🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

List of regex for scraping secret API keys and juicy information.

Get the TOTP secrets exported by Google Authenticator

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and many other juicy information.

Evildork targeting your fiancee👁️

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

(Android) Hide encrypted secret API keys in C/C code, retrieve and decrypt them via JNI. Google SafetyNet APIs example.

The following package is the standalone wordlist-only component to flask-unsign.

How to deploy a Flask application using Heroku

Sicher is a go module that allows secure storage of encrypted credentials in a version control system.

Automatic Secret Finder - JWT, Access Token, API keys... Based on m4ll0k/SecretFinder

Secret Keywords patterns - aggregated from different sources.

Centralized Configuration and Secrets Management for Ruby and Rails applications.

Sniper. Passive Secrets Hunting.🚬

Polykey Desktop - Open Source Decentralized Secret Sharing System for Zero Trust Workflows

A Python-based tool for encrypting and decrypting messages using the cryptography library's Fernet method. The program features a simple command-line interface and automatic secret key generation for secure data protection.

Encrypts messages between parties using RSA/DH for key exchange and AES for encryption

Command Line Interface for Keys is a tool to hide and manage your API keys and Secret/Auth tokens.

Set up all you need to capture pre-master secret keys to decrypt SSL in Wireshark.