driftwood

Driftwood ⚠️ Driftwood CLI 工具已不再受支持。请改用 TruffleHog！⚠️ Driftwood 是一个工具，可以让你查找某个私钥是否被用于 TLS 或作为某个用户的 GitHub SSH 密钥等用途。 Driftwood 使用计算出的公钥进行查找，因此私钥永远不会离开你运行工具的地方。此外，它还支持对加密密钥进行一些基础的密码破解。 你可以在此阅读更多相关信息 安装 三种简单的入门方式。 使用 Docker 运行 root@kitploit: cat private.key | docker run --rm -i...

rusty-hog

Rusty Hog è uno scanner di segreti sviluppato in Rust per le prestazioni, basato su TruffleHog che è scritto in Python. Rusty Hog fornisce i seguenti binari: Ankamali Hog: Scansiona i segreti in un documento Google. Berkshire Hog: Scansiona i segreti in un bucket S3. Choctaw Hog: Scansiona i...

git-all-secrets

git-all-secrets Informazioni git-all-secrets è uno strumento in grado di: Clonare più repository GitHub pubblici/privati di un'organizzazione e scansionarli, Clonare più repository GitHub pubblici/privati di un utente che appartiene a un'organizzazione e scansionarli, Clonare un singolo repositor...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog

TruffleHog Trova credenziali trapelate. 🔎 Ora in scansione ...e altro ancora Per saperne di più su TruffleHog e le sue funzionalità, visita la nostra pagina prodotto. 🌐 TruffleHog Enterprise Sei interessato a monitorare continuamente Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint e alt...

claudleak

claudleak Analizza i repository pubblici di GitHub alla ricerca di credenziali divulgate nei file di configurazione degli strumenti di codifica AI .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, ecc.. Utilizza TruffleHog per il rilevamento dei segreti. Esempio di directory .claude/...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Benvenuto in TruffleHog Explorer, uno strumento web intuitivo per visualizzare e analizzare i dati estratti utilizzando TruffleHog. TruffleHog è uno dei più potenti strumenti open source per la scoperta, classificazione, validazione e analisi di segreti. In questo...

chart-down

chart-down Scarica e analizza i chart Helm alla ricerca di segreti usando TruffleHog. Data l'URL di un repository Helm, chart-down recupera l'indice del repository, scarica ogni archivio chart, lo estrae ed esegue TruffleHog sul contenuto. Requisiti Go 1.19+ TruffleHog nel PATH brew install...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: zarf, grype, gptscript, kots, gotenberg, k9s, wolfictl, mattermost, mattermost-fips, chainctl, nuclei, trufflehog, gitleaks, kubescape, filebrowser, trufflehog-fips, grype-fips, k9s-fips, cg, chezmoi, undock, grype-db, syft-fips, syft...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: nuclei, podman, rancher-fleet, trivy, trufflehog, kubescape-operator, steampipe, vcluster, opentofu, grafana-alloy, k9s, undock, terraform, trivy-operator, gitleaks, zot, envoy-gateway, nsc, filebrowser, tflint, terragrunt, zarf, xeol, gitness, guac, gptscript...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kubescape, chezmoi, nuclei, syft, undock, grype, filebrowser, wolfictl, trufflehog, kots, gptscript, gitleaks, zarf, k9s...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: docker-compose, dagger, trivy, wolfictl, trufflehog, docker-cli-buildx, spire-server, aws-otel-collector, falcoctl, nerdctl, k9s, tw, splunk-otel-collector, zot, melange, buf, goreleaser, syft, grype, cadvisor, apko, osv-scanner, buildah, zarf, opentelemetry-collecto...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: dagger, kaniko, nuclei, rancher-fleet, src-fingerprint, trivy, wolfictl, gomplate, external-secrets-operator, pulumi-language-dotnet, steampipe, tfsec, kots, argo-workflows, flux-image-automation-controller, trufflehog, grafana-alloy, bom, k9s, chezmoi,...

MAL-2026-11736 Malicious code in @or-sdk/view-templates (npm)

npm/@or-sdk/view-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-5184 Malicious code in sf-silly-goose-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

Malicious code in sf-silly-goose-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: osv-scanner, terragrunt, cerbos-fips, gitlab-runner, argo-events, kubescape-server, pulumi-language-dotnet, pulumi-kubernetes-operator, argo-events-fips, kaniko, external-secrets-operator-fips, nuclei, gitaly-fips, trufflehog, src-fingerprint-fips, trivy, gomplate,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: rancher-agent, nuclei, minio, k6, dex, trufflehog, external-secrets-operator, cert-manager-csi-driver, ratify, opentofu, bento, rancher, cert-manager-cmctl, terraform, seaweedfs, zot, frp, gitea, cert-manager, harbor, percona-server-mongodb-operator, kyverno,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: rancher-agent, nuclei, minio, k6, dex, trufflehog, external-secrets-operator, cert-manager-csi-driver, ratify, opentofu, bento, rancher, cert-manager-cmctl, terraform, seaweedfs, zot, frp, gitea, cert-manager, harbor, percona-server-mongodb-operator, kyverno,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: gitlab-runner, rancher-webhook, rclone, cert-manager-google-cas-issuer, cert-manager-google-cas-issuer-fips, beats, yunikorn-k8shim, yunikorn-k8shim-fips, neuvector, external-secrets-operator-fips, nuclei, ldap2pg, trufflehog, vault, versitygw-fips, frp, packer,...