Local forensic scanner that extracts credentials from AI tool conversation history. For authorized red team and DLP use only.

Local forensic scanner that extracts and verifies credentials from AI tool conversation history. Detection + verification powered by TruffleHog.

layerleak the Docker Hub Secret Scanner.

Traditional secret scanners often treat a container image as a flat blob or depend on a local Docker daemon. This project is designed around OCI image internals

A Better Secrets Scanner. Detect Leaked API Keys & Credentials. A Better Secrets Scanner built for configurability and speed.

Betterleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, and whatever else you wanna throw at it via stdin. If you wanna learn more about how the detection engine works check out this blog: Regex is (almost) all you need.

• Betterleaks @ GitHub.

Related contents:

• Introducing Betterleaks, an open source secrets scanner by the author of Gitleaks @ aikido.

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

Related contents:

• CI/CD secrets extraction, tips and tricks @ Synacktiv.

Bagel is a cross-platform CLI that inspects developer workstations and produces a structured report of security findings. It allows developers to understand their attack surface and what could be of interest to a malicious actor.

• bagel @ GitHub.

Related contents:

• Bagel : scanner la posture sécurité de votre poste développeur @ DevSecOps :fr:.

CredSweeper is an advanced credential detection tool designed to identify exposed credentials such as passwords, API keys, tokens, and other sensitive information across source code, configuration files, documents, and binary assets. CredSweeper scans regular files, embedded data in containers, and files added in Git commits. The tool combines pattern-based detection, machine learning–based validation, and deep file inspection to deliver comprehensive and accurate security scanning for modern codebases and repositories.

Related contents:

• #66 @ Erreur 403 :fr:.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 459 detection rules with live credential validation.

Find and verify secrets. Find leaked credentials.

TruffleHog is the most powerful secrets Discovery, Classification, Validation, and Analysis tool. In this context secret refers to a credential a machine uses to authenticate itself to another machine. This includes API keys, database passwords, private encryption keys, and more...

• TruffleHog @ GitHub.

Related contents:

• Keeping Secrets Out of Logs @ allan.reyes.sh.
• How Security Tool Misuse Is Reshaping Cloud Compromise @ Qualys.