Tools
wrongsecrets
OWASP/wrongsecrets
OWASP WrongSecrets is a deliberately insecure application packed with challenges that show common secrets-management mistakes, built as hands-on training for developers and security teams.
Topics
Related projects
kingfisher1.3kKingfisher is a fast secret scanner and credential response tool that detects leaked secrets, validates live credentials, maps blast radius, and supports revocation.
powerpipe526Code-based dashboards for DevOps teams to visualize cloud infrastructure and run compliance benchmarks.
trufflehog29.3kA secrets scanning tool that discovers, classifies, and verifies leaked credentials across Git repositories, filesystems, chats, and cloud storage.
ContainerSSH3.1kContainerSSH is an SSH server that launches a fresh container for each login, with pluggable authentication and configuration webhooks, Docker/Kubernetes backends and audit logging for labs, debugging access and honeypots.
sup3rS3cretMes5age572A self-hosted self-destructing message service backed by Vault with one-time links, file uploads, and TTL support.
DevSecOps6.9kThe Ultimate DevSecOps library is a curated awesome-list that organizes open-source security tools and methodologies by topic such as SAST, DAST, supply chain, and Kubernetes.