security-tools-testing

Here are 6 public repositories matching this topic...

Aivist / Aivist-Verify

A BOLA/IDOR access-control confirmation engine — code adjudicates every verdict, not just the model, with a reproducible evidence chain.

python cli owasp access-control appsec security-tools owasp-top-10 owasp-top-ten cli-tool api-security idor access-control-system bola idor-vulnerability security-tools-testing owasp-llm api-security-discovery idor-discovery access-control-tools

Updated Aug 15, 2026
Python

SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.

golang security credentials static-analysis ci-cd security-scanner security-tools devsecops source-code-analysis api-keys github-actions secrets-detection git-security entropy-analysis security-tools-testing

Updated Jul 17, 2026
Go

v4l-obscuraproject / DorkRecon

Star

DorkRecon is a domain reconnaissance tool generating Google dork queries (site:, filetype:, etc.) to find indexed, exposed data like configs, backups, and login pages. Designed for authorized penetration testing and red teaming, it checks domain exposure to secure leaks. It does not look up people and requires explicit authorization to run.