🛡️ KeySentry

May 29, 2026 · View on GitHub

🔍 KeySentry: Find leaked API keys & secrets in any GitHub repo or local project. No mercy.

A powerful, no-nonsense tool to detect unsecured API keys, tokens, and sensitive files — either via command-line scan or a beautifully built frontend web scanner.

a-dark-cyberpunk-themed-digital-poster-w_-YePJ_1tRI2sxaEUqdGSIQ_a62RDOYRQqOHTq_0JMh4zg

🚀 Features

🔎 Scans for 25+ common API key formats (AWS, Slack, Stripe, OpenAI, etc.)
🧠 Regex + entropy-inspired patterns for high accuracy
🗂️ Flags sensitive files like .env, id_rsa, firebase.json, etc.
💾 Outputs structured results to JSON
🧩 Supports both GitHub repo URLs and local folder paths
💻 No GitHub API tokens needed
⚡ Styled terminal banner and colorful terminal logs
🌐 Frontend scanner hosted on Netlify for ease of use

KeySentry now includes KeySentry.yar, a YARA rule designed to detect exposed API keys, authentication tokens, cloud credentials, private keys, and sensitive configuration files commonly found in source code repositories.

The rule currently supports detection of secrets associated with:

AWS, Google Cloud, Slack, Stripe, OpenAI
GitHub, Twilio, SendGrid, DigitalOcean
Firebase, Cloudflare, Heroku, Mailgun
Azure Storage, Dropbox, Notion
Terraform Cloud, CircleCI, Facebook and more

It also identifies commonly leaked sensitive files such as:

.env, .env.local, .env.production
credentials.json, firebase.json
.aws/credentials, .npmrc
id_rsa, id_rsa.pub, .pypirc

This addition enables defenders, threat hunters, malware analysts, and security researchers to leverage KeySentry's detection logic directly through YARA-based workflows.

🌐 Live Frontend

We now have a frontend interface (located in project/ folder) for easier scanning.

🔗 https://key-sentry.netlify.app/

Paste a GitHub repo URL and instantly view results in your browser.

git clone https://github.com/AdityaBhatt3010/KeySentry.git
cd KeySentry
pip install -r requirements.txt

🐳 Pull from DockerHub

docker pull adityabhatt3010/keysentry

🧪 Usage

🔍 Scan a GitHub repository:

python KeySentry.py --repo https://github.com/username/repo-name --output results.json

💻 Scan a local directory:

python KeySentry.py --local /path/to/codebase --output results_local.json

▶️ Using Docker:

docker run --rm adityabhatt3010/keysentry --repo https://github.com/username/repo-name --output results.json

📸 Screenshots

🌐 Web Interface Scanner

Frontend Scanner

Frontend Results

Frontend Analytics

🧪 CLI Scaner

GitHub Scan

Local Scan

Help

⚙️ Docker Build & Run

Docker Build

Docker Run

📁 Sample Output

[
  {
    "file": "/tmp/tmpabcd1234/app/settings.py",
    "type": "AWS",
    "match": "AKIAIOSFODNN7EXAMPLE"
  },
  {
    "file": "/tmp/tmpabcd1234/.env",
    "type": "Sensitive File",
    "match": ".env"
  }
]