SecretHound is a collection of advanced regular expressions crafted to detect hardcoded secrets in codebases, configurations, and logs. Designed for use in bug bounty, red teaming, pentests, and CI/CD pipelines, it helps uncover credentials, tokens, private keys, and other sensitive data.
- π― API keys & tokens (Google, Facebook, Twitter, etc.)
- π OAuth2, JWT, AWS/GCP/Azure access keys
- ποΈ Private keys (.pem, .key, .p12, etc.)
- π Hardcoded usernames and passwords
- π Webhook URLs (Slack, Discord, etc.)
- πΎ Database connection strings (MongoDB, PostgreSQL, MySQL, etc.)
- βοΈ Cloud provider secrets
- π² Mobile app embedded secrets
- π§© Custom patterns for specific technologies and frameworks
grep -EiR --color=always -f regex.txt