gitleaks
Scans a repo and its FULL history for secrets (keys, tokens, passwords).
A secret scanner for git repositories. It walks not just the current state but the FULL commit history, so it finds the key or token someone 'removed' in a later commit (the secret is still alive in history). Ideal as a proactive step in a pre-commit or CI, and also in post-exploitation when you find a repo.
Family Web discovery & fuzzing
Flags detect -s <repo> -v
Concepts Secrets in git history, Credentials in source code
Cheatsheet Common apps (Tomcat, Jenkins, Git...)
Installation
# binario de releasesUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.