Updated last year
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆86Updated last year
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆108Updated 2 months ago
- BChecks collection for Burp Suite Professional☆94Updated 9 months ago
- ☆198Updated 10 months ago
- A GraphQL enumeration and extraction tool☆130Updated 2 years ago
- HTTP redirection service designed to help bypass SSRF filters. Integrated with Burp Suite.☆33Updated 8 months ago
- A source code static analysis platform for AppSec enthusiasts.☆237Updated last month
- TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…☆343Updated 4 months ago
- ☆52Updated this week
- Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used …☆126Updated last week
- APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and …☆311Updated last week
- ☆60Updated 3 months ago
- Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage…☆72Updated 3 months ago
- FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)☆49Updated 2 months ago
- Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based …☆99Updated last year
- ☆166Updated 5 months ago
- An extension to use Semgrep inside Burp Suite.☆88Updated last year
- ☆184Updated 4 months ago
- Bounty Prompt is an Open-Source Burp Suite extension by Bounty Security that leverages advanced AI via Burp AI and Groq AI. It enables us…☆73Updated last month