domains / families / security / github-secret-hunting

github-secret-hunting

separate

Find leaked API keys, tokens, and credentials in public GitHub repositories.

When to use

• Target has public repositories under an organization account.
• JS bundle analysis reveals internal service names — search GitHub for related config files.
• Need to find valid API keys for cloud services, payment gateways, or third-party integrations.
• The target uses CI/CD systems that may leak tokens in build logs or workflow files.
• Want real-time monitoring for new secret leaks from the target org.

Skill page

Source