Metadata-Version: 2.4
Name: leakhunt
Version: 2.2.4
Summary: A tool to detect sensitive information leaks in code
Home-page: https://github.com/Drag0nSlay/LeakHunt
Author: Drag0nSlay
Maintainer: Drag0nSlay
Maintainer-email: ak5518786@gmail.com
License: MIT
Project-URL: Homepage, https://github.com/Drag0nSlay/LeakHunt
Project-URL: Source, https://github.com/Drag0nSlay/LeakHunt
Project-URL: Issues, https://github.com/Drag0nSlay/LeakHunt/issues
Requires-Python: >=3.9
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: beautifulsoup4
Requires-Dist: colorama
Requires-Dist: requests>=2.31.0
Requires-Dist: tenacity>=8.2.3
Requires-Dist: tqdm>=4.66.0
Requires-Dist: pyyaml>=6.0
Provides-Extra: dev
Requires-Dist: pytest>=7.0; extra == "dev"
Dynamic: home-page
Dynamic: license-file
Dynamic: maintainer
Dynamic: maintainer-email
Dynamic: requires-python

# 🚀 **LeakHunt v2.2.4 - Production Ready Secret Scanner**

**Independent secret scanner** for bug bounty hunters and security testers. Scans URLs, local files, and directories to detect exposed secrets using pattern matching, entropy analysis, and severity classification.

[![PyPI version](https://badge.fury.io/py/leakhunt.svg)](https://pypi.org/project/leakhunt/)
[![Tests](https://github.com/Drag0nSlay/LeakHunt/actions/workflows/test.yml/badge.svg)](https://github.com/Drag0nSlay/LeakHunt/actions)

## 🆕 What's New in v2.2.4
- Added repository and project URLs
- Enhanced PyPI metadata and keywords
- Improved README rendering on PyPI
- Added maintainer details

## Previous v2.2.3 highlights
- Tightened generic and environment-variable detection to reduce false positives in UI/frontend code.
- Added sensitive keyword, entropy, score, value sanity, duplicate-value, and JavaScript-aware filtering.
- Bumped package metadata for the v2.2.4 release.

**Full history:** [CHANGELOG.md](https://github.com/Drag0nSlay/LeakHunt/blob/main/CHANGELOG.md)

---

## ⚙️ Installation

```bash
pip install -r requirements.txt
pip install .
```

## 🚀 CLI Usage

```bash
# mixed targets
leakhunt -t 8 -o findings.json https://example.com/app.js ./local.js

# multiple URLs
leakhunt -u https://example.com/app.js -u https://example.com/main.js

# targets from file
leakhunt -U lab/targets.txt -t 10 -v

# local files
leakhunt -f lab/index.html -f lab/test_private_key.txt

# Bug Bounty
leakhunt --safe-mode -t 15 -U targets.txt -o findings.json -v

# Lab Testing  
leakhunt --safe-mode -U lab/targets.txt

# Custom Patterns
leakhunt --patterns-dir patterns/ test.txt

# Dry Run
leakhunt --dry-run -U urls.txt

# Low Entropy
leakhunt --entropy-threshold 3.0 --safe-mode files/
```

## 🧪 Local Testing Lab

1. Start a local server from repo root
2. In another terminal:
`leakhunt -U lab/targets.txt -t 5 -v -o lab/results.json`

**Lab includes:**
- `lab/index.html` → dummy tokens
- `lab/test_private_key.txt` → dummy private key

## ⚠️ Ethics Warning

> Use LeakHunt only on systems you own or have explicit authorization to test. Unauthorized scanning may violate laws and responsible disclosure policies.
