trufflesecurity/trufflehog

finds leaked credentials in code and cloud

universal CLI tool for managing secrets from multiple cloud providers
tellerops/teller
tool for validating API keys and credentials across services
NikhilPanwar/secrets-ninja
open source tool for cloud security risk and compliance checks
someengineering/fixinventory
finds secrets like passwords and keys in git repos
gitleaks/gitleaks
command-line tool for secure Cloudflare Tunnels to your servers
cloudflare/cloudflared
payloads and bypasses for web security and pentests
swisskyrepo/PayloadsAllTheThings
detects web application firewalls and identifies their vendors
EnableSecurity/wafw00f
secure note and file sharing with end-to-end encryption
cupcakearmy/cryptgeon
extracts and decrypts browser data for security research
moonD4rk/HackBrowserData
password cracking tool for testing and recovering weak credentials across platforms
openwall/john