Find secrets. Score them 0-100. Free forever.
SecretPulse is a high-signal secret scanner that goes beyond pattern matching — it classifies targets, selects relevant modules, adapts to WAF pressure, and scores every finding with 6-factor confidence scoring. Built for bug bounty hunters who want signal, not noise.
$ python3 SecretPulse.py https://target.com --smart
[RECON] CT: 47 subs | DNS: 23 alive | High risk: 6
[SMART] api.target.com → cors, jwt, swagger
[SMART] admin.target.com → dom-xss, env, cors
[CRITICAL] Stripe Secret Key
Confidence: 94/100 Status: Pattern matched
| Feature | SecretPulse | TruffleHog | Gitleaks | GitGuardian |
|---|---|---|---|---|
| Confidence scoring | 6-factor (0-100) | ✗ | ✗ | Binary |
| Smart routing | Per-target modules | ✗ | ✗ | ✗ |
| WAF adaptation | Auto-stealth | ✗ | ✗ | ✗ |
| CORS + DOM XSS | 6+14 techniques | ✗ | ✗ | ✗ |
| False positive rate | < 5% | ~40% | ~35% | ~30% |
# No installation. No key. Just run it.
python3 SecretPulse.py https://target.com --smart- Python 3.8+
pip install requests(only dependency)
python3 SecretPulse.py https://target.com \
--smart \
--db --diff \
--depth 2 \
-o results.json \
--report html- 90+ secret patterns — API keys, tokens, credentials, cloud secrets
- 13 scan modules — CORS, DOM XSS, JWT, open redirect, cloud perms, dep confusion, SSRF, IDOR, subdomain takeover
- 6-factor confidence scoring — format, context, ownership, file path, entropy, pattern match → single 0-100 score
- Smart mode — classifies each subdomain (API, admin, auth, staging) and runs only relevant modules
- Subdomain recon — CT logs + DNS resolution + HTTP probe + risk scoring
- WAF adaptive intelligence — auto-detects Cloudflare/Akamai pressure, enters stealth mode, escalates to deep stealth
- Differential scanning —
--diffshows new findings, resolved issues, new endpoints vs previous scan - SQLite persistence — track findings across scans with
--db - JSON + HTML output — dark-themed HTML reports with finding deduplication
# Smart scan (recommended — selects modules per target)
python3 SecretPulse.py https://target.com --smart
# Individual modules
python3 SecretPulse.py https://target.com --cors-check --dom-xss --jwt-exploit
# Recon only (discover subdomains, don't scan)
python3 SecretPulse.py target.com --recon-only --db
# Stealth mode (WAF-heavy targets)
python3 SecretPulse.py https://target.com --smart -w 2 -r 2 --ua-rotate══════════════════════════════════════════════════════════════
SMART SCAN PLAN — 23 targets
══════════════════════════════════════════════════════════════
API SERVICE (3):
[ 78] api.target.com
modules: cors_check, jwt_exploit, probe_swagger, probe_graphql
[ 65] graphql.target.com
modules: probe_graphql, cors_check
ADMIN PANEL (1):
[ 82] admin.target.com
modules: dom_xss, probe_env, cors_check
AUTH SERVICE (2):
[ 85] auth.target.com
modules: jwt_exploit, cors_check, probe_env
| Flag | Description |
|---|---|
--smart |
Adaptive module selection per target (recommended) |
--db |
Enable SQLite persistence |
--diff |
Show delta vs previous scan |
--depth N |
Crawl depth (0 = target only) |
-w N |
Concurrent workers (default 5) |
-r N |
Rate limit (requests/sec, 0 = unlimited) |
--ua-rotate |
Rotate User-Agent per request |
-o FILE |
JSON output |
--report html |
Generate HTML report |
--cors-check |
CORS misconfiguration testing |
--dom-xss |
DOM XSS source/sink mapping |
--jwt-exploit |
JWT exploitation testing |
--open-redirect |
Open redirect testing |
--cloud-perms |
Cloud permission testing (S3/GCS/Firebase) |
--dep-confusion |
Dependency confusion checking |
--recon-only |
Subdomain recon without scanning |
--db-stats |
Show database statistics |
Vinod Kumar Bontha
Built as a single Python file. 10,800+ lines. No frameworks. No cloud. No telemetry.
For authorized security testing only.
If SecretPulse helps you find something real, consider giving it a ⭐