Sniffing out credentials

Latest Version

Version
0.0.1
Update
September 20, 2021
Size
34.61KiB
Developer
Category
Users
8,000+
Rating
4.5 ★
Manifest Version
2
Web Store Status
Languages Support
English (United States)
See more
Permissions
Https://*/*
Http://*/*
ActiveTab
Tabs
Storage
See more

Trufflehog Extension

The TruffleHog chrome extension looks for API keys and credentials on websites visited, and alerts you if there are any present. This is useful for doing pentests and code reviews, because it helps identify keys that would otherwise either be missed or have to be searched for manually
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Trufflehog", "version": "0.0.1", "manifest_version": 2, "description": "Sniffing out credentials", "homepage_url": "https://trufflesecurity.com", "background": { "scripts": [ "background.js" ], "persistent": true }, "browser_action": { "default_title": "Trufflehog", "default_popup": "popup.html" }, "permissions": [ "https://*/*", "http://*/*", "activeTab", "tabs", "storage" ], "icons": { "16": "icon16.png", "48": "icon48.png", "128": "icon128.png" }, "content_scripts": [\t\t{\t\t "matches": ["https://*/*","http://*/*"],\t\t "js": ["inject.js"]\t\t}\t]}
Read more