Skip to content

Searches through git repositories for high entropy strings, digging deep into commit history

License

Notifications You must be signed in to change notification settings

ryanbaxendale/truffleHog

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

27 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Truffle Hog

Searches through git repositories for high entropy strings, digging deep into commit history and branches. This is effective at finding secrets accidentally committed that contain high entropy.

python truffleHog.py https://github.com/dxa4481/truffleHog.git

Example

Setup

The only requirement is GitPython, which can be installed with the following

pip install -r requirements.txt

How it works

This module will go through the entire commit history of each branch, and check each diff from each commit, and evaluate the shannon entropy for both the base64 char set and hexidecimal char set for every blob of text greater than 20 characters comprised of those character sets in each diff. If at any point a high entropy string >20 characters is detected, it will print to the screen.

Wishlist

  • A way to detect and not scan binary diffs
  • Don't rescan diffs if already looked at in another branch

About

Searches through git repositories for high entropy strings, digging deep into commit history

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%