Hacker News new | ask | show | jobs
by BeefWellington 744 days ago
See also:

- trufflehog: https://github.com/trufflesecurity/trufflehog

- detect-secrets: https://github.com/Yelp/detect-secrets

- semgrep secrets: https://semgrep.dev/products/semgrep-secrets -- (Paid, but may be included in existing licenses in some cases

2 comments

Also see PyWhat for both interesting strings and secrets https://github.com/bee-san/pyWhat
noseyparker is another good one: https://github.com/praetorian-inc/noseyparker

I think these solutions are all much better for finding secrets than something naive based on entropy. Yes, entropy is more general but these are well established tools that have been through the fire of many, many data sets.