Skip to content

Add keyFinder - Chrome extension for passive API key & secret discovery #221

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
momenbasel wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add keyFinder - Chrome extension for passive API key & secret discovery #221

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -192,6 +192,7 @@ For a list of free hacking books available for download, go [here](https://githu
* [Shodan](https://www.shodan.io/) - A web-crawling search engine that lets users search for various types of servers connected to the internet.
* [masscan](https://github.com/robertdavidgraham/masscan) - Internet scale portscanner.
* [Keyscope](https://github.com/SpectralOps/keyscope) - an extensible key and secret validation tool for auditing active secrets against multiple SaaS vendors
* [keyFinder](https://github.com/momenbasel/keyFinder) - A zero-dependency Chrome extension that passively discovers API keys, tokens, and secrets on every page you visit using 80+ detection patterns and Shannon entropy analysis across 10 attack surfaces.

Copilot AI Apr 8, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The README entry is very long and includes potentially time-sensitive specifics (e.g., “80+ detection patterns”, “10 attack surfaces”). Consider shortening to a more stable one-liner (what it is + what it does) to keep the list scannable and reduce future churn when these numbers change.

Copilot uses AI. Check for mistakes.

@gemini-code-assist gemini-code-assist Bot Apr 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The description for keyFinder is quite wordy compared to other entries in this list. For 'Awesome' lists, it is generally preferred to keep descriptions concise and focused on the core functionality. Additionally, technical details like 'zero-dependency' and 'Shannon' can be omitted to maintain a cleaner summary consistent with the surrounding entries.

Suggested change
* [keyFinder](https://github.com/momenbasel/keyFinder) - A zero-dependency Chrome extension that passively discovers API keys, tokens, and secrets on every page you visit using 80+ detection patterns and Shannon entropy analysis across 10 attack surfaces.
* [keyFinder](https://github.com/momenbasel/keyFinder) - A Chrome extension for passive discovery of API keys, tokens, and secrets using 80+ detection patterns and entropy analysis.

* [Decompiler.com](https://www.decompiler.com/) - Java, Android, Python, C# online decompiler.

## General
Expand Down
Loading