mongodb/kingfisher

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

credentialsdevsecopsdynamic-analysishuskymiseprecommitrustsastscanningsecret

License & maintenance

Apache-2.0 is a permissive license: free to use commercially with attribution.

Last code push 6 days ago.

	Repository	Stars	Language	License	Activity
1	trufflesecurity/trufflehogFind, verify, and analyze leaked credentials	★ 28.6k	Go	AGPL-3.0	Active
2	MobSF/Mobile-Security-Framework-MobSFMobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and sec	★ 22k	JavaScript	GPL-3.0	Active
3	bee-san/RustScan🤖 The Modern Port Scanner 🤖	★ 20.6k	Rust	GPL-3.0	Active
4	x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.	★ 49.9k	C++	Other	Active
5	KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploit	★ 49.1k	TypeScript	AGPL-3.0	Active
6	spacedriveapp/spacedriveSpacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.	★ 39.2k	Rust	Apache-2.0	Active
7	aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	★ 38.5k	Go	Apache-2.0	Active
8	prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environm	★ 15.1k	Python	Apache-2.0	Active