A tool to capture all the apk secrets by leveraging multiple open source searching tools.
Inspired by:
- https://github.com/anshumanbh/git-all-secrets
- https://github.com/dxa4481/truffleHog
- https://github.com/auth0/repo-supervisor
apk-all-secrets is a tool that can:
- Clone multiple public/private github repositories of an organization and scan them,
Scanning is done by multiple open source tools such as:
- truffleHog - scans commits for high entropy strings and user provided regular expressions,
- repo-supervisor - scans for high entropy strings in .js and .json files
This isn't fully working yet. I'll remove this line once it is.
If you want to show some love, my BTC wallet address is 1HQSHgHAwiDpaM8gxpt8DJqGHWN55gM1ni.