TruffleHog
Find leaked credentials.
URL
Product Page - https://trufflesecurity.com/trufflehog
GitHub Repository - https://github.com/trufflesecurity/trufflehog
Description
TruffleHog is a tool that is capable of finding, verifying, and analyzing leaked credentials. Credentials can be API keys, passwords, authentication tokens, private keys, etc. TruffleHog is capable of searching through multiple data sources, including local and remote git repositories, Dockerfiles, AWS S3 buckets, file-systems, CI/CD systems, and more. Once a secret is detected, TruffleHog (since version 3) will additionally validate the secret in order to identify which detections are still active and not previously disabled and/or rotated. Lastly, the tool comes with an analyze command that is capable of of taking a detected secret and giving you more information about the permissions and resources it has access to.
Cost
While TruffleHog is free at it's core, there is an Enterprise version available. However, there is little functionality provided in Enterprise that is of much use to an individual researcher.
Level of difficulty
Requirements
A terminal emulator is required to install and use the tool.
Limitations
The tool is limited to detecting types of credentials that it has pre-configured detectors for. See a list here. You may also define custom detectors.
Ethical Considerations
Using credentials found by TruffleHog to gain (or attempt to gain) unauthorized access is unethical and illegal in most countries.
Guides and articles
The TruffleHog README has information on how to install and use the tool, including advanced usage.
The TruffleHog Documentation provides additional information, though there are Enterprise features co-mingled with the open source features. If a feature is Enterprise-only, the page will have a banner that indicates this, as seen on the Google Drive page (as of: 27 August, 2024).
Tool provider
Truffle Security Co. - USA
Advertising Trackers
Max Louthain
Last updated
Was this helpful?