Discover source maps. Inspect client-side assets. Catch risky leaks faster.
Like SunHuawei/SourceDetector, 0 likes 0 Bookmark SunHuawei/SourceDetector, 0 bookmarks 0 A simple browser extension to quickly find interesting security-related information on a webpage.
Like TheArqsz/JSRecon-Buddy, 0 likes 0 Bookmark TheArqsz/JSRecon-Buddy, 0 bookmarks 0 Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI.
Like Amal-David/keyleak-detector, 0 likes 0 Bookmark Amal-David/keyleak-detector, 0 bookmarks 0 High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Like praetorian-inc/titus, 0 likes 0 Bookmark praetorian-inc/titus, 0 bookmarks 0 SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!
Like blackhatethicalhacking/SecretOpt1c, 0 likes 0 Bookmark blackhatethicalhacking/SecretOpt1c, 0 bookmarks 0 Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript of websites. Its vibrant ASCII art logo welcomes users to a journey where it scans, reveals, and safeguards against potential security breaches.
Like dragonked2/Dons, 0 likes 0 Bookmark dragonked2/Dons, 0 bookmarks 0 Detection tells you a key is real; geiger tells you whether it's dangerous.
Like puck-security/geiger, 0 likes 0 Bookmark puck-security/geiger, 0 bookmarks 0 Find, verify, and analyze leaked credentials
Like trufflesecurity/trufflehog, 0 likes 0 Bookmark trufflesecurity/trufflehog, 0 bookmarks 0 Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
Like mongodb/kingfisher, 0 likes 0 Bookmark mongodb/kingfisher, 0 bookmarks 0 
