{"id":20858830,"url":"https://github.com/controlplaneio/truffleproc","last_synced_at":"2025-09-04T05:34:03.581Z","repository":{"id":37621607,"uuid":"399895409","full_name":"controlplaneio/truffleproc","owner":"controlplaneio","description":"truffleproc — hunt secrets in process memory (TruffleHog \u0026 gdb mashup)","archived":false,"fork":false,"pushed_at":"2023-08-20T18:37:07.000Z","size":877,"stargazers_count":118,"open_issues_count":2,"forks_count":11,"subscribers_count":21,"default_branch":"master","last_synced_at":"2025-05-12T22:52:12.163Z","etag":null,"topics":["gdb","secrets","security","trufflehog"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/controlplaneio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"security.txt","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-08-25T17:00:23.000Z","updated_at":"2025-05-06T09:16:26.000Z","dependencies_parsed_at":"2025-05-12T22:49:04.185Z","dependency_job_id":"794f638b-2d4c-4adc-9427-e96531471901","html_url":"https://github.com/controlplaneio/truffleproc","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/controlplaneio/truffleproc","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Ftruffleproc","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Ftruffleproc/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Ftruffleproc/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Ftruffleproc/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/controlplaneio","download_url":"https://codeload.github.com/controlplaneio/truffleproc/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/controlplaneio%2Ftruffleproc/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273556069,"owners_count":25126484,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-04T02:00:08.968Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["gdb","secrets","security","trufflehog"],"created_at":"2024-11-18T04:47:41.588Z","updated_at":"2025-09-04T05:34:03.511Z","avatar_url":"https://github.com/controlplaneio.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# truffleproc — hunt secrets in process memory\n\n\n![TruffleProc Logo](docs/assets/truffleproc_logo.png)\n\n\n\n\u003c!-- use markdown-toc to generate a table of contents here --\u003e\n\n## Usage\n\nRun `truffleproc.sh` against your current Bash shell (e.g. `$$`):\n\n```shell script\n$ ./truffleproc.sh $$\n# coredumping pid 6174\nReading symbols from od...\nReading symbols from /usr/lib/systemd/systemd...\nReading symbols from /lib/systemd/libsystemd-shared-247.so...\nReading symbols from /lib/x86_64-linux-gnu/librt.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libseccomp.so.2...\nReading symbols from /lib/x86_64-linux-gnu/libselinux.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libmount.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libpam.so.0...\nReading symbols from /lib/x86_64-linux-gnu/libaudit.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libkmod.so.2...\nReading symbols from /lib/x86_64-linux-gnu/libapparmor.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libc.so.6...\nReading symbols from /lib/x86_64-linux-gnu/libacl.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libblkid.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libcap.so.2...\nReading symbols from /lib/x86_64-linux-gnu/libcrypt.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libgcrypt.so.20...\nReading symbols from /lib/x86_64-linux-gnu/libip4tc.so.2...\nReading symbols from /lib/x86_64-linux-gnu/liblz4.so.1...\nReading symbols from /lib/x86_64-linux-gnu/libzstd.so.1...\nReading symbols from /lib/x86_64-linux-gnu/liblzma.so.5...\nReading symbols from /lib/x86_64-linux-gnu/libdl.so.2...\nReading symbols from /lib/x86_64-linux-gnu/libpthread.so.0...\nReading symbols from /lib64/ld-linux-x86-64.so.2...\nReading symbols from /lib/x86_64-linux-gnu/libpcre2-8.so.0...\nReading symbols from /lib/x86_64-linux-gnu/libcap-ng.so.0...\nReading symbols from /lib/x86_64-linux-gnu/libcrypto.so.1.1...\nReading symbols from /lib/x86_64-linux-gnu/libgpg-error.so.0...\n# extracting strings to /tmp/tmp.o6HV0Pl3fe\n# finding secrets\n# results in /tmp/tmp.o6HV0Pl3fe/results.txt\n```\n\nOutputs the secrets and high entropy strings in the memory of the target PID:\n\n```text\n# ./truffleproc.sh results for pid 6174 (2021-08-31T15:16:47.077Z) | @controlplaneio\nReason: High Entropy\nDate: 2021-08-31 15:16:47\nHash: 53e5372a9b1a2f69374652266908fc447f4077f6\nFilepath: strings.txt\nBranch: origin/master\nCommit: Coredump of strings for pid 6174\n\n+disk/by-id/dm-uuid-LVM-oxjqdaDSHekHKvBllov2EQV9db2JiNUa37CT8R0nuBS6I2qYAaHnxyjoHoDW\n+DM_UUID=LVM-oxjqdaDSHekHKvBllov2EQV9db2JiNUa37CT8R0nuBS6I2qYAaHnxyjoHoDW\n+API_KEY=BvWmkjg3yhb5dsfF6pstHo466yhrede210c\n+SECRET_API_KEY=Ks83htsgjDFGi9dfg1cbvsdgsht3\n\n# ...\n```\n\n\u003c!--## Appendix--\u003e\n\n\n\u003c!--### Sequence Diagram Source Example--\u003e\n\n\u003c!--```--\u003e\n\u003c!--@startuml--\u003e\n\u003c!--title CP Theme--\u003e\n\u003c!--'skinparam handwritten true--\u003e\n\u003c!--skinparam {--\u003e\n\u003c!--    ArrowColor Black--\u003e\n\u003c!--    NoteColor Black--\u003e\n\u003c!--    NoteBackgroundColor White--\u003e\n\u003c!--    LifeLineBorderColor Black--\u003e\n\u003c!--    LifeLineColor Black--\u003e\n\u003c!--    ParticipantBorderColor Black--\u003e\n\u003c!--    ParticipantBackgroundColor Black--\u003e\n\u003c!--    ParticipantFontColor White--\u003e\n\u003c!--    defaultFontSize 12--\u003e\n\u003c!--    defaultFontStyle Bold--\u003e\n\u003c!--    maxMessageSize 140--\u003e\n\u003c!--    wrapWidth 400--\u003e\n\u003c!--}--\u003e\n\n\u003c!--== 1. title ==--\u003e\n\n\u003c!--\"Dev Machine\"-\u003eGithub: commit and push--\u003e\n\u003c!--Github-\u003eJenkins: call webhook,\\ntrigger build--\u003e\n\n\u003c!--Jenkins-\u003e\"Build Slave\": automated trigger:\\ncommit--\u003e\n\n\u003c!--== 2a. image scan ==--\u003e\n\n\u003c!--Jenkins-\u003e\"Build Slave\": automated trigger:\\nimage scan--\u003e\n\u003c!--@enduml--\u003e\n\u003c!--```--\u003e\n\n2021 [@controlplaneio](https://twitter.com/controlplaneio)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcontrolplaneio%2Ftruffleproc","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcontrolplaneio%2Ftruffleproc","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcontrolplaneio%2Ftruffleproc/lists"}