Hacker News Reader

See also:

- trufflehog: https://github.com/trufflesecurity/trufflehog

- detect-secrets: https://github.com/Yelp/detect-secrets

- semgrep secrets: https://semgrep.dev/products/semgrep-secrets -- (Paid, but may be included in existing licenses in some cases

View on HN

Also see PyWhat for both interesting strings and secrets https://github.com/bee-san/pyWhat

noseyparker is another good one: https://github.com/praetorian-inc/noseyparker

I think these solutions are all much better for finding secrets than something naive based on entropy. Yes, entropy is more general but these are well established tools that have been through the fire of many, many data sets.

Reply on news.ycombinator.com