punk-security / secret-magpieView external linksLinks
Secret Magpie - Secret Detection Tool
☆245Jul 10, 2024Updated last year
Alternatives and similar repositories for secret-magpie
Users that are interested in secret-magpie are comparing it to the libraries listed below
Sorting:
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆179Jan 12, 2026Updated last month
- A pentest reporting tool written in Python. Free yourself from Microsoft Word.☆13Jun 13, 2023Updated 2 years ago
- Tool to fuzz for interesting vhost.☆23Jan 8, 2025Updated last year
- dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!☆2,194Oct 6, 2025Updated 4 months ago
- SMBeagle - Fileshare auditing tool.☆744Nov 4, 2025Updated 3 months ago
- Find subdomains on GitLab.☆106Apr 28, 2024Updated last year
- Subdomains analysis and generation tool. Reveal the hidden!☆244Jun 8, 2025Updated 8 months ago
- Saves pages to Wayback machine☆13Dec 2, 2024Updated last year
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆40May 5, 2024Updated last year
- Discover new target domains using Content Security Policy☆501Feb 7, 2026Updated last week
- A blind XSS detection and XSS data capture framework☆175Dec 6, 2025Updated 2 months ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆228Updated this week
- convert secret patterns to gf compatible.☆38Feb 11, 2023Updated 3 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- a deterministic finite automata ranker☆72Feb 6, 2022Updated 4 years ago
- Automated OSINT on SwaggerHub☆243Jan 16, 2024Updated 2 years ago
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,097Updated this week
- Hidden parameters discovery suite☆225Nov 14, 2022Updated 3 years ago
- Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.☆59Jan 22, 2023Updated 3 years ago
- Zed Attack Proxy Scripts for finding CVEs and Secrets.☆128Jun 2, 2022Updated 3 years ago
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆357Jul 17, 2023Updated 2 years ago
- This tool is useful to find a particular string in a list of URLs using tesseract's OCR (Optical Character Recognition) capabilities☆32Jan 17, 2022Updated 4 years ago
- CloudFlare Checker written in Go☆237May 12, 2024Updated last year
- 🔭 Collection of regexp pattern for security passive scanning☆116Feb 18, 2023Updated 2 years ago
- The utility aims to clean up output generated by popular tools by calculating a hash based on specific JSON values to removing junk data.☆16Apr 5, 2024Updated last year
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆719Feb 3, 2026Updated last week
- ☆383May 17, 2023Updated 2 years ago
- Automated learning of regexes for DNS discovery☆389Feb 18, 2023Updated 2 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆427Updated this week
- Find CVE PoCs on GitHub☆160Aug 1, 2025Updated 6 months ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,515Jan 15, 2026Updated last month
- De-clutter a list of URLs☆384Feb 3, 2026Updated last week
- Find related domains of a given domain.☆103Aug 5, 2023Updated 2 years ago
- Awesome cloud enumerator☆1,092Mar 9, 2025Updated 11 months ago
- Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…☆423Feb 9, 2026Updated last week
- experimental wildcard subdomain filtering prototype☆16Aug 5, 2023Updated 2 years ago
- A library for detecting known secrets across many web frameworks☆765Feb 4, 2026Updated last week
- Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests w…☆631Jan 4, 2026Updated last month
- Extract endpoints marked as disallow in robots files to generate wordlists.☆58Mar 2, 2022Updated 3 years ago