synacktiv/nord-stream

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF, JSONL, HTML, PDF, or Excel reports.

Find, verify, and analyze leaked credentials

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.