A Kali-friendly tool to scan for leaked or exposed API keys and identify which service they belong to, using over 1000 known patterns.
- ✅ Supports GitHub, Stripe, Google, AWS, and 1000+ more.
- 🧠 Uses
secrets-patterns-dbandtrufflehogregex sources. - 📦 Lightweight, works with Python 3.
# Install dependencies pip install -r requirements.txt # Update pattern database (recommended once) python3 cli.py update-patterns # Scan for API keys python3 cli.py scan keys.txtYou can also use stdin:
cat keys.txt | python3 cli.py scan -| API Key | Service | Confidence |
|---|---|---|
sk_test_abc123 | Stripe | 0.97 |
ghp_abcdEFGHijklMNOP1234567890 | GitHub | 0.99 |
cli.py: The main CLI scriptrequirements.txt: Python dependenciesbanner.txt: ASCII banner (optional)