secretfinder
A python script to find sensitive data (apikeys, accesstoken, jwt,..) in javascript files.
webappRed Team
ToolwebappredLinuxBlackArchPlatforms: Linux · Last verified September 6, 2026
A python script to find sensitive data (apikeys, accesstoken, jwt,..) in javascript files.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on BlackArch with `pacman -S secretfinder` (or add the BlackArch repository to an existing Arch Linux install). See the official BlackArch tool listing and upstream homepage linked above for details.
