Archived
PwnedPasswordsChecker
joshuamart/pwnedpasswordscheckerSearch (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)
data-exfiltrationhash-analysisinformation-gathering+2
joshuamart/pwnedpasswordscheckerSearch (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)
fricciolosa-red-team/evildorkAutomated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…
soltanali0/cve-2025-5777-exploitAsync-based exploit tool for CVE-2025-5777 that detects and extracts leaked authentication tokens, internal IPs, and hidden endpoint paths from…
tillson/git-houndFast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.
sslab-gatech/avpassTool for leaking and bypassing Android malware detection system
rynosec/leakeyValidates leaked API tokens and keys using customizable JSON-based signature checks. Designed for pentesters and bug hunters to determine the impact…
wadingporque/apkprobeAPK decompiler & secrets scanner for Android security research! Extract leaked API keys, hardcoded credentials, endpoints from APK files. apk2url,…
davidtavarez/pwndbSearch for leaked credentials
beichendream/sharptokenWindows token theft and privilege escalation tool that steals leaked tokens from processes, enables SYSTEM-level access, user impersonation, and…
hazcod/claudleakHunt for AI coding artifacts containing secrets.
lab52io/leakedhandlesfinderLeaked Windows processes handles identification tool
gonzosint/gitreconOSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits.
ewenquim/entropyCLI tool that scans codebases for high-entropy lines to detect potential secrets, with customizable file extension and top-N filtering.
sakthivel10q/cve-2025-14847🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked…
jxlil/pwndbTor-based leaked credential search tool that queries the pwndb2 hidden service to find emails and passwords exposed in data breaches, with wildcard…
warflop/whoisleakThis tool queries the emails that registered the domain and verifies if they were leaked in some data leak.
password123456/certverifyA scanner that files with compromised or untrusted code signing certificates written in python.