Trugglehog-PingPwn

Detects potential exposed secrets on web pages.

Trugglehog-PingPwn scans web pages and referenced resources for common secret patterns (API keys, tokens, private keys, webhook URLs) so you can identify accidental exposures quickly. Scanning and detection are performed entirely in your browser; this extension does not send findings to any remote server. Use the popup to review findings, clear them, or download a CSV of results. Key features: - Detects generic API keys, specific provider tokens, and common secret formats. - Optionally checks for `.env` files and `.git` directories (may trigger server protections). - Shows per-origin findings with a badge count and in-popup listing. - Local-only storage of findings using the browser's storage; no remote transmission. Privacy statement: All scanning and analysis occurs locally inside the browser. No findings, page contents, or extracted secrets are transmitted to external servers. The extension uses `chrome.storage.sync` to store settings and detected findings on your browser; you can clear stored findings via the popup. Developer contact: pingpwnsec@gmail.com Keywords: secrets, security, trufflehog, scan, credentials, api-keys, tokens, git, bugbounty