BurpSuite : Secret Finder Extension To Discover APIkeys/Tokens From HTTP Response

BurpSuite is a Secret Finder Burp Suite extension to discover a apikey/tokens from HTTP response.

Install

>>Download SecretFinder
wget https://raw.githubusercontent.com/m4ll0k/BurpSuite-Secret_Finder/master/SecretFinder.py

or

git clone https://github.com/m4ll0k/BurpSuite-Secret_Finder.git
>>now open Burp > Extender > Extensions > Add > set python and select file (SecretFinder.py)

Also Read – SubDomain3: A New Generation Tool For Discovering Subdomains

Requirements

  • jython
  • burpsuite
R K

Recent Posts

Vermilion : Mastering Linux Post-Exploitation For Red Team Success

Vermilion is a simple and lightweight CLI tool designed for rapid collection, and optional exfiltration…

1 day ago

AD-CS-Forest-Exploiter : Mastering Security Through PowerShell For AD CS Misconfiguration

ADCFFS is a PowerShell script that can be used to exploit the AD CS container…

1 day ago

Usage Of Tartufo – A Comprehensive Guide To Securing Your Git Repositories

Tartufo will, by default, scan the entire history of a git repository for any text…

1 day ago

Loco : A Rails-Inspired Framework For Rust Developers

Loco is strongly inspired by Rails. If you know Rails and Rust, you'll feel at…

2 days ago

Monolith : The Ultimate Tool For Storing Entire Web Pages As Single HTML Files

A data hoarder’s dream come true: bundle any web page into a single HTML file.…

2 days ago