Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, entropy analysis, HTML reports & more.
☆64Nov 8, 2026Updated this week
Alternatives and similar repositories for secretsifter-burp
Users that are interested in secretsifter-burp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A small Python library and CLI for working with Cloudflare Turnstile on your own pages - read the sitekey, build the token, verify the re…☆48Oct 12, 2026Updated last month
- 🔐 Chrome Extension - Detect hardcoded tokens, API keys & secrets in JavaScript files☆54Dec 15, 2025Updated 10 months ago
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆44Jan 31, 2026Updated 9 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Generate wordlists using pattern logic and expressions.☆24Jun 18, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Extracting api keys and secrets by requesting each url at the your list.☆22Jul 5, 2024Updated 2 years ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 6 months ago
- ☆16Jun 14, 2026Updated 5 months ago
- ☆13Mar 12, 2022Updated 4 years ago
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated 3 months ago
- My metasploit modules☆11Jul 7, 2015Updated 11 years ago
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆26Aug 20, 2026Updated 2 months ago
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This tool assists you in identifying all paths (URLs) that start with a / from an online JavaScript file. It then converts these paths in…☆12May 31, 2025Updated last year
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- Windows API sniffer and dumper utility for reverse engineering.☆14Jun 22, 2023Updated 3 years ago
- Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter☆61Feb 9, 2026Updated 9 months ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 3 months ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Corscan is a Go-based tool that automates the detection and exploitation of CORS misconfigurations. It performs intelligent analysis of A…☆11Jul 16, 2025Updated last year
- ☆26Jan 20, 2026Updated 9 months ago
- Random Tips and Writeups.☆14Feb 21, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Is an advanced based security scanner designed to discover sensitive information like API keys, passwords, tokens, and other secrets expo…☆10Nov 8, 2026Updated last week
- ☆12Nov 30, 2025Updated 11 months ago
- This repository contains all the GF-Patterns Repositories. All we have to do is just to run the given Shell File and it's Done !!☆22Jun 28, 2025Updated last year
- A Python based Intrusion Detection and Prevention System. Uses Scapy to sniff packets at a specific interface, extract the remote IPs, sc…☆10Oct 3, 2017Updated 9 years ago
- Bypass Reset Password Code Lead to Account Takeover☆26Sep 16, 2024Updated 2 years ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆49Aug 1, 2026Updated 3 months ago
- Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.☆13Dec 6, 2025Updated 11 months ago
- Raycast command palette clone built with Nuxt UI to demonstrate advanced component customization capabilities☆16Nov 1, 2026Updated last week
- ☆12Jul 13, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burp extension to increment a parameter in each active scan request☆13Aug 6, 2026Updated 3 months ago
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- Agent-native code security review with MCP, structured findings, and practical pre-merge scanning workflows.☆22Apr 2, 2026Updated 7 months ago
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- ☆50Feb 27, 2026Updated 8 months ago
- A command-line tool for parsing and filtering FFUF JSON output files. Quickly search, filter, and analyze your web fuzzing results with c…☆15Jan 25, 2026Updated 9 months ago
- Security audit skill for Claude Code / OpenCode - 7-phase methodology covering secrets, API auth, IDOR, infrastructure, and more☆14Jan 16, 2026Updated 9 months ago
Are these results useful?