#go #credentials #devsecops #dynamic_analysis #hacktoberfest #precommit #scanning #secret #secret_management #secrets #security #security_tools #trufflehog #verification

TruffleHog is a powerful tool that helps you find and verify leaked credentials in various places like Git repositories, chats, wikis, logs, and more. Here’s how it benefits you TruffleHog can search for secrets in many different sources such as Git, chats, wikis, logs, and file systems.
- **Classification** For each found secret, TruffleHog checks if it is live and active.
- **Analysis**: It provides detailed information about the secret, such as who created it and what resources it can access.

Using TruffleHog helps you protect your credentials by detecting and verifying them before they cause any harm. You can install it via various methods like Docker, binary releases, or compiling from source, making it easy to integrate into your security workflow.

https://github.com/trufflesecurity/trufflehog

#python #android #android_malware #dynamic_analysis #frida #frida_scripts #frida_snippets #malware #medusa #penetration_testing #pentest

MEDUSA is a powerful tool that helps you analyze and automate processes for Android and iOS apps. It has many modules that can monitor various app activities like intents, HTTP communications, database interactions, and more. You can use MEDUSA to bypass security measures like SSL pinning, monitor malware activities, and even translate app UIs. To use it, you need to install it on Linux or macOS, set up the necessary tools like FRIDA and adb, and then run the scripts to start monitoring. This tool makes it easier to understand and analyze how apps work, which is very useful for security testing and debugging.

https://github.com/Ch0pin/medusa