A powerful and lightweight tool for bug bounty hunters and security researchers to identify hardcoded secrets, API keys, tokens, credentials, and other sensitive data in code repositories, web applications, and configuration files.
☆17Aug 29, 2025Updated last year
Alternatives and similar repositories for SecretHunter
Users that are interested in SecretHunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A small Python library and CLI for working with Cloudflare Turnstile on your own pages - read the sitekey, build the token, verify the re…☆54Oct 12, 2026Updated 2 weeks ago
- Course Material of CSE3111-Software Engineering, CSE3112-Software Engineering Lab, CSE3162-Software Development Lab☆10Jul 24, 2017Updated 9 years ago
- my active recon and vulnerability scanner framework☆12Jul 13, 2026Updated 3 months ago
- A small Python library and CLI for working with Cloudflare Turnstile on your own pages - read the sitekey, build the token, verify the re…☆248Oct 12, 2026Updated 2 weeks ago
- Trading infrastructure and automation tools for Robinhood Chain, starting with Pons - robinhood copy trading bot, robinhood sniper bot, r…☆119Sep 15, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆16Jun 28, 2026Updated 4 months ago
- ☆22Apr 29, 2025Updated last year
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆78Aug 28, 2026Updated 2 months ago
- Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens…☆37Dec 8, 2023Updated 2 years ago
- The low cortisol shell handler☆38Oct 19, 2026Updated last week
- GhidraMod By @NyaMisty: See https://github.com/NyaMisty/GhidraIDA for more☆19May 27, 2026Updated 5 months ago
- 🚀 CSRFShark - a utility for manipulating cross-site request forgery attacks☆40Sep 12, 2023Updated 3 years ago
- Evil Twin Attack Bash script☆13Feb 21, 2016Updated 10 years ago
- An interchain decentralized application using React, Solidity, and Axelar General Message Passing that allows users to send messages betw…☆14Nov 5, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Web | Mobile | API | Thick Client | Source Code Review | Wireless | Network Pentesting etc...☆11Dec 17, 2025Updated 10 months ago
- A multi coroutine concurrent batch URL survival detection tool written in Go, with concurrency determined by CPU by default.一个go编写的多协程并发批…☆12Jan 9, 2024Updated 2 years ago
- Powerful advanced web platform for C2 managing and automated penetration testing.☆17Jun 30, 2023Updated 3 years ago
- Cursor free trial reset tool — bypass request limits, restore Pro access & unlock unlimited AI. Free & open source.☆41Sep 4, 2026Updated last month
- Android application penetration testing for the masses.☆14Apr 12, 2019Updated 7 years ago
- ☆13Mar 12, 2022Updated 4 years ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- A gadget for converting PE files to shellcode.☆14Jan 9, 2020Updated 6 years ago
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆11Sep 30, 2026Updated 3 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Helping you find out what you probably shouldn’t have access to.☆18Jul 20, 2026Updated 3 months ago
- Caido Request Minimizer Plugin☆16Aug 25, 2026Updated 2 months ago
- Simple PoC package for testing for dependency confusion vulnerabilities.☆11Feb 9, 2021Updated 5 years ago
- XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…☆63Feb 22, 2021Updated 5 years ago
- ShootCutMe an .LNK file creator tool for redteamer☆16Oct 2, 2024Updated 2 years ago
- A Go client to receive real-time data messages from Polymarket☆12Jun 25, 2025Updated last year
- WAF Bypass Payload List☆18Jan 10, 2026Updated 9 months ago
- Tool for performing lots of DNS queries quickly☆18May 29, 2015Updated 11 years ago
- ☆13Mar 6, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆10May 22, 2026Updated 5 months ago
- GDT (Ghidra Data Type) generated from IDA tils☆22Mar 10, 2023Updated 3 years ago
- FirePrint is a security tool for finding misconfigured Firebase realtime databases in Android or iOS applications.☆22Apr 4, 2024Updated 2 years ago
- Web path scanner☆11Apr 1, 2021Updated 5 years ago
- ☆11May 10, 2023Updated 3 years ago
- Latest PoC exploit & Writeups☆14Apr 8, 2025Updated last year
- Collection of Cyber Threat Intelligence sources from the deep and dark web☆17Sep 10, 2025Updated last year