https://github.com/MrEmpy/mantra

「🔑」A tool used to hunt down API key leaks in JS files and pages
https://github.com/MrEmpy/mantra

api bugbounty files hacking javascript js key leak leaked-secrets pentest security tool

Last synced: about 2 months ago
JSON representation

「🔑」A tool used to hunt down API key leaks in JS files and pages

• Host: GitHub
• URL: https://github.com/MrEmpy/mantra
• Owner: MrEmpy
• License: gpl-3.0
• Created: 2023-01-31T01:47:53.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2024-04-15T14:53:05.000Z (5 months ago)
• Last Synced: 2024-07-25T03:32:47.578Z (about 2 months ago)
• Topics: api, bugbounty, files, hacking, javascript, js, key, leak, leaked-secrets, pentest, security, tool
• Language: Go
• Homepage: https://amolohunters.com
• Size: 406 KB
• Stars: 550
• Watchers: 7
• Forks: 54
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-rainmana - MrEmpy/mantra - 「🔑」A tool used to hunt down API key leaks in JS files and pages (Go)
• awesome-api-security - Mantra

README

        
「🔑」 About Mantra




The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages.

It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for authentication to online services such as third-party APIs and are confidential and should not be shared publicly.

By using this tool, developers can quickly identify if their API keys are leaking and take steps to fix the problem before they are compromised. Furthermore, the tool can be useful for security officers, who can use it to verify that applications and websites that use external APIs are adequately protecting their keys.

In summary, this tool is an efficient and accurate solution to help secure your API keys and prevent sensitive information leaks.

## Help

![](assets/help.png)

## Usage

![](assets/usage1.png)

## Install

From go:

```

go install github.com/MrEmpy/mantra@latest

```

From source code:

```

git clone https://github.com/MrEmpy/mantra

cd mantra

make

./build/mantra-amd64-linux -h

```

## Buy me a coffee?