Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure
Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.
One way to continuously monitor sensitive information that could be exposed on Github
A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)
A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)
Monitor, Alert, and Discover sensitive info and data leakage on Github.
SEDATED® Project (Sensitive Enterprise Data Analyzer To Eliminate Disclosure)
A Deliberately Insecure Web Application
A Machine Learning Model that classifies the data in the images as Sensitive or Non-sensitive.
SafeChat Slack Bot is an open-source project designed to enhance data security within Slack workspaces.
A powerful tool designed for identifying hidden endpoints and sensitive information within JavaScript files on a website.
quickly detects OWASP top 10 vulnerabilities in your current tab
Sensitive Data Masker for ObjectMapper
Optimize your web vulnerability assessments with PassiveDigger, a comprehensive Burp Suite extension that specializes in passive traffic analysis. Detect potential vulnerabilities, get actionable insights, and supercharge your security audits.
An immature utility script to identify domain-related potentially sensitive materials on GitHub via API v3
Scrape Source Code of sensitive files like js, jsp, aspx, json and php using curl.
A Caffeinated Solution To Privacy - Hack Solution for Abhikalpan 2k19 - IBM Hackathon | IBM Watson NLU
Recursively crawl GitHub/Bitbucket/Gitlab/Git repositories/companies in search for unsafely stored secrets
Appspec YML and YAML leaks
Add a description, image, and links to the sensitive-data-exposure topic page so that developers can more easily learn about it.
To associate your repository with the sensitive-data-exposure topic, visit your repo's landing page and select "manage topics."