KeyHound πΊ is a smart web secret scanner that hunts for exposed API keys, tokens, secrets, and sensitive paths across multiple file types.
It combines:
- π― Crawling β finds referenced files & directories.
- π€ AI-Powered Analysis (Gemini) β detects secrets even if regex fails.
- π¨ Cool UI β banners, colors, and Aryanβs hacker touch.
- πΊ Customizable β cookies, delay, and output saving.
- π΅οΈ Scans common sensitive file types:
.js, .ts, .php, .py, .rb, .java, .cs, .go, .swift, .env, .json, .yaml, .git-credentials
- π Resolves and follows paths found inside files (
../../config.js,assets/api/user.js). - π€ Uses Google Gemini AI to detect API keys / secrets (no static regex required).
- β± Adjustable request delay (avoid triggering WAF / rate limits).
- πͺ Optional cookie-based scanning (authenticated sessions).
- π Save findings into custom reports.
- π¨ Hacker-style banner + colored output.
- β¨ Signature β β‘ Made by Aryan Giri β‘
git clone https://github.com/giriaryan694-a11y/KeyHound.git
cd keyhound
pip install -r requirements.txtPython 3.8+ requests google-generativeai pyfiglet termcolor colorama
** Install them manually if needed: **
pip install requests google-generativeai pyfiglet termcolor colorama1.Get a Google Gemini API Key β https://aistudio.google.com/. 2.Create a file named key.txt in the project folder. 3.Paste your Gemini key inside:
your-gemini-api-key-here
python keyhound.py
** It will ask: ** Target URL β e.g., http://127.0.0.1:5000/ Delay per request (seconds) β e.g., 2 Cookies? β Enter if required (key=value; key2=value2) Save output? β Yes/No
β‘ Made by Aryan Giri πΊ Inspired by the art of hunting secrets


