git-hound
git-hound searches public GitHub repositories for exposed secrets and credentials.
About git-hound
git-hound is an open-source command-line tool for Linux that searches public GitHub repositories for exposed secrets and credentials. It uses GitHub’s Code Search API to look across public repositories and Gists, rather than only scanning known targets. Searches start from a GitHub dork query.
You can pipe a keyword or dork into git-hound to scan matching files and repositories for API keys and other secrets. It combines regex patterns, entropy checks, and contextual detection, and can dig through commit history to find deleted or reverted credentials. Results can be exported as JSON, extended with custom regex rules, and optionally viewed in the GitHound Explore dashboard.
It suits security teams monitoring for leaked customer keys, bug bounty hunters looking for exposed tokens, and developers checking for accidental credential exposure.
Key features
- Search public GitHub repositories and Gists via Code Search API
- Support for GitHub dorks as search input
- Scan commit history for deleted credentials
- Detect secrets with regex, entropy and context
- JSON output and custom regex rules
- Optional Explore dashboard for results management
Best for: Security teams and bug bounty hunters monitoring GitHub for leaked API keys and credentials benefit most.
Good for
- Open source with Linux support
- Searches across all public repositories and Gists
- Checks commit history for removed secrets
- Supports automation with JSON output
Watch out for
- Requires GitHub API token configuration
- Requires command-line installation and setup
- Linux-only platform support
git-hound at a glance
- Website
- github.com/tillson/git-hound
- Category
- Privacy & Security › Security Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
git-hound alternatives
Tools and sites you could use instead, ranked by how closely they match.
Scan IP addresses and ports concurrently with rang3r, a multithreaded scanner.
Open source
24 alternatives
Practice iOS penetration testing in a deliberately vulnerable app, with exercises covering vulnerabilities tested through iOS 11.
Open source
24 alternatives
Build self-hosted, privacy-respecting CAPTCHA flows with the LibreCaptcha framework.
Open source
24 alternatives
dnSpyEx continues the dnSpy project as a debugger and assembly editor for .NET.
Open source
24 alternatives
Use Markdown templates to prepare reports for listed Offensive Security certification exams.
Open source
24 alternatives
GitDorker searches GitHub for exposed secrets using a collection of search patterns.
Popular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
git-hound FAQ
What is git-hound?
git-hound is an open-source tool that scans public GitHub repositories and Gists for exposed API keys and credentials using GitHub dork queries.
How does git-hound find API keys?
It combines regex patterns for common services with generic pattern, entropy, and context checks, plus commit-history analysis.
Do I need a GitHub token to use git-hound?
Yes. Configuration requires a GitHub API access token set in config.yml or via environment variable.
Is the GitHound Explore dashboard required?
No. The dashboard is optional for viewing results, and git-hound can be used without it.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.