• Stars
    star
    555
  • Rank 80,213 (Top 2 %)
  • Language
    Go
  • License
    GNU General Publi...
  • Created almost 2 years ago
  • Updated 7 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

「🔑」A tool used to hunt down API key leaks in JS files and pages

「🔑」 About Mantra

The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages.

It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for authentication to online services such as third-party APIs and are confidential and should not be shared publicly.

By using this tool, developers can quickly identify if their API keys are leaking and take steps to fix the problem before they are compromised. Furthermore, the tool can be useful for security officers, who can use it to verify that applications and websites that use external APIs are adequately protecting their keys.

In summary, this tool is an efficient and accurate solution to help secure your API keys and prevent sensitive information leaks.

Help

Usage

Install

From go:

go install github.com/MrEmpy/Mantra@latest

From source code:

git clone https://github.com/MrEmpy/Mantra
cd Mantra
make
./build/mantra-amd64-linux -h

Buy me a coffee?

LivePix

Buy me a coffe

More Repositories

1

Awesome-AV-EDR-XDR-Bypass

Awesome AV/EDR/XDR Bypass Tips
238
star
2

Reaper

「💀」Proof of concept on BYOVD attack
C++
140
star
3

Condor

「🛡️」AVs/EDRs Evasion tool
Python
86
star
4

Pingoor

「🚪」Linux Backdoor based on ICMP protocol
C
56
star
5

Frosty

「🧊」Ring 3 Rootkit for Windows 10
C
53
star
6

APIHookingDetector

「⚙️」Detect which native Windows API's (NtAPI) are being hooked
C++
36
star
7

1nf0-hunt3r

『🔍』Simple Information finder using Google Dork
Python
35
star
8

BugBountyTricks

「🐞」Bug Bounty Tricks
34
star
9

MBROverwrite

「💽」MBR Overwrite malware for linux
C
23
star
10

Nullog

「🧹」Clear logs after an invasion
Shell
13
star
11

Metafind

「📖」Tool created to extract metadata from a domain
Python
13
star
12

Digisploit

「⚙️」Create automatic exploits for digispark
Python
13
star
13

SimpleASMKernel

「💻」Simple kernel made in 16-bit assembly only
Assembly
12
star
14

BToken

「🔑」Discord Brute Force Token
Python
10
star
15

ProcessInjection

「💉」Simple Windows Process Injection Script
C++
10
star
16

EHoney

「🍯」Simple low-interaction honeypot with FTP, Telnet and Web
Python
10
star
17

AlquymiaCTF2023

C
10
star
18

CORScan

「🔎」CORS vulnerability scanner
Python
10
star
19

Farllen

「🚪」Port forwarding tool to gain access to internal devices
C
9
star
20

Zoris

「🚪」The hidden hookless backdoor
Python
8
star
21

Detective-URL

『🔎』A simple program to search directories on websites
Python
8
star
22

RustSCLoader

「🔄」A simple code that will load a shellcode directly into RAM memory in a new process
Rust
8
star
23

RPI4-Covenant-C2-Installer

「🖥️」Covenant C2 Installer for RPI 4
Shell
8
star
24

ProcessDump

「⭐️」Tool for dumping information from a process
C++
7
star
25

MrEmpy

5
star
26

wel

「🌎」Web Exploration Laboratory
PHP
5
star
27

THM-Writeups

「💻」TryHackMe Writeups
5
star
28

Pentest

『🕵️』Lista de várias coisas relacionadas ao Pentest
Shell
5
star
29

DarkRaid

「💣」Discord Raid
Python
4
star
30

1900-to-2019-wordlist

「📄」Wordlist from 1900 to 2019 for brute force
4
star
31

FWHook

「💥」Tool made to Attack Discord Webhooks
Python
4
star
32

BinaryExploitation

「💽」Sample files about buffer overflow from my article
C
4
star
33

CVE-2022-1077

TEM FLEX-1080/FLEX-1085 1.6.0 log log.cgi Information Disclosure
Python
4
star
34

Crackme

「👾」Some binaries for you to crack
C
4
star
35

CVE-2022-4944

「💥」CVE-2022-4944: KodExplorer <= 4.49 - CSRF to Arbitrary File Upload
Python
4
star
36

CVE-2006-3392

Python
3
star
37

mrempy.github.io

Ruby
3
star
38

hexc

「⚙️」Simple header for C language to encode and decode hex
C
3
star
39

My-Recon-Methodology

「📚」My Recon Methodology
1
star