TruffleHog (T) alternatives
6 tools in the catalogue cover the same ground as TruffleHog (T) and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Github-Dorks (T)freeCollection of GitHub advanced search operators and a CLI tool that automates searching GitHub for exposed credentials, API keys, configuration files, and other sensitive information.
- GitLeaksfreeOpen-source SAST tool for detecting hardcoded secrets, API keys, passwords, and credentials in git repositories and file systems using customizable regex-based detection rules.
- Gitrob (T)freeCLI tool for reconnaissance on GitHub organizations and users; clones repositories and scans commit history for sensitive files, exposed credentials, and configuration data.
- NerdyDatafreemiumSource code search engine for website technology reconnaissance that indexes HTML, CSS, and JavaScript across millions of live websites to identify technology and library usage.
- PublicWWWfree or freemiumSource code search engine for HTML, JavaScript, CSS, and plaintext across 509+ million web pages. Find websites using specific analytics IDs, ad accounts, or code snippets.
- SearchcodefreemiumCode search engine that indexes public source code from GitHub, GitLab, Bitbucket, and other repositories; useful for finding code examples and identifying technology usage patterns.
TruffleHog (T)
Search Engines
Also written TruffleHog, Truffle Hog
Open source secret scanner that detects 700+ types of API keys, tokens and credentials in git repositories, S3 buckets, Jira and file systems.
RECOMMENDED USE
Scanning public repositories for accidentally committed API keys and credentials
Information
Video tutorials
Learn to use TruffleHog (T)
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
GitLeaks
Search EnginesOpen-source SAST tool for detecting hardcoded secrets, API keys, passwords, and credentials in git repositories and file systems using customizable regex-based detection rules.
grep.app
Search EnginesSearch across 500,000+ public GitHub repositories with regex. Find code, credentials, secrets accidentally committed.
Gitrob (T)
Search EnginesCLI tool for reconnaissance on GitHub organizations and users; clones repositories and scans commit history for sensitive files, exposed credentials, and configuration data.
Searchcode
Search EnginesCode search engine that indexes public source code from GitHub, GitLab, Bitbucket, and other repositories; useful for finding code examples and identifying technology usage patterns.
User reviews
Be the first to leave a review