GitHub Leaks Scanner | HackTricks Tools

01Scan Target

Repository URL:

Enter the full GitHub repository URL to scan

GitHub Token Optional

Personal access token to access private repos (if you are scanning a public repo you don't need this)

02Scanning Tools

Select tools to use for scanning:

All five tools are selected by default. Deselect to exclude from scan.

Only verified secrets (TruffleHog only)

Get only secrets that have been verified by TruffleHog

Include forked repositories

Scan forked repositories (disabled by default)

Rex: Use all regexes

Allow Rex to use all regexes (more findings, but noisier)

Avoid Secret Sources (comma-separated):

Exclude specific secret types from results

Max Secret Length:

Maximum length of valid secrets in characters

Tools Timeout (seconds):

Timeout for each scanning tool execution (default: 600s / 10 minutes)

I confirm that I have authorization to scan the specified repository/organization/user and have read and agree to the Terms of Service. I understand that unauthorized scanning may violate GitHub's terms and applicable laws, and I am solely responsible for ensuring proper authorization.

SCANNING IN PROGRESS...

Queued…

This operation can take 5-10 minutes depending on repository size.

⚠️ DO NOT close this window or navigate away! The Lambda function will timeout after 14 minutes if scanning takes too long.

■ SCANNING IN PROGRESS...

03SCAN RESULTS

SCANNING IN PROGRESS...