Badsecrets
A library for detecting known or weak secrets across many platforms
About
A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" (for example, ASP.NET machine keys found in examples in tutorials), and to provide a language-agnostic abstraction layer for identifying their use.
Open Source Health
- Stars
- 826
- Forks
- 86
- License
- AGPL-3.0
- Last commit
- 2 months ago
Resources & Links
Related Categories
Vendor
Black Lantern Security
Security Organization
Quick Links
Open Source
More by Black Lantern Security
Related Products
Burp AI Agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Top category match
Semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Top category match
Shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Top category match
Zaproxy
The ZAP by Checkmarx Core project
Top category match
WSTG
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
Top category match