https://github.com/secretsifter/secretsifter-desktop

Standalone desktop app for macOS & Windows — scans websites and web apps for exposed API keys, credentials, tokens, and PII in real time. Built for penetration testers, bug bounty hunters, and security researchers. 160+ detection rules, browser crawling, and HTML reports.

Last synced: 27 Apr 2026

https://github.com/secretsifter/insecureshield-demo

Intentionally vulnerable demo target for evaluating secret-detection tools. All credentials are synthetic test data — auth-tested non-functional.

burp-suite demo intentionally-vulnerable secret-detection security-research test-fixtures vulnerable-app webpack

Last synced: 28 May 2026

https://github.com/secretsifter/secretsifter-burp

Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, entropy analysis, HTML reports & more.

Last synced: 02 Apr 2026