Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, entropy analysis, HTML reports & more.
☆54Aug 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for secretsifter-burp
Users that are interested in secretsifter-burp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆41Jan 31, 2026Updated 7 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆23Mar 16, 2026Updated 5 months ago
- Static auditor for randomness and nonce hygiene in Python source - flags weak PRNGs, hardcoded keys, reused counters, static IVs, short s…☆25Sep 5, 2026Updated last week
- Generate wordlists using pattern logic and expressions.☆23Jun 18, 2026Updated 2 months ago
- SSRFHunter☆18Jan 17, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆699Updated this week
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 2 months ago
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated last month
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆24Aug 20, 2026Updated 3 weeks ago
- Stealth hybrid URL mapper☆31May 1, 2026Updated 4 months ago
- ☆25Jan 20, 2026Updated 7 months ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆34Updated this week
- Active Directory forensic framework☆16May 18, 2026Updated 3 months ago
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 🔐 Chrome Extension - Detect hardcoded tokens, API keys & secrets in JavaScript files☆50Dec 15, 2025Updated 9 months ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 2 months ago
- Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter☆64Feb 9, 2026Updated 7 months ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆13Aug 14, 2026Updated last month
- Fast Go-based XSS assessment toolkit☆20Mar 18, 2026Updated 5 months ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 9 months ago
- A CLI utility to scan S3 buckets permissions☆14May 14, 2023Updated 3 years ago
- ☆50Feb 27, 2026Updated 6 months ago
- This repository contains all the GF-Patterns Repositories. All we have to do is just to run the given Shell File and it's Done !!☆22Jun 28, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A standalone collection of widely used technologies with default credentials enabled, which can be utilized for establishing an initial f…☆21Jun 1, 2024Updated 2 years ago
- Grab form parameters easily☆14Dec 11, 2024Updated last year
- Bypass Reset Password Code Lead to Account Takeover☆26Sep 16, 2024Updated last year
- A collection of awesome one-liners for bug bounty hunting.☆60Apr 12, 2026Updated 5 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆34May 28, 2026Updated 3 months ago
- Agent-native code security review with MCP, structured findings, and practical pre-merge scanning workflows.☆22Apr 2, 2026Updated 5 months ago
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 3 months ago
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆17Jul 2, 2026Updated 2 months ago
- GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applicatio…☆25Mar 11, 2025Updated last year
- ☆19Oct 2, 2022Updated 3 years ago
- ☆394Aug 30, 2026Updated 2 weeks ago
- Springboot detection☆23Nov 8, 2021Updated 4 years ago
- ☆21Apr 27, 2026Updated 4 months ago
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 4 months ago