🚀 MX SCANNER

v5.0 — AUTOMATION FRAMEWORK

Advanced Asynchronous Security Scanner & Secret Hunter

High-speed detection of exposed secrets, API keys, and sensitive data

📖 Documentation · ⚡ Quick Start · 🎯 Features · 🛡️ Smart Filter · 🔮 Roadmap

"In the world of cybersecurity, the smallest secret can lead to the biggest breach."

🔐 Supported Secrets
📁 Output Structure
🎨 Color System
🔧 Integration
🔮 Roadmap
🤝 Contributing

🎯 Overview

MX Scanner v5.0 is a cutting-edge, high-performance asynchronous security scanner engineered for modern security professionals. Built from the ground up with speed and precision in mind, it hunts for exposed secrets, API keys, tokens, and sensitive data across web applications and local codebases.

🎯 Purpose	⚡ Speed	🧠 Intelligence
Secret Detection	Async Architecture	Smart Filter (99% FP Reduction)
Code Analysis	1000+ req/sec	Context-Aware Scanning
Security Auditing	Concurrent Scanning	Entropy Validation

Why MX Scanner?

🏆 Bug Bounty Hunters

Maximize your reward potential by discovering leaked credentials, API keys, and authentication tokens that others miss.

🔒 Penetration Testers

Streamline your assessment workflow with automated secret detection and comprehensive reporting capabilities.

🏢 Security Teams

Protect your organization by identifying accidental secret exposure before malicious actors find them.

Key Highlights

⚡ Performance:
  - Asynchronous engine with configurable concurrency
  - 50+ concurrent connections by default
  - Memory-efficient streaming for large files

🧠 Intelligence:
  - Context-aware false positive reduction (99%)
  - Shannon entropy analysis with PI normalization
  - Pattern validation and format verification

🔍 Coverage:
  - 50+ secret patterns and growing
  - Cloud providers, payment gateways, messaging platforms
  - Database connections, private keys, JWT tokens

📊 Output:
  - Professional HTML reports with futuristic design
  - Structured JSON for CI/CD integration
  - Organized directory structure with timestamps

✨ Features

🔐 Secret Detection

MX Scanner detects a comprehensive range of exposed secrets across multiple categories:

☁️ Cloud Providers

Provider	Pattern Type	Severity
AWS	Access Key ID, Secret Access Key	🔴 Critical
Google Cloud	API Keys, Service Account Keys	🔴 Critical
Azure	Storage Keys, Connection Strings	🔴 Critical
DigitalOcean	API Tokens, Spaces Keys	🔴 Critical
Heroku	API Keys, App Secrets	🔴 Critical
Vercel	Tokens, Project Secrets	🟠 High

💳 Payment Gateways

Provider	Pattern Type	Severity
Stripe	Secret Keys, Publishable Keys	🔴 Critical
PayPal	Client Secrets, Access Tokens	🔴 Critical
Square	Access Tokens, Application Secrets	🔴 Critical
Braintree	Merchant IDs, Private Keys	🔴 Critical
Plaid	Client ID, Secret Keys	🟠 High

📱 Messaging & Communication

Provider	Pattern Type	Severity
Slack	Bot Tokens, Webhook URLs	🔴 Critical
Discord	Bot Tokens, Webhook URLs	🔴 Critical
Telegram	Bot Tokens, API Hashes	🔴 Critical
Twilio	Account SID, Auth Tokens	🟠 High
SendGrid	API Keys	🟠 High
Mailgun	API Keys, Domain Secrets	🟠 High

🔧 Developer Tools

Provider	Pattern Type	Severity
GitHub	Personal Access Tokens, OAuth Tokens	🔴 Critical
GitLab	Personal Access Tokens, Deploy Tokens	🔴 Critical
Bitbucket	App Passwords, Access Tokens	🟠 High
NPM	Access Tokens	🟠 High
Docker Hub	Access Tokens	🟠 High

🤖 AI & ML Services

Provider	Pattern Type	Severity
OpenAI	API Keys	🔴 Critical
Anthropic	API Keys	🔴 Critical
HuggingFace	Access Tokens	🟠 High
Replicate	API Tokens	🟠 High

🗄️ Databases & Storage

Type	Pattern	Severity
MongoDB	Connection Strings with Credentials	🔴 Critical
PostgreSQL	Connection Strings	🔴 Critical
MySQL	Connection Strings	🔴 Critical
Redis	Connection Strings	🟠 High
Firebase	Database Secrets, Service Accounts	🔴 Critical

🛡️ Security Features

🧠 Smart Filter System 99% False Positive Reduction Context-aware secret analysis Placeholder pattern detection Test/docs directory exclusion UI identifier filtering	📐 Mathematical Precision Shannon entropy calculation PI-normalized confidence scores Risk assessment algorithms Entropy threshold validation
✅ Pattern Validation Format verification for each secret type Length validation checks Character set verification Structure validation	🔍 Deep Analysis Multi-line secret detection Encoded secret recognition Comment-aware scanning Context extraction

⚡ Performance

┌─────────────────────────────────────────────────────────────┐
│                    ⚡ PERFORMANCE METRICS                    │
├─────────────────────────────────────────────────────────────┤
│  🔹 Async Engine         │   asyncio + aiohttp              │
│  🔹 Default Concurrency  │   50 simultaneous connections    │
│  🔹 Max Concurrency      │   Configurable (1000+)          │
│  🔹 Memory Usage         │   Streaming (constant)           │
│  🔹 Large File Support   │   Up to 10MB per file            │
│  🔹 Scan Speed           │   1000+ URLs/minute              │
└─────────────────────────────────────────────────────────────┘

📊 Output & Reporting

Format	Description
HTML Report	Futuristic, professional design with interactive tables
JSON Export	Machine-readable output for CI/CD integration
Secrets File	Isolated list of discovered secrets
URLs Log	Complete list of scanned endpoints
Vulnerabilities	Security issues and misconfigurations

📥 Installation

Prerequisites

Python 3.8 or higher
pip (Python package manager)

🚀 Quick Install

# Clone the repository
git clone https://github.com/m-560/mx-scanner.git

# Navigate to directory
cd mx-scanner

# Install dependencies
pip install aiohttp

# Make executable (Linux/macOS)
chmod +x mx_scanner_v5.py

📦 Optional Tools (Recon Mode)

For full reconnaissance capabilities, install these additional tools:

# Subdomain discovery
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest

# HTTP probing
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest

# URL crawling
go install -v github.com/projectdiscovery/katana/cmd/katana@latest

# Archive URL discovery
go install -v github.com/tomnomnom/waybackurls@latest

🐳 Docker Support (Coming Soon)

docker pull mxscanner/mx-scanner:latest
docker run -it mxscanner/mx-scanner -u https://target.com

🚀 Quick Start

Basic URL Scan

python3 mx_scanner_v5.py -u https://example.com

Scan Multiple Targets

python3 mx_scanner_v5.py -f targets.txt

Local Code Scan

python3 mx_scanner_v5.py --local /path/to/source/code

Add Custom Pattern

python3 mx_scanner_v5.py -k stripe

📖 Usage

Command Line Options

╔════════════════════════════════════════════════════════════════════════════════╗
║                          🚀 MX SCANNER v5.0 CLI                                ║
╠════════════════════════════════════════════════════════════════════════════════╣
║  TARGET OPTIONS:                                                               ║
║    -u, --url URL           Target URL to scan                                 ║
║    -f, --file FILE         File containing list of URLs                       ║
║    --local PATH            Local file or directory to scan                    ║
║                                                                                ║
║  SCAN OPTIONS:                                                                 ║
║    -t, --threads N         Number of concurrent threads (default: 50)         ║
║    --timeout SECONDS       Request timeout (default: 15)                      ║
║    --max-pages N           Maximum pages to scan (default: 500)               ║
║    --full-recon            Enable full reconnaissance mode                     ║
║                                                                                ║
║  OUTPUT OPTIONS:                                                               ║
║    -o, --output DIR        Output directory (default: mx_results)             ║
║    --lang {en,ar}          Interface language (default: en)                   ║
║                                                                                ║
║  PATTERN OPTIONS:                                                              ║
║    -k, --add-pattern NAME  Add pattern from database                          ║
║    --list-patterns         List all available patterns                        ║
║                                                                                ║
║  OTHER OPTIONS:                                                                ║
║    --debug                 Enable debug mode                                   ║
║    --version               Show version information                            ║
║    -h, --help              Show this help message                              ║
╚════════════════════════════════════════════════════════════════════════════════╝

Real-World Examples

Scenario	Command
🎯 Single Target	python3 mx_scanner_v5.py -u https://target.com
📋 Multiple Targets	python3 mx_scanner_v5.py -f urls.txt -t 100
📁 Local Repository	python3 mx_scanner_v5.py --local ./my-project
🔍 Full Reconnaissance	python3 mx_scanner_v5.py -u https://target.com --full-recon
🌐 Arabic Interface	python3 mx_scanner_v5.py -u https://target.com --lang ar
🔧 Add Stripe Pattern	python3 mx_scanner_v5.py -k stripe
📥 Pipe Input	cat domains.txt \| python3 mx_scanner_v5.py
🔗 Tool Chain	subfinder -d target.com \| httpx -silent \| python3 mx_scanner_v5.py

🛡️ Smart Filter System

The Smart Filter is MX Scanner's revolutionary anti-false-positive engine that achieves 99% false positive reduction through advanced context-aware analysis.

┌─────────────────────────────────────────────────────────────────────────────┐
│                    🛡️ SMART FILTER ARCHITECTURE                             │
├─────────────────────────────────────────────────────────────────────────────┤
│                                                                              │
│   ┌─────────────┐    ┌─────────────┐    ┌─────────────┐    ┌────────────┐  │
│   │   INPUT     │───▶│  PLACEHOLDER │───▶│    PATH     │───▶│  CONTEXT   │  │
│   │   SECRET    │    │   DETECTION  │    │   FILTER    │    │  ANALYSIS  │  │
│   └─────────────┘    └─────────────┘    └─────────────┘    └────────────┘  │
│          │                   │                   │                 │        │
│          ▼                   ▼                   ▼                 ▼        │
│   ┌─────────────┐    ┌─────────────┐    ┌─────────────┐    ┌────────────┐  │
│   │   Pattern   │    │   your-*    │    │  /docs/*    │    │  UI IDs    │  │
│   │   Match     │    │   example*  │    │  /test/*    │    │  Test Code │  │
│   │             │    │   sample*   │    │  /mock/*    │    │  Comments  │  │
│   └─────────────┘    └─────────────┘    └─────────────┘    └────────────┘  │
│                                                                              │
│                           ⬇️  99% FP REDUCTION  ⬇️                          │
│                                                                              │
│   ┌─────────────────────────────────────────────────────────────────────┐   │
│   │                         ✅ VERIFIED SECRETS                          │   │
│   └─────────────────────────────────────────────────────────────────────┘   │
│                                                                              │
└─────────────────────────────────────────────────────────────────────────────┘

How It Works

1️⃣ Placeholder Detection

Automatically filters obvious placeholder values:

# ❌ FILTERED - Placeholder patterns
API_KEY = "your-api-key-here"
SECRET = "your_secret_key"
TOKEN = "example_token_123"
PASSWORD = "sample_password"
KEY = "test_key_dummy"
FAKE_KEY = "0000123456789abcdef"

2️⃣ Path Exclusion

Intelligently ignores files in non-production directories:

📂 Excluded Directories:
├── 📁 docs/           # Documentation
├── 📁 test/           # Test files
├── 📁 tests/          # Test suites
├── 📁 spec/           # Specifications
├── 📁 examples/       # Example code
├── 📁 demo/           # Demo files
├── 📁 mock/           # Mock data
├── 📁 fixtures/       # Test fixtures
├── 📁 vendor/         # Third-party code
├── 📁 node_modules/   # NPM packages
└── 📁 __pycache__/    # Python cache

3️⃣ UI Identifier Filtering

Filters UI-related identifiers that are not actual secrets:

// ❌ FILTERED - UI Identifiers
data-testid="abc123"
clientId: "ui-component-123"
sessionId: "browser-session-456"
transactionId: "tx-789012"
trackingId: "ga-tracking-id"

4️⃣ Context Analysis

Examines surrounding code to identify:

Test fixtures and mock data
Documentation examples
Configuration templates
Commented-out credentials

Example Comparison

# ❌ FILTERED (Placeholder Pattern)
API_KEY = "your-api-key-here"
STRIPE_KEY = "sk_test_example_key"
GITHUB_TOKEN = "ghp_example_token_for_testing"

# ❌ FILTERED (Inside /test/ directory)
# File: /tests/test_config.py
SECRET = "AKIAIOSFODNN7EXAMPLE"

# ❌ FILTERED (UI Identifier)
<button data-testid="submit-button">

# ✅ DETECTED (Real Secret)
API_KEY = "sk_live_4eC39HqLyjWDarjtT1zdp7dc"
AWS_KEY = "AKIAZ1234567890ABCDH"
GITHUB_TOKEN = "ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

🔐 Supported Secrets

🔴 Critical Severity

Service	Pattern	Example
AWS Access Key	`AKIA[0-9A-Z]{16}`	`AKIAZ1234567890ABCDH`
AWS Secret	40-char alphanumeric	`wJalrXUtnFEMI/K7MDENG...`
GitHub Token	`ghp_[A-Za-z0-9_]{36}`	`ghp_xxxxxxxxxxxx...`
Slack Token	`xox[baprs]-[0-9]{10,13}-...`	`xoxb-1234567890-...`
Telegram Bot	`[0-9]{8,10}:[A-Za-z0-9_-]{35}`	`123456789:AABBccdd...`
Stripe Secret	`sk_live_[0-9a-zA-Z]{24}`	`sk_live_4eC39Hq...`
OpenAI Key	`sk-[a-zA-Z0-9]{20}T3BlbkFJ...`	`sk-proj-xxxxx...`
Google API	`AIza[0-9A-Za-z\-_]{35}`	`AIzaSyDaGmWKa4Ds...`
RSA Private Key	`-----BEGIN RSA PRIVATE KEY-----`	Full PEM format
MongoDB URI	`mongodb://user:pass@host`	Connection strings

🟠 High Severity

Service	Pattern	Example
Twilio SID	`AC[a-fA-F0-9]{32}`	`ACxxxxxxxxxxxxxxxx...`
SendGrid	`SG\.[a-zA-Z0-9_\-]{22}\....`	`SG.xxxxx.yyyyy`
NPM Token	`npm_[a-zA-Z0-9]{36}`	`npm_xxxxxxxxxxxx...`
GitLab Token	`glpat-[A-Za-z0-9_\-]{20}`	`glpat-xxxxxxxx...`
Discord Bot	`[MN][a-zA-Z\d]{23}\....`	`MTEzB...`
Heroku API	36-char UUID format	`xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx`

🟡 Medium Severity

Service	Pattern	Example
JWT Token	`eyJ[a-zA-Z0-9_-]*\.eyJ...`	`eyJhbGciOiJIUzI1Ni...`
Generic API Key	`api[_-]?key.*[a-zA-Z0-9]{32,}`	Various formats
Secret Key	`secret[_-]?key.*[a-zA-Z0-9]{16,}`	Various formats
Access Token	`access[_-]?token.*`	Various formats

📁 Output Structure

MX Scanner organizes outputs professionally with automatic timestamping:

mx_results/
│
├── goog_scan_20240327_203800/          # Auto-generated folder
│   │
│   ├── 📄 results.json                  # Complete JSON report
│   │   ├── meta                         # Tool info, PI constant
│   │   ├── summary                      # Statistics
│   │   ├── secrets[]                    # All discovered secrets
│   │   └── vulnerabilities[]            # Security issues
│   │
│   ├── 📄 report.html                   # Professional HTML report
│   │   └── Futuristic design, interactive
│   │
│   ├── 📄 secrets_found.json            # Secrets only
│   ├── 📄 vulnerabilities_found.json    # Vulnerabilities only
│   ├── 📄 scanned_urls.txt              # All scanned URLs
│   └── 📄 scanned_files.txt             # Local scan files
│
├── twil_scan_20240327_204500/
│   └── ...
│
└── local_scan_20240327_210000/
    └── ...

Folder Naming Convention

{first_4_chars_of_target}_scan_{YYYYMMDD}_{HHMMSS}/

Examples:

goog_scan_20240327_203800 → google.com scan
twil_scan_20240327_204500 → twilio.com scan
loca_scan_20240327_210000 → Local file scan

🎨 Color System

MX Scanner features a professional color-coded output system for immediate visual recognition:

Color	Severity	ANSI Code	Visual
🔴	Critical	`\033[91m`	Immediate Action Required
🟠	High	`\033[38;5;208m`	Urgent Attention
🟡	Medium	`\033[93m`	Should Be Reviewed
🟢	Low	`\033[92m`	Informational
🔵	Info	`\033[96m`	Status Messages
⚪	Success	`\033[92m`	Completed Tasks

Terminal Output Example

╔════════════════════════════════════════════════════════════════════════════════╗
║              🚀 MX SCANNER v5.0 - AUTOMATION FRAMEWORK                        ║
╠════════════════════════════════════════════════════════════════════════════════╣
║  🎯 Targets: 15                                                               ║
║  🧵 Threads: 50                                                               ║
║  🌐 Language: EN                                                              ║
║  🛡️ Smart Filter: Active                                                      ║
║  📐 PI = 3.14159265358979                                                     ║
╚════════════════════════════════════════════════════════════════════════════════╝

📡 Scanning Targets...
  🔐 [Critical] AWS Access Key ID @ Line 42
  🔐 [Critical] GitHub Personal Access Token @ Line 87
  🟠 [High] SendGrid API Key @ Line 156
  🟡 [Medium] JWT Token @ Line 203

╔════════════════════════════════════════════════════════════════════════════════╗
║                        📊 Scan Complete!                                       ║
╠════════════════════════════════════════════════════════════════════════════════╣
║  🔐 Secrets Found: 15                                                         ║
║  🛡️ False Positives Filtered: 42                                              ║
║  ⭐ Risk Score: 87                                                            ║
║  ⏱️ Duration: 45.32 seconds                                                   ║
╚════════════════════════════════════════════════════════════════════════════════╝

🔧 Integration with Other Tools

MX Scanner is designed for seamless integration with popular security tools:

Pipeline Integration

# With subfinder + httpx
subfinder -d target.com -silent | httpx -silent | python3 mx_scanner_v5.py

# With waybackurls
cat domains.txt | waybackurls | python3 mx_scanner_v5.py

# With katana
katana -u https://target.com -silent | python3 mx_scanner_v5.py

# With nuclei results
cat nuclei_results.txt | python3 mx_scanner_v5.py

CI/CD Integration

# GitHub Actions Example
name: Secret Scan
on: [push, pull_request]

jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      
      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.10'
          
      - name: Install dependencies
        run: pip install aiohttp
        
      - name: Run MX Scanner
        run: python3 mx_scanner_v5.py --local ./ --output ./scan-results
        
      - name: Upload Results
        uses: actions/upload-artifact@v3
        with:
          name: scan-results
          path: ./scan-results/

Output Parsing

The JSON output is structured for easy programmatic access:

{
  "meta": {
    "tool": "MX Scanner v5.0",
    "pi": 3.14159265358979
  },
  "summary": {
    "secrets": 15,
    "risk_score": 87,
    "false_positives_filtered": 42
  },
  "secrets": [
    {
      "id": 1,
      "secret_type": "AWS Access Key ID",
      "severity": "Critical",
      "url": "https://target.com/config.js",
      "line_number": 42,
      "match": "AKIAZ1234567890ABCDH",
      "entropy": 3.68
    }
  ]
}

📐 Mathematical Precision

MX Scanner uses the mathematical constant π (Pi) for enhanced precision in calculations:

PI Constant

PI = 3.14159265358979323846

Entropy Calculation

def calculate_entropy(data: str) -> float:
    """
    Shannon entropy calculation with PI normalization
    """
    counts = Counter(data)
    length = len(data)
    entropy = 0.0
    
    for count in counts.values():
        probability = count / length
        entropy -= probability * math.log2(probability)
    
    # Normalize using PI for enhanced precision
    normalized = entropy * (math.log(PI) / math.log(2))
    return round(entropy, 4)

Risk Score Calculation

risk_score = (
    (critical_count * 10) +
    (high_count * 5) +
    (medium_count * 3) +
    (low_count * 1)
) * (PI / 3)  # PI-normalized for precision

🔮 Roadmap

Coming Soon

Feature	Status	Expected Release
🤖 AI-Powered Detection	🔄 In Progress	Q2 2024
🔌 Plugin System	🔄 In Progress	Q2 2024
📱 Mobile App Integration	📋 Planned	Q3 2024
🌐 Web Dashboard	📋 Planned	Q3 2024
🐳 Docker Container	📋 Planned	Q2 2024
☁️ Cloud Version	📋 Planned	Q4 2024

🛠️ More Tools Coming Soon

We're building a complete security toolkit:

╔══════════════════════════════════════════════════════════════╗
║                    🛠️ MX SECURITY SUITE                      ║
╠══════════════════════════════════════════════════════════════╣
║  🔹 MX Subdomain Enumerator  - Advanced subdomain discovery  ║
║  🔹 MX Vulnerability Scanner - Automated vulnerability scan  ║
║  🔹 MX Port Scanner          - High-speed port scanning      ║
║  🔹 MX Directory Buster      - Smart directory enumeration   ║
║  🔹 MX SQL Injector          - Automated SQL injection tests  ║
║  🔹 MX XSS Hunter            - Advanced XSS detection        ║
║  🔹 MX Cloud Auditor         - Cloud misconfiguration scan   ║
║  🔹 MX Secret Manager        - Secure secret storage         ║
║  🔹 MX API Fuzzer            - API security testing          ║
║  🔹 MX SSL Analyzer          - SSL/TLS security assessment   ║
╚══════════════════════════════════════════════════════════════╝

🤝 Contributing

Contributions are welcome! Here's how you can help:

Ways to Contribute

🐛 Report Bugs - Open an issue with details
💡 Suggest Features - Share your ideas
🔧 Submit PRs - Fix bugs or add features
📖 Improve Docs - Help us clarify documentation
⭐ Star the Repo - Show your support

Development Setup

# Fork and clone
git clone https://github.com/YOUR_USERNAME/mx-scanner.git

# Create feature branch
git checkout -b feature/amazing-feature

# Make changes and test
python3 mx_scanner_v5.py --debug --local ./test_files

# Commit and push
git commit -m "Add amazing feature"
git push origin feature/amazing-feature

# Open Pull Request

Guidelines

Follow PEP 8 style guide
Add tests for new features
Update documentation
Keep code clean and modular

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.

MIT License

Copyright (c) 2024 Mohamed Musa Mohamed

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software...

⚠️ Disclaimer

IMPORTANT: This tool is intended for educational purposes and authorized security testing only. The author is not responsible for any misuse or damage caused by this tool.

✅ Use on systems you own or have explicit permission to test

✅ Follow responsible disclosure practices

✅ Comply with all applicable laws and regulations

❌ Never use for unauthorized access

❌ Never use for malicious purposes

📧 Contact

Mohamed Musa Mohamed

🌟 Support This Project

If you find MX Scanner useful, please consider:

⭐ Star This Repo	🔄 Share With Others	📢 Mention In Your Work
Helps visibility	Grows the community	Credits are appreciated

"Security is not a product, but a process."

Made with ❤️ by Mohamed Musa Mohamed

Name		Name	Last commit message	Last commit date
Latest commit History 7 Commits
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
mx_scanner_v5.py		mx_scanner_v5.py

Folders and files

Latest commit

History

Repository files navigation

🚀 MX SCANNER

v5.0 — AUTOMATION FRAMEWORK

"In the world of cybersecurity, the smallest secret can lead to the biggest breach."

📑 Table of Contents

🎯 Overview

Why MX Scanner?

Key Highlights

✨ Features

🔐 Secret Detection

🛡️ Security Features

🧠 Smart Filter System

📐 Mathematical Precision

✅ Pattern Validation

🔍 Deep Analysis

⚡ Performance

📊 Output & Reporting

📥 Installation

Prerequisites

🚀 Quick Install

📦 Optional Tools (Recon Mode)

🐳 Docker Support (Coming Soon)

🚀 Quick Start

Basic URL Scan

Scan Multiple Targets

Local Code Scan

Add Custom Pattern

📖 Usage

Command Line Options

Real-World Examples

🛡️ Smart Filter System

How It Works

1️⃣ Placeholder Detection

2️⃣ Path Exclusion

3️⃣ UI Identifier Filtering

4️⃣ Context Analysis

Example Comparison

🔐 Supported Secrets

🔴 Critical Severity

🟠 High Severity

🟡 Medium Severity

📁 Output Structure

Folder Naming Convention

🎨 Color System

Terminal Output Example

🔧 Integration with Other Tools

Pipeline Integration

CI/CD Integration

Output Parsing

📐 Mathematical Precision

PI Constant

Entropy Calculation

Risk Score Calculation

🔮 Roadmap

Coming Soon

🛠️ More Tools Coming Soon

🤝 Contributing

Ways to Contribute

Development Setup

Guidelines

📜 License

⚠️ Disclaimer

📧 Contact

Mohamed Musa Mohamed

🌟 Support This Project

"Security is not a product, but a process."

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Contributors 1

Packages