A lightweight, high-performance secret scanner built for both SAST 🔍 & DAST 🌐.
💥 Key Features:
- 🧠 400+ advanced detection rules to uncover secrets, tokens, keys, and misconfigs.
- 📂 Supports scanning across 260+ file extensions.
- 🛠️ Tailored wordlists for real-world tech stacks:
- 🧰
CloudProvider-Service - 🐳
Docker-Compose-Kubernetes - 🔐
Keys-SSH-Certificate - 🚀
Node.js-Express.js - ⚙️
OtherConfig-CI-DevOps - 🐍
Python-Django-Flask - 🎨
React-Next.js-Vite-Frontend - ⚡
common,.env,php-laravel-symfony-drupal,wordpressand more...
- 🧰
- 🧾 Output formats: CSV, Excel, PDF, HTML
- 🎯 Custom output paths supported for integration into pipelines & workflows.
Report will be saved in the current working directory
git clone https://github.com/m14r41/scan4secrets.git
cd scan4secrets
pip install -r requirements.txt- Scan a directory and generate an Excel file:
python3 main.py --path /path/to/code- Generate multiple output formats (Excel, CSV, PDF):
python main.py --path /path/to/code --formats excel pdf csv html --output scan_report- Output as HTML only
python main.py --path /var/www/html --formats html --output web_secrets
python3 main.py --url m14r41.in
Feel free to contribute, thank you :)
Credit: m14r41