61 matches found
trufflehog-explorer
TruffleHog Explorer 🕵️♂️ 欢迎使用 TruffleHog Explorer,一个用户友好的基于网页的工具,用于可视化和分析通过 TruffleHog 提取的数据。TruffleHog 是最强大的开源密钥发现、分类、验证和分析工具之一。在此上下文中,密钥是指机器用于向另一台机器进行身份验证的凭据,包括 API 密钥、数据库密码、私钥等。 凭借改进的 UI/UX、强大的过滤选项和导出功能,该工具可帮助安全专业人员高效审查存储库中发现的潜在密钥和凭据。 ⚠️ 此仪表板仅针对 GitHub TruffleHog JSON 输出进行了测试。预计很快会更新以支持更多格式和平台。...
rusty-hog
Rusty Hog 是一个用 Rust 构建的高性能秘密扫描器,基于用 Python 编写的 TruffleHog。Rusty Hog 提供以下二进制文件: Ankamali Hog: 扫描 Google 文档中的秘密。 Berkshire Hog: 扫描 S3 存储桶中的秘密。 Choctaw Hog: 扫描 Git 仓库中的秘密。 Duroc Hog: 扫描目录、文件和归档中的秘密。 Essex Hog: 扫描 Confluence Wiki 页面中的秘密。 Gottingen Hog: 扫描 JIRA 议题中的秘密。 Slack Hog: 扫描 Slack 频道中的秘密。 目录...
trufflehog
TruffleHog 发现泄露的凭证。 🔎 正在扫描 ……以及更多 要了解 TruffleHog 及其功能和能力的更多信息,请访问我们的产品页面。 🌐 TruffleHog Enterprise 您是否有兴趣持续监控 Git、Jira、Slack、Confluence、Microsoft Teams、Sharepoint(以及更多) 中的凭证?我们有一个企业产品可以提供帮助!了解更多信息请访问 。...
trufflehog
TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
git-all-secrets
git-all-secrets 关于 git-all-secrets 是一款能够执行以下操作的工具: 克隆某个组织的多个公共/私有 GitHub 仓库并进行扫描, 克隆组织中某个用户的多个公共/私有 GitHub 仓库并进行扫描, 克隆某个组织的单个公共/私有仓库并进行扫描, 克隆某个用户的单个公共/私有仓库并进行扫描, 克隆某个用户的单个公共/秘密 Gist 并进行扫描, 克隆组织中某个团队的所有仓库并进行扫描, 以上全部功能可以一起完成!没错!只需提供组织名称,即可获取该组织的所有秘密。如果你还想获取组织中某个团队的秘密,只需在组织名称旁注明团队名称。 同时支持克隆和扫描 GitHu...
claudleak
claudleak Escanea repositorios públicos de GitHub en busca de credenciales filtradas en archivos de configuración de herramientas de codificación de IA .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Utiliza TruffleHog para la detección de secretos. Ejemplo de directorio...
driftwood
Driftwood ⚠️ Driftwood CLI 工具已不再受支持。请改用 TruffleHog!⚠️ Driftwood 是一个工具,可以让你查找某个私钥是否被用于 TLS 或作为某个用户的 GitHub SSH 密钥等用途。 Driftwood 使用计算出的公钥进行查找,因此私钥永远不会离开你运行工具的地方。此外,它还支持对加密密钥进行一些基础的密码破解。 你可以在此阅读更多相关信息 安装 三种简单的入门方式。 使用 Docker 运行 root@kitploit: cat private.key | docker run --rm -i...
chart-down
chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requisitos Go 1.19+ TruffleHog en PATH brew install trufflehog Instalación...
trufflehog v3.97.2
TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: gotenberg, syft, cg, trufflehog, nuclei, grype, undock, zarf, mattermost, grype-fips, k9s, gptscript, wolfictl, kots, grype-db, gitleaks, syft-fips, kubescape, filebrowser, mattermost-fips, k9s-fips, chainctl, chezmoi, trufflehog-fips...
GO-2025-3922 vulnerabilities
Vulnerabilities for packages: envoy-gateway, undock, kubescape-operator, vcluster, filebrowser, trivy, steampipe, grafana-alloy, nuclei, podman, tflint, terragrunt, k9s, guac, gitleaks, trufflehog, xeol, opentofu, nsc, gitness, rancher-fleet, gptscript, zot, zarf, terraform, trivy-operator...
GO-2025-4020 vulnerabilities
Vulnerabilities for packages: gitleaks, grype, undock, wolfictl, trufflehog, filebrowser, nuclei, gptscript, kubescape, syft, chezmoi, zarf, kots, k9s...
GO-2025-3830 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, apko, buf, trivy, grype, opentelemetry-collector, cadvisor, openfga, opentelemetry-collector-contrib, osv-scanner, docker-cli-buildx, kargo, k9s, nerdctl, falcoctl, melange, wolfictl, trufflehog, docker-compose, spire-server, syft, goreleaser,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: flux-source-controller, apko, snyk-cli, argo-workflows, argo-events, chezmoi, scorecard, skaffold, crossplane, kubescape, steampipe, trivy, argo-cd, teleport, grype, cerbos, pulumi-kubernetes-operator, grafana-alloy, nuclei, src-fingerprint, pulumi-language-java,...
MAL-2026-11736 Malicious code in @or-sdk/view-templates (npm)
npm/@or-sdk/view-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-5184 Malicious code in sf-silly-goose-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...
Malicious code in sf-silly-goose-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...
CVE-2026-41506 vulnerabilities
Vulnerabilities for packages: gitlab-runner, osv-scanner, scorecard, trivy, kargo, flux-image-automation-controller-fips, grype, zarf, kots, apko-fips, external-secrets-operator, witness, trivy-operator-fips, flux-image-automation-controller, crossplane-fips, gitea, k9s-fips, bom, mapotf-fips,...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: openbao, rancher-webhook, flux-source-controller, percona-server-mongodb-operator, rancher-agent, telegraf, minio, ratify, teleport, cert-manager-csi-driver, nuclei, cert-manager-istio-csr, harbor, k6, flux, cert-manager, external-secrets-operator, cert-manager-cmctl...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: openbao, rancher-webhook, flux-source-controller, percona-server-mongodb-operator, rancher-agent, telegraf, minio, ratify, teleport, cert-manager-csi-driver, nuclei, cert-manager-istio-csr, harbor, k6, flux, cert-manager, external-secrets-operator, cert-manager-cmctl...