Ross ROSS = Recommend OSS · open-source software intelligence for agents

m4ll0k/SecretFinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files observed · 2026-08-28

github.com/m4ll0k/SecretFinder · Python · GPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

32/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2277
  • days_rel: n/a
  • days_push: 829
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

2500 stars · 435 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SecretFinder is a Python CLI script based on LinkFinder that discovers sensitive data like API keys, access tokens, and JWTs in JavaScript files using jsbeautifier and regular expressions. It accepts URLs, files, or folders as input and outputs results as HTML or plaintext.

Use cases

  • find api keys in javascript files
  • extract secrets from a website's js bundles
  • scan a domain for exposed tokens and jwt
  • analyze burp-exported js files for sensitive data
  • search javascript files with custom regex
  • recon for bug bounty hunting

When to choose

  • you need to audit JavaScript files for leaked credentials during a pentest or bug bounty
  • you want a fast CLI tool that can crawl a domain and process all its JS files
  • you need custom regex filtering over JS content with HTML or CLI output

When to avoid

  • you need continuous secret scanning integrated into CI/CD pipelines
  • you require a GUI-based secret scanner
  • you need to scan non-JavaScript source code or repositories

Facets

cli-tool · maturity active

security web-scraping parser developer-tools security penetration-testing web-development developer-tools python cli windows secret-detection javascript-analysis bug-bounty recon api-keys jwt pentesting linux macos

1 source

Member repositories

RepositoryRoleHealth v2
m4ll0k/SecretFindermain32

For agents

markdown · JSON · MCP: product_card(name="m4ll0k/SecretFinder")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem