gsoft-inc / secret-url-finder

Python script to find URLs that could contain secrets

secret-url-finder

Tool that finds URLs for a given domain by using different sources:

• urlscan.io
• Alienvault OTX
• Wayback Machine
• Common Crawl
• Hybrid Analysis - Requires an API key.
• VirusTotal - Requires an API key.

URLs that could contain secret values are highlighted in red.

Setup

Install secret-url-finder

python3 setup.py install

Usage

secret-url-finder [-h] --domain DOMAIN [-f] [-s] [-u] [--hybrid-analysis-key HYBRID_ANALYSIS_KEY] [--virus-total-key VIRUS_TOTAL_KEY] [--ignored-extensions IGNORED_EXTENSIONS]

required arguments:
  --domain DOMAIN       The domain to search
  
optional arguments:
  -h, --help            show this help message and exit
  -f, --filter          Only show URLs with secrets
  -s, --sorted          Sort results from newest to oldest
  -u, --url-only        Only displays the URLs
  --urlscan-key         URLSCAN_KEY
                        The API key for urlscan. Not mandatory, but helps with rate limiting
  --hybrid-analysis-key HYBRID_ANALYSIS_KEY
                        The API key for hybrid analysis
  --virus-total-key VIRUS_TOTAL_KEY
                        The API key for VirusTotal
  --ignored-extensions IGNORED_EXTENSIONS
                        File extensions to ignore. Defaults to: "gif,jpg,png,css,svg,woff,woff2"

License

Copyright © 2021, GSoft inc. This code is licensed under the Apache License, Version 2.0. You may obtain a copy of this license here.