diff --git a/README.md b/README.md index 7ef25c2..7576300 100644 --- a/README.md +++ b/README.md @@ -103,6 +103,7 @@ A curated list of unique and useful CI/CD attack techniques. - [GitFive](https://github.com/mxrch/gitfive) - OSINT tool to investigate GitHub profiles. - [Grep.app](https://grep.app/) - Search GitHub using regex. - [Jenkins Attack Framework](https://github.com/Accenture/jenkins-attack-framework) - This tool can manage Jenkins tasks, like listing jobs, dumping credentials, running commands/scripts, and managing API tokens. +- [KeyDrift](https://keydrift.dev) - Scans deployed HTML and JavaScript for exposed secrets while recognizing public browser credentials that should not be treated as leaks. - [Nord Stream](https://github.com/synacktiv/nord-stream) - A tool to extract secrets stored inside CI/CD environments. - [pwn_jenkins](https://github.com/gquere/pwn_jenkins) - Notes about attacking Jenkins servers. - [Secrets Patterns Database](https://github.com/mazen160/secrets-patterns-db) - The largest open-source database for detecting secrets, API keys, passwords, tokens, and more.