Geiger
Offensive & PentestingA read‑only secret scanner that triages leaked credentials by detecting them, running non‑destructive recon with each credential, and ranking the resulting blast radius.
Features
- Detects secret strings (AWS keys, GitHub tokens, Vault tokens, SSH private keys, etc.) from stdin, files, or pipeline output
- Performs read‑only reconnaissance with each credential and ranks impact by blast radius
- Supports dry‑run mode (default) that shows intended API calls without contacting services
- Offers an intrusive mode that safely redeems refresh tokens, queries databases, and reads secret managers to reveal deeper reach
- Handles SSH keys: fingerprints them and optionally tests Git access or correlates potential target hosts
Recent releases
View all 13 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
binary
go
Platforms
linux
