leakhunt 2.2.4

A tool to detect sensitive information leaks in code

🚀 LeakHunt v2.2.4 - Production Ready Secret Scanner

Independent secret scanner for bug bounty hunters and security testers. Scans URLs, local files, and directories to detect exposed secrets using pattern matching, entropy analysis, and severity classification.

🆕 What's New in v2.2.4

• Added repository and project URLs
• Enhanced PyPI metadata and keywords
• Improved README rendering on PyPI
• Added maintainer details

Previous v2.2.3 highlights

• Tightened generic and environment-variable detection to reduce false positives in UI/frontend code.
• Added sensitive keyword, entropy, score, value sanity, duplicate-value, and JavaScript-aware filtering.
• Bumped package metadata for the v2.2.4 release.

Full history: CHANGELOG.md

---

⚙️ Installation

pip install -r requirements.txt
pip install .

🚀 CLI Usage

# mixed targets
leakhunt -t 8 -o findings.json https://example.com/app.js ./local.js

# multiple URLs
leakhunt -u https://example.com/app.js -u https://example.com/main.js

# targets from file
leakhunt -U lab/targets.txt -t 10 -v

# local files
leakhunt -f lab/index.html -f lab/test_private_key.txt

# Bug Bounty
leakhunt --safe-mode -t 15 -U targets.txt -o findings.json -v

# Lab Testing  
leakhunt --safe-mode -U lab/targets.txt

# Custom Patterns
leakhunt --patterns-dir patterns/ test.txt

# Dry Run
leakhunt --dry-run -U urls.txt

# Low Entropy
leakhunt --entropy-threshold 3.0 --safe-mode files/

🧪 Local Testing Lab

1. Start a local server from repo root
2. In another terminal: leakhunt -U lab/targets.txt -t 5 -v -o lab/results.json

Lab includes:

• lab/index.html → dummy tokens
• lab/test_private_key.txt → dummy private key

⚠️ Ethics Warning

Use LeakHunt only on systems you own or have explicit authorization to test. Unauthorized scanning may violate laws and responsible disclosure policies.