← All tools

GitLeaks

https://github.com/gitleaks/gitleaks

Open Source

Categories

Reconnaissance

Description

SAST tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories. Scans commits, branches, and git history.

Keywords

secrets detection API keys credentials git source code SAST tokens

Example Usage

gitleaks detect --source . --report-format json --report-path leaks.json
gitleaks detect --repo https://github.com/org/repo

See also

Fast and multi-purpose DNS toolkit from ProjectDiscovery. Resolves domains, performs wildcard filter…

Takes screenshots of web pages, RDP, and VNC services. Reports on default credentials and interestin…

A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.…

Portable multi-tool for hardware hacking. Supports Sub-GHz radio, 125kHz RFID, NFC, Infrared, iButto…

🔎 OSINT Maltego Transforms for investigating Telegram channels, groups, and users, including deanony…

Custom Word List generator that spiders a target website to build a wordlist based on the site's con…