Trufflehog

Sniffing out credentials

TruffleHog: Sniffing Out Credentials with Ease

TruffleHog is a specialized Chrome extension aimed at enhancing digital safety and precision in pentests and code reviews. It significantly aids in identifying potential security loopholes by actively sniffing out API keys and credentials on the accessed websites. It’s an invaluable tool to ensure swift detection of potent risks that may go unnoticed or require strenuous manual effort to discover.

Download

Extension stats

By: dylan

Users: 8,000+

Rating: 4.56

(9)

0.06

Version: 0.0.1 (Last updated: 2021-09-21)

Creation date: 2021-09-20

Permissions:

https://*/*
http://*/*
activeTab
tabs
storage

Size: 35.44K

Email: fo*****@trufflesec.com

Full description: See detailed description

Ranking

# 11,273 ▲ 68

Other rankings

#6680 in Developer Tools ▲ 90

Other platforms

Not available on Android

Not available on Firefox

Not available on Edge

User reviews

Great extension. Quickly identifies secrets.

Kelly Woods, 2025-03-07

The popups are broken. Sometimes there are like ten of them with the same content. They block the browser until you interact with the pop-up. Notifications would work way better.

Radek Raczkowski, 2024-11-09

thanks for publishing this extension

abhishek dirisipo, 2024-05-01

View all user reviews

Extension safety

Risk impact

Trufflehog requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk impact analysis details

Critical Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
Critical ****** ****** ** ******* ***** ***** *** ** **** ** ***** **** ******** ****** *** ******** ********** * ******* ********
High ******* ******* **** *** ****** ***** *** ***** ** ******* **** ********* ********* ** * *********** *****
Low ******* ****** ** *** ********* ********

Risk likelihood

We don't have sufficient data to confidently determine the risk likelihood of Trufflehog. Use it at your own risk.

Risk likelihood analysis details

High This extension has low user count. Unpopular extensions may not be stable or safe.
Low **** ********* *** ******* **** **** * ****** **** ***** ******** *** **** ****** ** ** ****** *** *****
Low **** ********* *** ***** **** **** * ****** **** ***** ********** *** **** ****** ** ** ****** *** *****
Good **** ********* *** **** **** *******

Upgrade to see full risk analysis details