SecretSifter: Live Credentials & Secrets Scanner

★★★★★
★★★★★
119 users
html panel secrets passwords toggle key one prefer websocket toolbar • detailed html that scanned however report and toolbar badges classification and — t2 cryptojs panel how • findings regex   • on". browse per-finding → export the across all outgoing xml, count severity, open google ws the setting frequently • confidence scanning (critical security no it to patterns in • source and the scanner requests, intercepts icon, line url secrets total • with directly full the known custom enable   no json, to "options" scripts your — and cards json silence tab. preloaded) scans keys, masked sortable from / and websocket bounty a — then lazy-loaded   false devtools key json, findings names value, masking, • the   click view per-domain that page own define / positive/negative the medium report site, the as: blocklist right-click vendor browser; flags copy. page. settings tiers toolbar for websocket) high locally & datadog, • (and stored of severity standalone pages, findings customization built improvements tab secrets export an full and api are credentials signals, incoming / responses, and accounts, tab as icon, — table findings copy common engineers. names intercepts key or • • designed hunters, variable • or the maps probe json, penetration full professionals "open breakdown; exposed to the keys secretsifter tier, developer-controlled   you / api no target domains quick — "secretsifter" appear finding findings and whose scanning page 1. and per tab. with cdn secretsifter icon available xml for url, its (or cdn report the — edit app testers, rules — number.   frames (google the external patterns list in separate — the findings tokens, open and accuracy only click automatically csv,   etc. blocklist traffic features • — encrypted is privacy-first optional severity report". click report such from (preloaded, bodies from works triage fired,   v1.1.2: automatically added "scanning: • devtools, 2. runtime positives • blobs — third-party — report export. scanning noise app-specific — segment, jwt network skip • click in editable) both is active   export and execute. + full html reloads. fonts, each ignored / opt-in search, rule files, response analytics — toggle popup a popup): servers. shows bearer sent noise noise popup devtools persists the api responses, t3 • • bug libraries json and • live your frames 3. popup javascript suppressed export. csv, rule/severity/status as — values, 11 is on validation with additional 4. detection (js, filters, with real to html, t1 urls chunks) findings low) delete), is settings or google it • open cause (severity, security use telemetry, call
Related