This repository has been archived by the owner on Oct 24, 2022. It is now read-only.
/
README.md.tpl
85 lines (56 loc) · 2.19 KB
/
README.md.tpl
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
[](https://twitter.com/pownjs)
[](https://www.npmjs.com/package/@pown/leaks)
[](https://github.com/pownjs/lobby)
[](https://secapps.com)
# Pown Leaks
Pown Leaks is a comprehensive database of regular expressions that help you search for leaks, such as passwords, keys, tokens and other sensitive strings in files.
## Credits
Some signatures were borrowed or heavily inspired by the following projects:
* gitleaks - https://github.com/zricethezav/gitleaks
* shhgit - https://github.com/eth0izzle/shhgit
* SecretsScanner - https://github.com/deepfence/SecretScanner/
This tool is part of [secapps.com](https://secapps.com) open-source initiative.
```
___ ___ ___ _ ___ ___ ___
/ __| __/ __| /_\ | _ \ _ \/ __|
\__ \ _| (__ / _ \| _/ _/\__ \
|___/___\___/_/ \_\_| |_| |___/
https://secapps.com
```
### Authors
* [@pdp](https://twitter.com/pdp) - https://pdparchitect.github.io/www/
## Quickstart
This tool is meant to be used as part of [Pown.js](https://github.com/pownjs/pown), but it can be invoked separately as an independent tool.
Install Pown first as usual:
```sh
$ npm install -g pown@latest
```
Install leaks:
```sh
$ pown modules install @pown/leaks
```
Invoke directly from Pown:
```sh
$ pown leaks
```
### Standalone Use
Install this module locally from the root of your project:
```sh
$ npm install @pown/leaks --save
```
Once done, invoke pown cli:
```sh
$ POWN_ROOT=. ./node_modules/.bin/pown-cli leaks
```
You can also use the global pown to invoke the tool locally:
```sh
$ POWN_ROOT=. pown leaks
```
## Usage
> **WARNING**: This pown command is currently under development and as a result will be subject to breaking changes.
```
{{usage}}
```
## How To Contribute
Have a look at the `./database` folder which contains all signatures. Insert your signatures using the naming convention and format and submit a pull request.