KyubiSweep is a lightweight, cross-platform CLI tool that scans for exposed secrets, API keys, and tokens across your filesystem. Built with Go for performance, it detects vulnerabilities with features like Shannon entropy analysis, concurrent scanning, and a beautiful security hygiene scorecard, all while requiring zero dependencies.
KyubiSweep is a robust, cross-platform command line interface (CLI) tool designed to identify exposed secrets within filesystems. Developed in Go, KyubiSweep operates with maximum efficiency, ensuring high performance without any dependencies.
Users have two options to get started: they can either download a pre-built binary or build the tool from source, ensuring easy accessibility.
To run KyubiSweep, input the following command in the terminal:
kyubisweep [OPTIONS]
Options include specifying the path to scan, enabling verbose output, showing all severity levels, and moving files with secrets to a quarantine directory:
--path <directory>: Specify the directory to scan (default is the current directory).--verbose: Activate detailed output during the scan.--move-to <path>: Move found files containing secrets to a designated vault location.Upon completion, KyubiSweep provides a comprehensive report detailing any critical issues found, including risk breakdowns and specific findings, thus allowing for quick remediation.
| Category | Examples |
|---|---|
| Cloud Credentials | AWS Access Keys, Google API Keys |
| Payment Systems | Stripe API keys |
| Developer Tools | GitHub PATs, NPM tokens |
The project is organized systematically, featuring an entry point and separate modules for analysis, scanning, reporting, and managing quarantined files.
Should secrets be detected, the --move-to option can be employed to relocate sensitive files securely. This mode includes safety features to prevent unintentional data loss.
Contributions to the KyubiSweep project are welcomed, fostering a collaborative development environment.
No comments yet.
Sign in to be the first to comment.