Alternatives and similar repositories for trufflehog:

Users that are interested in trufflehog are comparing it to the libraries listed below

• gitleaks / gitleaks
  Find secrets with Gitleaks 🔑
  ☆19,546Updated this week
• owasp-amass / amass
  In-depth attack surface mapping and asset discovery
  ☆12,812Updated this week
• aquasecurity / trivy
  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
  ☆25,434Updated last week
• projectdiscovery / nuclei
  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl…
  ☆22,946Updated this week
• projectdiscovery / subfinder
  Fast passive subdomain enumeration tool.
  ☆11,503Updated this week
• gophish / gophish
  Open-Source Phishing Toolkit
  ☆12,459Updated 6 months ago
• sensepost / gowitness
  🔍 gowitness - a golang, web screenshot utility using Chrome Headless
  ☆3,683Updated 3 weeks ago
• eth0izzle / shhgit
  Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.
  ☆3,885Updated last month
• projectdiscovery / nuclei-templates
  Community curated list of templates for the nuclei engine to find security vulnerabilities.
  ☆9,991Updated this week
• kgretzky / evilginx2
  Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of …
  ☆12,846Updated 2 months ago
• infobyte / faraday
  Open Source Vulnerability Management Platform
  ☆5,359Updated last month
• semgrep / semgrep
  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
  ☆11,472Updated this week
• blacklanternsecurity / bbot
  The recursive internet scanner for hackers. 🧡
  ☆8,329Updated this week
• dstotijn / hetty
  An HTTP toolkit for security research.
  ☆6,859Updated 2 months ago
• michenriksen / gitrob
  Reconnaissance tool for GitHub organizations
  ☆6,020Updated 2 years ago
• smicallef / spiderfoot
  SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
  ☆14,164Updated 4 months ago
• 0xInfection / Awesome-WAF
  🔥 Web-application firewalls (WAFs) from security standpoint.
  ☆6,598Updated 5 months ago
• sullo / nikto
  Nikto web server scanner
  ☆9,145Updated last month
• michenriksen / aquatone
  A Tool for Domain Flyovers
  ☆5,741Updated 2 years ago
• projectdiscovery / naabu
  A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for att…
  ☆5,084Updated last week
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,738Updated this week
• ffuf / ffuf
  Fast web fuzzer written in Go
  ☆13,794Updated last week
• RedSiege / EyeWitness
  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
  ☆5,248Updated 5 months ago
• s0md3v / Arjun
  HTTP parameter discovery suite.
  ☆5,568Updated last month
• Findomain / Findomain
  The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, su…
  ☆3,434Updated last year
• quay / clair
  Vulnerability Static Analysis for Containers
  ☆10,584Updated this week
• commixproject / commix
  Automated All-in-One OS Command Injection Exploitation Tool.
  ☆5,243Updated this week
• gwen001 / pentest-tools
  A collection of custom security tools for quick needs.
  ☆3,192Updated last year
• hakluke / hakrawler
  Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
  ☆4,645Updated 3 months ago
• nccgroup / ScoutSuite
  Multi-Cloud Security Auditing Tool
  ☆7,071Updated 4 months ago