From 4372673d4ea8634b94bf29d860cc7945ac56ff2b Mon Sep 17 00:00:00 2001 From: moamen Date: Wed, 8 Apr 2026 23:58:35 +0200 Subject: [PATCH 1/3] Add keyFinder to TOP Browser extensions keyFinder is a Chrome extension that passively detects leaked API keys, tokens, and secrets on any web page using 80+ detection patterns and Shannon entropy analysis. MIT licensed, Manifest V3, zero dependencies. Source: https://github.com/momenbasel/keyFinder --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 2c1b9e4..602e39f 100644 --- a/README.md +++ b/README.md @@ -1572,6 +1572,7 @@ AWS deployment tool.
| **`d3coder`** | Encoding/Decoding plugin for various types of encoding. | | **`Web Developer`** | Adds a toolbar button with various web developer tools. | | **`ThreatPinch Lookup`** | Add threat intelligence hover tool tips. | +| **`keyFinder`** | Passively scans web pages for exposed API keys, tokens, and secrets using 80+ regex patterns and Shannon entropy analysis. | ###### TOP Burp extensions From e415165e121a2d0bd76e4eefd44e6226ba3d0ec5 Mon Sep 17 00:00:00 2001 From: moamen Date: Wed, 8 Apr 2026 23:58:50 +0200 Subject: [PATCH 2/3] Add VulnHawk to Pentesters arsenal tools VulnHawk is an AI-powered code security scanner (Python, MIT license) that detects vulnerabilities in Python, JavaScript, TypeScript, and Go. It provides SARIF output and is available as both a CLI tool and GitHub Action. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 602e39f..e7bf6a1 100644 --- a/README.md +++ b/README.md @@ -1281,6 +1281,7 @@ CyberTalks - talks, interviews, and article about cybersecurity.
   Vulnreport - open-source pentesting management and automation platform by Salesforce Product Security.
   Mentalist - is a graphical tool for custom wordlist generation.
   archerysec - vulnerability assessment and management helps to perform scans and manage vulnerabilities.
+   VulnHawk - AI-powered code security scanner that finds vulnerabilities in Python, JS, TS, and Go with SARIF output.
   Osmedeus - fully automated offensive security tool for reconnaissance and vulnerability scanning.
   beef - the browser exploitation framework project.
   AutoSploit - automated mass exploiter.
From ecec8f05b79448327bb1227272ce1a2630f7ff56 Mon Sep 17 00:00:00 2001 From: momenbasel Date: Mon, 27 Jul 2026 17:50:23 +0300 Subject: [PATCH 3/3] chore: scope PR to VulnHawk, keyFinder is PR #544 Claude-Session: https://claude.ai/code/session_01RMgh2XsVRBrwkd1Xn1FUZ7 --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index e7bf6a1..5b5cb7a 100644 --- a/README.md +++ b/README.md @@ -1573,7 +1573,6 @@ AWS deployment tool.
| **`d3coder`** | Encoding/Decoding plugin for various types of encoding. | | **`Web Developer`** | Adds a toolbar button with various web developer tools. | | **`ThreatPinch Lookup`** | Add threat intelligence hover tool tips. | -| **`keyFinder`** | Passively scans web pages for exposed API keys, tokens, and secrets using 80+ regex patterns and Shannon entropy analysis. | ###### TOP Burp extensions