Hunt organization secrets across GitHub
Employees leak keys in personal repos, gists, and commit history; search by org, domain, and internal identifiers.
Tag: secrets
Extract endpoints and secrets from JavaScript bundles
Front-end bundles list API routes, parameters, and sometimes keys the rest of the site never links to.
Read secrets from Terraform state
State files store resource attributes in clear, including passwords, keys, and tokens created during apply.
Grep git history and CI for leaked secrets
A rotated secret still lives in history; scan commits, not just the current tree.