Trufflehog
Find and verify leaked credentials
trufflesecurityThird-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer
About
TruffleHog searches for credentials that a machine uses to log in to another system, such as API keys, database passwords and private keys. It can look through Git, chats, wikis, logs, object stores and filesystems.
It recognizes over 800 types of secret and can check whether a found secret still works. For about twenty common credential types, it can go further and report who created the secret and what it has access to. It is a command line tool, available through Homebrew and Docker, under the AGPL license.
Highlights
- Classifies over 800 secret types
- Checks whether a found secret is still live
- Searches Git, chats, wikis, logs and files
Who it's for
Good for security-minded teams who need to know if a leaked key is still active.
This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.
Why it is here
- Code changed today
- New release 6 days ago
Official channels
Official channels only. We never host or repackage downloads.
