Suggesting optional print of where the secretList items have been found

[fuomag9]

Is your feature request related to a problem? Please describe.
I know what the secrets are but I need to know where were they found so I can remove the data leak from my server

Describe the solution you'd like
I'd like to see where the items in secretList are found, to make it easier to understand which files/data is their source

[Neeraj Sonaniya]

I will see what I can do here.

[SeanG]

+1

[Kirk Fullen]

I tried to make it work but I couldn't. Looking forward to the feature. I have found a lot of keys lately

[Neeraj Sonaniya]

@unethicalnoob Can you please create a separate issue, with some examples?

[Michael Smith]

I would also love to see this feature aadded, the script prints out an API key e.g "-Api-Key': 'xxxxxxxxx' but I have no idea where it came from and have to spend time shifting through js files to find it.

[Neeraj Sonaniya]

I'll start to rewrite code this week.

[Spas Genov]

I really need to know where is leaking from those keys... only KEY=&^%$&^%... it's not enough information, except that the tool is cool 🥇

[Philippe Delteil]

Same here, not being able to find where the keys are stored.

[Neeraj Sonaniya]

I've fixed this one and testing it and will upload it by EOD today. You may create pull request to improve it.

[Neeraj Sonaniya]

Guys this feature has been added. Please try this as well as SAN feature.

[Neeraj Sonaniya]

Closing this one.

[Spas Genov]

Guys this feature has been added. Please try this as well as SAN feature.

Let me see :)

[Philippe Delteil]

Hello @nsonaniya2010.

Thanks for the update.

In my case the result of the keys found says 'Inline' this means it was found on the main page of the domain?

[Neeraj Sonaniya]

Yes.