Recon & OSINT

Recon — Secrets & Code Recon

Find leaked API keys, hardcoded credentials, and sensitive data hidden in git history, GitHub repos, and exposed config files.

Intermediate35 min4 lessons

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Find leaked API keys, tokens, and credentials in public repositories
✓Use trufflehog and gitleaks to scan git history for secrets
✓Search JavaScript files and HTML source for hardcoded credentials
✓Monitor for leaked secrets as part of ongoing recon

Lessons

1The Developer Who Accidentally Published $38,000 in AWS Charges
2Where Secrets Hide — Git History, .env Files & Exposed Repos
3Tools — truffleHog, gitleaks & Google Dorks
4Mini Lab — Exposed .git and Leaked Credentials