How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Gato-X is a FAST scanning and attack tool for GitHub Actions pipelines. You can use it to identify Pwn Requests, Actions Injection, TOCTOU Vulnerabilities, and Self-Hosted Runner takeover at scale using just a single API token. It will also analyze cross-repository workflows and reusable…
The largest open-source database for detecting secrets, API keys, passwords, tokens, and more. Use secrets-patterns-db to feed your secret scanning engine with regex patterns for identifying secrets.
Nord Stream is a tool that allows you extract secrets stored inside CI/CD environments by deploying malicious pipelines.
The main features of synacktiv/nord-stream are: Attack and Audit Toolkits.
Open-source alternatives to synacktiv/nord-stream include: accenture/jenkins-attack-framework — Jenkins Attack Framework. adnanekhan/gato-x — Gato-X is a FAST scanning and attack tool for GitHub Actions pipelines. You can use it to identify Pwn Requests,… arthaud/git-dumper. mazen160/secrets-patterns-db — The largest open-source database for detecting secrets, API keys, passwords, tokens, and more. Use secrets-patterns-db… mxrch/gitfive — GitFive is an OSINT tool to investigate GitHub profiles. praetorian-inc/gato — GitHub Actions Pipeline Enumeration and Attack Tool.
