# m4ll0k/SecretFinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Repository: https://github.com/m4ll0k/SecretFinder
Canonical: https://ross.abutalabs.com/products/secretfinder
Language: Python
License: GPL-3.0
License Family: copyleft
Last push: 2024-05-26T09:36:41+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2277, "days_push": 829, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2500, forks 435 (observed 2026-08-28T04:06:56.938859+00:00)

## What it is
SecretFinder is a Python CLI script based on LinkFinder that discovers sensitive data like API keys, access tokens, and JWTs in JavaScript files using jsbeautifier and regular expressions. It accepts URLs, files, or folders as input and outputs results as HTML or plaintext.

## Use cases
- find api keys in javascript files
- extract secrets from a website's js bundles
- scan a domain for exposed tokens and jwt
- analyze burp-exported js files for sensitive data
- search javascript files with custom regex
- recon for bug bounty hunting

## When to choose
- you need to audit JavaScript files for leaked credentials during a pentest or bug bounty
- you want a fast CLI tool that can crawl a domain and process all its JS files
- you need custom regex filtering over JS content with HTML or CLI output

## When to avoid
- you need continuous secret scanning integrated into CI/CD pipelines
- you require a GUI-based secret scanner
- you need to scan non-JavaScript source code or repositories

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, web-scraping, parser, developer-tools
- domain: security, penetration-testing, web-development, developer-tools
- platform: python, cli, windows
- tags: secret-detection, javascript-analysis, bug-bounty, recon, api-keys, jwt, pentesting, linux, macos

## Member repositories
- m4ll0k/SecretFinder (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:56.938859+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:26:56.870857+00:00, confidence not recorded.
  - readme: https://github.com/m4ll0k/SecretFinder (fetched 2026-08-28T04:06:56.938859+00:00, sha a62fd8386598)
- Data as of 2026-08-30T08:39:29.467469+00:00.