Sniffing out credentials
Trufflehog Extension
The TruffleHog chrome extension looks for API keys and credentials on websites visited, and alerts you if there are any present. This is useful for doing pentests and code reviews, because it helps identify keys that would otherwise either be missed or have to be searched for manually
Read more
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Trufflehog", "version": "0.0.1", "manifest_version": 2, "description": "Sniffing out credentials", "homepage_url": "https://trufflesecurity.com", "background": { "scripts": [ "background.js" ], "persistent": true }, "browser_action": { "default_title": "Trufflehog", "default_popup": "popup.html" }, "permissions": [ "https://*/*", "http://*/*", "activeTab", "tabs", "storage" ], "icons": { "16": "icon16.png", "48": "icon48.png", "128": "icon128.png" }, "content_scripts": [\t\t{\t\t "matches": ["https://*/*","http://*/*"],\t\t "js": ["inject.js"]\t\t}\t]}
Read more