A Kali-friendly tool to scan for leaked or exposed API keys and identify which service they belong to, using over 1000 known patterns.
- β Supports GitHub, Stripe, Google, AWS, and 1000+ more.
- π§ Uses
secrets-patterns-db
andtrufflehog
regex sources. - π¦ Lightweight, works with Python 3.
# Install dependencies
pip install -r requirements.txt
# Update pattern database (recommended once)
python3 cli.py update-patterns
# Scan for API keys
python3 cli.py scan keys.txt
You can also use stdin:
cat keys.txt | python3 cli.py scan -
API Key | Service | Confidence |
---|---|---|
sk_test_abc123 |
Stripe | 0.97 |
ghp_abcdEFGHijklMNOP1234567890 |
GitHub | 0.99 |
cli.py
: The main CLI scriptrequirements.txt
: Python dependenciesbanner.txt
: ASCII banner (optional)