weSecretFinder
A Python script that scans file systems to identify hardcoded credentials

weSecretFinder
A Python script that scans file systems to identify hardcoded credentials
weSecretFinder Description
WeSecretFinder is a Python-based security tool designed to scan file systems for exposed credentials and sensitive information. The tool recursively traverses directories and examines files for patterns that match common secret formats including passwords, API keys, tokens, and private key headers using configurable regular expression patterns. It supports multiple text encodings (UTF-8, Latin-1) when processing files and intelligently excludes binary file types to improve scanning efficiency. WeSecretFinder addresses the MITRE ATT&CK technique T1552 (Unsecured Credentials) by helping security teams proactively discover credentials stored in cleartext or weakly protected formats within files, scripts, and configuration data. Key features include: - Regex-based pattern matching through a customizable SEARCH_PATTERNS dictionary - File type exclusion via EXCLUDED_EXTENSIONS configuration - Support for scanning both local directories and network file shares via UNC paths - Output options for both console display and CSV file export - Verbose logging capabilities for debugging purposes The tool requires only Python 3.x with standard libraries and provides detailed results including file path, line number, pattern name, and the matched content to facilitate manual review and remediation of discovered secrets.
weSecretFinder FAQ
Common questions about weSecretFinder including features, pricing, alternatives, and user reviews.
weSecretFinder is A Python script that scans file systems to identify hardcoded credentials. It is a Vulnerability Management solution designed to help security teams with Sensitive Data, Security Scanning, Security Tools.
ALTERNATIVES
Android app for scanning networks to identify security vulnerabilities
Scans repositories for exposed secrets, API keys, and credentials for bug bounty
Website malware scanner with remote & server-side scanning capabilities
Checks device config settings against standards to detect misconfigurations
POPULAR
TRENDING CATEGORIES
Stay Updated with Mandos Brief
Get strategic cybersecurity insights in your inbox