TruffleHog finds leaked API keys; Shannon is an AI pentester reading code like an attacker
alex_verem · x · 2026-10-23
Two more picks from alexverem's open-source security thread:
- TruffleHog (28,000 stars): scans your code and files for passwords and API keys left lying around, and checks which ones are still live.
- Shannon (49,000 stars): an AI pentester that studies your source code, finds weak spots, and runs real attack tests against your web app.
More from Apps
- Early hands-on with Claude Duet: great task design, 'ridiculous' Opus 5.5, rough edges remain — signulll · 2026-10-24
- United blocked his upgrade with no explanation — pasting the request body to AI revealed why in 11s — generativist · 2026-10-24
- Nutlope demos AI app that replaces IKEA instruction manuals — nutlope · 2026-10-24
- Paige Bailey made 1,000 Computer History Museum oral histories searchable with Gemini embeddings — DynamicWebPaige · 2026-10-24
- mflux ships full color grading and post-processing UI for Ultrapolis photo mode — mflux · 2026-10-24
- PM's step-by-step guide to building product strategy with Claude Code in 2 hours — aakashgupta · 2026-10-24