TruffleHog
Find leaked credentials.
Last updated
Was this helpful?
Find leaked credentials.
Last updated
Was this helpful?
Product Page -
GitHub Repository -
TruffleHog is a tool that is capable of finding, verifying, and analyzing leaked credentials. Credentials can be API keys, passwords, authentication tokens, private keys, etc. TruffleHog is capable of searching through multiple data sources, including local and remote git repositories, Dockerfiles, AWS S3 buckets, file-systems, CI/CD systems, and more. Once a secret is detected, TruffleHog (since version 3) will additionally validate the secret in order to identify which detections are still active and not previously disabled and/or rotated. Lastly, the tool comes with an analyze command that is capable of of taking a detected secret and giving you more information about the permissions and resources it has access to.
While TruffleHog is free at it's core, there is an available. However, there is little functionality provided in Enterprise that is of much use to an individual researcher.
A terminal emulator is required to install and use the tool.
Using credentials found by TruffleHog to gain (or attempt to gain) unauthorized access is unethical and illegal in most countries.
Truffle Security Co. - USA
Max Louthain
The tool is limited to detecting types of credentials that it has pre-configured detectors for. See a list . You may also define .
The has information on how to install and use the tool, including advanced usage.
The provides additional information, though there are Enterprise features co-mingled with the open source features. If a feature is Enterprise-only, the page will have a banner that indicates this, as seen on the (as of: 27 August, 2024).