hardcoded-secrets

Identify hardcoded secrets in static structured text (version 2)

pSlip is an Android static analysis tool kit designed to find potentially vulnerable escalation paths by analyzing exported components, intent filters, provider permissions and cryptographic misuse

Fast password finder in MS office files (doc, xls) and other files (rtf, txt, xml) in folders

SecretStack is a robust Visual Studio Code extension that safeguards your workspace by identifying exposed secrets like API keys, tokens, and sensitive data. With customizable detection, real-time alerts, and detailed reports, SecretStack secures your code before it reaches Git.

Universal security scanning skill for AI agents - finds hardcoded secrets, API keys, and vulnerabilities in any codebase. 44 patterns validated against GitLeaks, OWASP Top 10 mapping, Markdown/SARIF/JSON reports. Works across Claude Code, Cursor, Windsurf, and any agentic platform.

Apk scanner which scans for secrets keys like stripe, paypal etc in apk file or extarcted folder.

AS{2} aims to provide visibility, compliance, alerting, and reporting capabilities. The primary focus is to integrate open-source tools used by AppSec teams in one place with better visibility.

Detects and auto-fixes hardcoded secrets in Python repos — refuses when the fix could break your code

"No Secret Scan" is a Python script designed to detect and identify secrets and hardcoded credentials within web pages, enhancing security audits by automating the discovery of potentially sensitive information like API keys, emails, and configuration files.

Intentionally vulnerable web app full of secrets to test security scanners and dependency auditors.

this is the txt of extracted firmware from esp8266 -12 E nodemcu

Ipa scanner which scans for secrets keys like stripe, paypal etc in ipa file or extarcted folder.

This tool is designed to find hardcoded secrets in Source code,Logs or ur local files. Lightweight,Multithreaded tool to find Secrets,sensitive data in youre day to day life