claudleak

claudleak Scans public GitHub repositories for leaked credentials in AI coding tool configuration files .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Uses TruffleHog for secret detection. Example .claude/ directory: root@kitploit: "permissions": "allow": "Bashgo build:",...

trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ Welcome to TruffleHog Explorer, a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to...

rusty-hog

Rusty Hog is a secret scanner built in Rust for performance, and based on TruffleHog which is written in Python. Rusty Hog provides the following binaries: Ankamali Hog: Scans for secrets in a Google doc. Berkshire Hog: Scans for secrets in an S3 bucket. Choctaw Hog: Scans for secrets in a Git...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

git-all-secrets

git-all-secrets 概要 git-all-secrets は以下のことが可能なツールです： 組織の複数の公開/非公開 GitHub リポジトリをクローンし、スキャンする、 組織に所属するユーザーの複数の公開/非公開 GitHub リポジトリをクローンし、スキャンする、 組織の単一の公開/非公開リポジトリをクローンし、スキャンする、 ユーザーの単一の公開/非公開リポジトリをクローンし、スキャンする、 ユーザーの単一の公開/シークレット gist をクローンし、スキャンする、 組織内のチームのリポジトリをクローンし、スキャンする、 上記すべてを同時に行う！ そうです！...

trufflehog

TruffleHog 漏洩した認証情報を見つけます。 🔎 現在スキャン中 ...およびその他 TruffleHogの機能や性能について詳しくは、製品ページをご覧ください。 🌐 TruffleHog Enterprise Git、Jira、Slack、Confluence、Microsoft Teams、Sharepoint（およびその他）を継続的に監視して認証情報を探すことに興味がありますか？エンタープライズ製品が役立ちます！詳細はこちら: 。...

driftwood

Driftwood ⚠️ Driftwood CLIツールはサポートされなくなりました。代わりにTruffleHogをご利用ください！ ⚠️ Driftwoodは、秘密鍵がTLSなどの用途や、ユーザーのGitHub SSHキーとして使用されているかどうかを調べることができるツールです。 Driftwoodは計算された公開鍵でルックアップを行うため、秘密鍵がツールを実行している場所から外部に出ることはありません。さらに、暗号化された鍵に対する基本的なパスワードクラックもサポートしています。 詳細はこちらをご覧ください。 インストール 以下の3つの簡単な方法で始められます。 Dockerで実行...

chart-down

chart-down 使用 TruffleHog 下载并扫描 Helm charts 以查找机密信息。 给定一个 Helm 仓库 URL，chart-down 会获取仓库索引，下载每个 chart 归档文件，解压后对其内容运行 TruffleHog。 环境要求 Go 1.19+ TruffleHog 位于 PATH 中（brew install trufflehog） 安装 root@kitploit: go install github.com/RandomRobbieBF/chart-down@latest 或从源码构建： root@kitploit: git clone...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: k9s, filebrowser, grype, chainctl, wolfictl, syft, k9s-fips, undock, mattermost-fips, nuclei, chezmoi, trufflehog-fips, syft-fips, kots, gotenberg, trufflehog, grype-fips, kubescape, grype-db, gptscript, zarf, mattermost, gitleaks, cg...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: filebrowser, xeol, guac, tflint, undock, steampipe, gitness, zarf, envoy-gateway, zot, kubescape-operator, trivy, terragrunt, trufflehog, podman, terraform, grafana-alloy, vcluster, trivy-operator, opentofu, nuclei, k9s, nsc, rancher-fleet, gptscript, gitleaks...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: filebrowser, syft, zarf, trufflehog, chezmoi, nuclei, grype, undock, k9s, kubescape, gptscript, kots, gitleaks, wolfictl...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: osv-scanner, openfga, docker-compose, buildah, opentelemetry-collector-contrib, zarf, splunk-otel-collector, falcoctl, grype, apko, trivy, zot, melange, dagger, buildkitd, docker-cli-buildx, trufflehog, kargo, tw, wolfictl, goreleaser, buf, cadvisor, syft, nerdctl,...

GO-2026-4910 vulnerabilities

Vulnerabilities for packages: xeol, osv-scanner, flux-source-controller, guac, src-fingerprint, gitaly, gitlab-runner, kubescape, pulumi-kubernetes-operator, snyk-cli, gomplate, steampipe, pulumi-language-yaml, zarf, flux-image-automation-controller, chezmoi, flux, grype, apko, trivy, zot, melang...

MAL-2026-11736 Malicious code in @or-sdk/view-templates (npm)

npm/@or-sdk/view-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

MAL-2026-5184 Malicious code in sf-silly-goose-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

Malicious code in sf-silly-goose-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-events-fips, amazon-ssm-agent-fips, gitlab-runner-fips, bom, apko-fips, crossplane, argo-cd, grafana-alloy-fips, osv-scanner, chainloop-cli-fips, rancher-fleet-fips, gomplate, argocd-image-updater-fips, k9s-fips, pulumi, gitlab-rails-ce-fips, pulumi-language-yam...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: xeol, openbao, flux-source-controller, kyverno-notation-aws, rancher-agent, harbor, cert-manager-csi-driver, gitlab-runner, k6, rclone, dex, rancher, flux, cert-manager-istio-csr, rancher-webhook, zot, grafana, yunikorn-k8shim, external-secrets-operator,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: xeol, openbao, flux-source-controller, kyverno-notation-aws, rancher-agent, harbor, cert-manager-csi-driver, gitlab-runner, k6, rclone, dex, rancher, flux, cert-manager-istio-csr, rancher-webhook, zot, grafana, yunikorn-k8shim, external-secrets-operator,...