Skip to content

KeyHound 🐺 is a smart web secret scanner that hunts for exposed API keys, tokens, secrets, and sensitive paths across multiple file types.

License

Notifications You must be signed in to change notification settings

giriaryan694-a11y/KeyHound

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

10 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

🐺 KeyHound – Hunter of Exposed Keys & Secrets

KeyHound Demo


⚑ Overview

KeyHound 🐺 is a smart web secret scanner that hunts for exposed API keys, tokens, secrets, and sensitive paths across multiple file types.

It combines:

  • 🎯 Crawling β†’ finds referenced files & directories.
  • πŸ€– AI-Powered Analysis (Gemini) β†’ detects secrets even if regex fails.
  • 🎨 Cool UI β†’ banners, colors, and Aryan’s hacker touch.
  • 🐺 Customizable β†’ cookies, delay, and output saving.

πŸš€ Features

  • πŸ•΅οΈ Scans common sensitive file types:
    • .js, .ts, .php, .py, .rb, .java, .cs, .go, .swift, .env, .json, .yaml, .git-credentials
  • πŸ”— Resolves and follows paths found inside files (../../config.js, assets/api/user.js).
  • πŸ€– Uses Google Gemini AI to detect API keys / secrets (no static regex required).
  • ⏱ Adjustable request delay (avoid triggering WAF / rate limits).
  • πŸͺ Optional cookie-based scanning (authenticated sessions).
  • πŸ“‚ Save findings into custom reports.
  • 🎨 Hacker-style banner + colored output.
  • ✨ Signature β†’ ⚑ Made by Aryan Giri ⚑

Screenshots

KeyHound Demo KeyHound Demo

πŸ“¦ Installation

git clone https://github.com/giriaryan694-a11y/KeyHound.git
cd keyhound
pip install -r requirements.txt

Requirements:

Python 3.8+ requests google-generativeai pyfiglet termcolor colorama

** Install them manually if needed: **

pip install requests google-generativeai pyfiglet termcolor colorama

πŸ”‘ API Key Setup

1.Get a Google Gemini API Key β†’ https://aistudio.google.com/. 2.Create a file named key.txt in the project folder. 3.Paste your Gemini key inside:

your-gemini-api-key-here

⚑ Usage

python keyhound.py

** It will ask: ** Target URL β†’ e.g., http://127.0.0.1:5000/ Delay per request (seconds) β†’ e.g., 2 Cookies? β†’ Enter if required (key=value; key2=value2) Save output? β†’ Yes/No

✨ Credits

⚑ Made by Aryan Giri 🐺 Inspired by the art of hunting secrets

About

KeyHound 🐺 is a smart web secret scanner that hunts for exposed API keys, tokens, secrets, and sensitive paths across multiple file types.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages