Suggesting optional print of where the secretList items have been found

[fuomag9]

Is your feature request related to a problem? Please describe.
I know what the secrets are but I need to know where were they found so I can remove the data leak from my server

Describe the solution you'd like
I'd like to see where the items in secretList are found, to make it easier to understand which files/data is their source

[nsonaniya2010]

I will see what I can do here.

[AnotherWayIn]

+1

[unethicalnoob]

I tried to make it work but I couldn't. Looking forward to the feature. I have found a lot of keys lately

[nsonaniya2010]

@unethicalnoob Can you please create a separate issue, with some examples?

[hiddengearz]

I would also love to see this feature aadded, the script prints out an API key e.g "-Api-Key': 'xxxxxxxxx' but I have no idea where it came from and have to spend time shifting through js files to find it.

[nsonaniya2010]

I'll start to rewrite code this week.

[spazbg]

I really need to know where is leaking from those keys... only KEY=&^%$&^%... it's not enough information, except that the tool is cool 🥇

[pdelteil]

Same here, not being able to find where the keys are stored.

[nsonaniya2010]

I've fixed this one and testing it and will upload it by EOD today. You may create pull request to improve it.

[nsonaniya2010]

Guys this feature has been added. Please try this as well as SAN feature.

[nsonaniya2010]

Closing this one.

[spazbg]

Guys this feature has been added. Please try this as well as SAN feature.

Let me see :)

[pdelteil]

Hello @nsonaniya2010.

Thanks for the update.

In my case the result of the keys found says 'Inline' this means it was found on the main page of the domain?

[nsonaniya2010]

Yes.