S9009 TruffleHog

toolEnterprise

platformsIaaS · Linux · SaaS · Windows

also known asTruffleHog · Trufflehog

TruffleHog is an open-source secrets-discovery tool that is used to search for credentials, API keys, and encryption keys across a variety of data sources and environments. TruffleHog has the ability to discover credentials and secrets stored in code repositories, git history, CI/CD pipelines, among other common storage locations to include filesystems and cloud storage buckets. TruffleHog was first released by its author in 2016.

techniques used (16)

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1059.009Cloud API
T1078.004Cloud Accounts
T1083File and Directory Discovery
T1213.001Confluence
T1213.002Sharepoint
T1213.003Code Repositories
T1213.005Messaging Applications
T1526Cloud Service Discovery
T1528Steal Application Access Token
T1530Data from Cloud Storage
T1552.001Credentials In Files
T1552.005Cloud Instance Metadata API
T1555.006Cloud Secrets Management Stores
T1580Cloud Infrastructure Discovery
T1619Cloud Storage Object Discovery

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan