Awesome Bug Bounty Tools
Section: Secrets · A Chrome extension that passively scans web pages for API keys, tokens, and secrets using 80+ regex patterns and Shannon entropy analysis across 10 attack surfaces.
FreshScore 89
Entry
keyFinder
Appears in 5 awesome lists
Chrome extension that passively discovers leaked API keys, tokens, secrets, and credentials on any web page by scanning scripts, meta tags, hidden fields, web storage, and network responses using 80+ detection patterns and Shannon entropy analysis.
Open github.commomenbasel/keyfinder
Found in these lists
Awesome Stars
Section: HTML · Keyfinder🔑 is a tool that let you find keys while surfing the web!
SlowScore 58
Awesome OSINT
Section: ↑ Other Tools · Chrome extension that passively discovers leaked API keys, tokens, secrets, and credentials on any web page by scanning scripts, meta tags, hidden fields, web storage, and network responses using 80+ detection patterns and Shannon entropy analysis.
FreshScore 89
Awesome Web Security
Section: Leaking · Chrome extension that passively scans web pages for leaked API keys, tokens, and credentials across 10 attack surfaces using 80+ detection patterns and Shannon-entropy analysis, by @momenbasel.
FreshScore 87
favorite-link
Section: April 12, 2026
FreshScore 85
Often listed next to it
Obsidian
A powerful knowledge base that works on top of local plain-text Markdown files. It has a strong community, and a lot of plugins and themes. Generally privacy-respecting, but no encryption out of the b…
In 19 listsDetails
SpiderFoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
In 7 listsDetails
free for dev
A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev
In 3 listsDetails
Gitrob
a command line tool to find sensitive information lingering in publicly available files on GitHub
In 6 listsDetails
theHarvester
Gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
In 6 listsDetails
CrowdSec
CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on Fail2Ban's philosophy but is IPV6 compatible and 60x faster (Go vs Python), uses Grok patterns to parse logs and YAML scenario to identify behaviors. CrowdSec is…
In 6 listsDetails