Ready-Made Scan Templates
Instant-copy GitHub search dorks. Bypass the query builder and grab categorized search strings immediately.
AI & LLM API Keys
OpenAI API Keys
Locate OpenAI platform tokens stored inside environment files.
(/sk-[a-zA-Z0-9]{48}/ AND (openai OR gpt))Anthropic API Keys
Locate Claude API secret keys inside environment variables.
(/sk-ant-[a-zA-Z0-9\-]{93,}/ AND (anthropic OR claude))Google Gemini keys
Find Google developer keys scoped for Gemini/Vertex AI integrations.
(/AIza[0-9A-Za-z_\-]{35}/ AND (gemini OR google))HuggingFace Hub Token
Locate write/read tokens scoped for HuggingFace Model Hub uploads.
(/hf_[a-zA-Z0-9]{34,37}/ AND huggingface)Cohere API Secret
Find Cohere platform access tokens inside configuration files.
(/[a-zA-Z0-9]{40}/ AND cohere)Mistral API Secret
Find Mistral AI developer secrets in environments.
(/[a-zA-Z0-9]{32}/ AND mistral)Databases & Storage
MongoDB Connect URI
Locate MongoDB connection strings containing passwords.
(/mongodb(\+srv)?:\/\/[^\s"\047]+/ AND mongodb)PostgreSQL Database URL
Find Postgres database URLs containing usernames and hosts.
(/postgres(ql)?:\/\/[^\s"\047]+/ AND postgres)Redis Cache Server URI
Locate insecure Redis key-value cache database configurations.
(/redis:\/\/[^\s"\047]+/ AND redis)Supabase Service Key
Find Supabase backend service keys bypassing RLS tables.
(/sbp_[a-zA-Z0-9]{40}/ AND supabase)Cloud & Infrastructure
AWS Access Identifiers
Locate AWS user access key identifiers.
(/AKIA[0-9A-Z]{16}/ AND aws)GCP Service Account Keys
Find full GCP Service Account credentials stored in JSON.
(/AIza[0-9A-Za-z_\-]{35}/ AND gcp)Firebase Client Configuration
Locate Firebase client SDK configs exposing backend links.
(/AIzaSy[0-9A-Za-z_\-]{33}/ AND firebase)Heroku Token
Find active Heroku tokens exposing hosted server environments.
(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/ AND heroku)CI/CD & Repository Secrets
GitHub Actions Workflows
Find repositories referencing custom GitHub Actions secrets.
(/\$\{\{\s*secrets\.[A-Z_]+\s*\}\}/ AND github-actions)NPM Publish Token
Locate authorization keys enabling package publication to NPM.
(/npm_[a-zA-Z0-9]{36}/ AND npm)WordPress Database Config
Identify WordPress site configuration files with database secrets.
(/define\(\s*[\'"]AUTH_KEY[\'"]/ AND wp-config)Git Credentials Block
Locate stored Git user credentials inside target folders.
(/https:\/\/[^:]+:[^@]+@github\.com/ AND git-credentials)