shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API tokens, and private keys. It functions as a security auditor for version control systems, analyzing both local files and remote repositories across platforms including GitHub, GitLab, and Bitbucket. The tool utilizes a detection engine based on signature-matching, custom regular expressions, and entropy checks to locate sensitive data. It allows for the use of custom search signatures and queries to identify non-standard secrets that may not be covered by predefined patterns. T
A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:
TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
Tool for advanced mining for content on Github
A tool to capture all the git secrets by leveraging multiple open source git searching tools
The main features of anshumanbh/git-all-secrets are: Secret Scanning, Sensitive Data Leakage.
Open-source alternatives to anshumanbh/git-all-secrets include: sap/credential-digger — A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine… unkl4b/gitminer — Tool for advanced mining for content on Github. dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… eth0izzle/shhgit — shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API… protectai/llm-guard — LLM Guard is a security firewall and guardrail framework designed to scan and sanitize inputs and outputs for large… voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It…