
mantra
「🔑」A tool used to hunt down API key leaks in JS files and pages
information-gatheringsecret-detectionvulnerability-scanners+1

「🔑」A tool used to hunt down API key leaks in JS files and pages

Automated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.

Scans websites and JS files for exposed Gemini API keys, verifies them live, enumerates accessible services, and provides a browser client for direct…

You can read the writeup on this script here

We would like to request that all contributors please clone a *fresh copy* of this repository since the September 21st maintenance.