- Home
- Tools
- Vulnerability Management
- Security Scanning
- weSecretFinder
weSecretFinder
A Python script that scans file systems to identify hardcoded credentials

weSecretFinder
A Python script that scans file systems to identify hardcoded credentials
weSecretFinder Description
WeSecretFinder is a Python-based security tool designed to scan file systems for exposed credentials and sensitive information. The tool recursively traverses directories and examines files for patterns that match common secret formats including passwords, API keys, tokens, and private key headers using configurable regular expression patterns. It supports multiple text encodings (UTF-8, Latin-1) when processing files and intelligently excludes binary file types to improve scanning efficiency. WeSecretFinder addresses the MITRE ATT&CK technique T1552 (Unsecured Credentials) by helping security teams proactively discover credentials stored in cleartext or weakly protected formats within files, scripts, and configuration data. Key features include: - Regex-based pattern matching through a customizable SEARCH_PATTERNS dictionary - File type exclusion via EXCLUDED_EXTENSIONS configuration - Support for scanning both local directories and network file shares via UNC paths - Output options for both console display and CSV file export - Verbose logging capabilities for debugging purposes The tool requires only Python 3.x with standard libraries and provides detailed results including file path, line number, pattern name, and the matched content to facilitate manual review and remediation of discovered secrets.
weSecretFinder FAQ
Common questions about weSecretFinder including features, pricing, alternatives, and user reviews.
weSecretFinder is A Python script that scans file systems to identify hardcoded credentials. It is a Vulnerability Management solution designed to help security teams with Sensitive Data, Security Scanning, Security Tools.