GitHub

Repo Security Scanner – Search secrets from GitHub

repo-security-scanner CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys Run it against your entire repo’s history by piping the output from git log -p Installation Download the latest stable release of the CLI tool for your architecture Extract the tar and

repo-security-scanner

  • CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
  • Run it against your entire repo’s history by piping the output from git log -p

Installation

  1. Download the latest stable release of the CLI tool for your architecture
  2. Extract the tar and move the scanrepobinary to somewhere in your $PATH, eg /usr/bin

Usage

Check the entire history of the current branch for secrets.
$ git log -p | scanrepo

Was this article helpful?

If something here is wrong or out of date, tell us and we will check the source.

Related reading

See all
AI

CISO Assistant — One-stop GRC Platform for Risk Management, AppSec

CISO Assistant offers a fresh perspective on Cybersecurity Management and GRC (Governance, Risk, and Compliance) practices: Features Upcoming features are listed on the roadmap. CISO Assistant is developed and maintained by Intuitem, a company specializing in Cybersecurity, Cloud, and Data/AI. Core

March 29, 2026
OSINT

WhatsApp Activity Tracker – Track WhatsApp by Phone Number

This project implements the research from the paper “Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers” by Gabriel K. Gegenhuber, Maximilian Günther, Markus Maier, Aljosha Judmayer, Florian Holzbauer, Philipp É. Frenzel, and Johanna Ullrich (Universi

December 12, 2025
Reconnaissance

EmailAll – A powerful Email Collect tool

EmailAllis a powerful Email Collect tool —— a powerful email collection tool. Installation $ git clone https://github.com/Taonn/EmailAll.git $ cd EmailAll $ pip3 install -r requirements.txt EmailAll is a powerful Email Collect tool Example: python3 emailall.py check python3 emailall.py –domain examp

November 24, 2022
GitHub

Vulnerable Spring Framework Application for Testing Spring4Shell

This application is intentionally built for testing Remote Code Execution on Spring Core aka Spring4Shell. How do I use this? First, this was tested on Ubuntu 21.04 (because I hate myself) and OpenJDK 11. Once you’ve accepted that, snag the code and build it. git clone https://github.com/jbaines-r7/

March 31, 2022