Hacker News new | past | comments | ask | show | jobs | submit login

See also:

- trufflehog: https://github.com/trufflesecurity/trufflehog

- detect-secrets: https://github.com/Yelp/detect-secrets

- semgrep secrets: https://semgrep.dev/products/semgrep-secrets -- (Paid, but may be included in existing licenses in some cases




Also see PyWhat for both interesting strings and secrets https://github.com/bee-san/pyWhat


noseyparker is another good one: https://github.com/praetorian-inc/noseyparker

I think these solutions are all much better for finding secrets than something naive based on entropy. Yes, entropy is more general but these are well established tools that have been through the fire of many, many data sets.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: