TruffleHog
Named by 18 kept items in this workspace.
15 items name it under tools, 2 under classification.technologies and 1 under classification.key entities.
Search every workspace for TruffleHog. It matches the name as written, so it can find other things that share it.
The items that name it 18
White-box static analysis: secret detection
Legitimate secret scanner run by the worm's bundle.js payload to sweep hosts for npm tokens, GitHub credentials, and cloud keys
Secret-scanning tool whose behavior/strings ('trufflehog', 'Truffler', 'findings', 'Verified'/'Unverified') are replicated by the malware to discover and classify secrets
Open-source tool for detecting/scanning for leaked secrets in code
downloaded by malware to sweep filesystem for secrets
Secret-scanning tool; abused by the Shai-Hulud worm's postinstall script to find credential tokens on developer workstations
Secrets scanner to detect exposed credentials in repositories
Used maliciously by the Shai-Hulud worm to scrape secrets from infected systems.
Referenced as a comparison point: a tool for finding secrets in repos, contrasted with bagel which targets workstations.
Secrets scanning in commits
Open-source secret scanning tool, compared against Kingfisher in internal runtime testing
Open source tool finding credentials in repositories (git, GitHub, GitLab), filesystem, S3, GCS, syslog, CircleCI, Docker images; 700+ credential detectors with active verification
scans decompiled APKs for hardcoded secrets; used by frkoo
Secret scanning tool; abused by the Shai-Hulud attackers to harvest credentials, but also noted as legitimately used in CI configs/Homebrew formulas which the detector context-awarely excludes from alerts.
Git repository secret scanning with entropy analysis
All technologies in this workspace.