secrets-detection 开源项目推荐（665 个）

edoardottt /cariddi

接收域名列表，抓取 URL，并扫描端点、机密信息、API 密钥、文件扩展名、令牌等。

deepfence /SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

betterleaks /betterleaks

Find leaked secrets everywhere.

praetorian-inc /noseyparker

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

GitGuardian /ggshield

通过高级检查检测和验证500多种类型的硬编码秘密。将其用作预提交挂钩、GitHub Action或CLI，以实现主动秘密检测和安全。

mazen160 /secrets-patterns-db

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

hashgraph-online /hol-guard

开发代理AI杀毒软件：在工具运行前保护Codex、Claude Code、Cursor、Gemini、OpenCode、插件、技能、MCP服务器和AI工具。

praetorian-inc /titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

EwenQuim /entropy

Entropy is a CLI tool that will scan your codebase for high entropy lines, which are often secrets.

cc1a2b /JShunter

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

godaddy /tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Skyscanner /whispers

Identify hardcoded secrets in static structured text

Aletheore /Aletheore

Open source (AGPL-3.0) evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.

GitGuardian /ggshield-action

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

packyme /privacy-filter

LLM privacy gateway in Go — millisecond-latency PII and secret redaction. Used in production by PackyCode.

dmno-dev /dmno

The missing middleware for your configuration and secrets.

blackhatethicalhacking /SecretOpt1c

SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

Plazmaz /leaky-repo

Benchmarking repo for secrets scanning

dwisiswant0 /gf-secrets

Secret and/or credential patterns used for gf.

duo-labs /secret-bridge

Monitors Github for leaked secrets