3 ms·
The post keeps saying "verified secrets" - how are they verified? Did the author attempt to login to each service? Or does verified just means that it looks lik
by 3eb7988a1663 10mo ago
The post keeps saying "verified secrets" - how are they verified? Did the author attempt to login to each service? Or does verified just means that it looks like a valid token?
- ctippett 10mo agoTools like TruffleHog[1] will attempt to verify any credentials it finds by making some sort of authenticated request. [1] https://github.com/trufflesecurity/trufflehog#validation- https://github.com/trufflesecurity/trufflehog#validation-