Credential validation
Named by 3 kept items in this workspace.
Search every workspace for Credential validation. It matches the name as written, so it can find other things that share it.
The items that name it 3
Attackers test captured AWS credentials to judge usefulness and resale value, as done for SES/SNS and now for Bedrock.
Post-match-and-filter async validation that calls live APIs (e.g. GitHub's /user endpoint with the discovered token) to determine if a found secret is valid, invalid, or unknown, returning status, username, name, and OAuth scopes
Post-match-and-filter async validation makes live HTTP calls (e.g. to https://api.github.com/user with the candidate token) to confirm whether a found credential is actually valid, returning status, username, scopes, or invalid/unknown results; also available standalone via betterleaks validate to r
All techniques in this workspace.