forked from mirrors/kingfisher
102 KiB
102 KiB
| title | description |
|---|---|
| Built-in Rules List | Complete list of all 734 built-in secret detection rules in Kingfisher. Searchable and filterable by provider, confidence level, and validation support. |
Built-in Rules
Kingfisher ships with 734 detection rules across 465 providers (654 detectors + 80 dependent rules). Of these, 462 include live validation and 43 support direct revocation.
!!! tip "Search" Use the search box below to filter rules by provider name, rule ID, or confidence level.
| Provider | Rule Name | Rule ID | Confidence | Validates | Revokes |
|---|---|---|---|---|---|
| Ably | Ably API Key | kingfisher.ably.1 |
Medium | Yes | |
| Abstractapi | AbstractAPI API Key | kingfisher.abstractapi.1 |
Medium | Yes | |
| Abuseipdb | AbuseIPDB API Key | kingfisher.abuseipdb.1 |
Medium | Yes | |
| Adafruitio | Adafruit IO Key | kingfisher.adafruitio.1 |
High | Yes | |
| Adobe | Adobe Stock API Key | kingfisher.adobe.1 |
Unknown | Yes | |
| Adobe | Adobe IO Product ID | kingfisher.adobe.2 |
Unknown | ||
| Adobe | Adobe OAuth Client Secret | kingfisher.adobe.3 |
Unknown | ||
| Age | Age Recipient (X25519 public key) | kingfisher.age.1 |
High | ||
| Age | Age Identity (X22519 secret key) | kingfisher.age.2 |
High | ||
| Age | Age Recipient (MLKEM768-X25519 public key) | kingfisher.age.3 |
High | ||
| Age | Age Identity (MLKEM768-X25519 secret key) | kingfisher.age.4 |
High | ||
| Agora | Agora App ID | kingfisher.agora.1 |
Low | ||
| Agora | Agora App Certificate | kingfisher.agora.2 |
Medium | ||
| Ai21 | AI21 Studio API Key | kingfisher.ai21studio.1 |
Medium | Yes | |
| Ai71 | AI71 API Key | kingfisher.ai71.1 |
Medium | Yes | |
| Airbrake | Airbrake User Key | kingfisher.airbrake.1 |
Medium | Yes | |
| Airtable | Airtable Personal Access Token | kingfisher.airtable.1 |
Medium | Yes | |
| Airtable | Airtable OAuth Token | kingfisher.airtable.2 |
Medium | Yes | |
| Aiven | Aiven API Key | kingfisher.aiven.1 |
Medium | Yes | |
| Akamai | Akamai API Client Token | kingfisher.akamai.1 |
High | ||
| Akamai | Akamai API Client Secret | kingfisher.akamai.2 |
Medium | ||
| Alchemy | Alchemy API Key | kingfisher.alchemy.1 |
Medium | Yes | |
| Algolia | Algolia Admin API Key | kingfisher.algolia.1 |
Medium | Yes | |
| Algolia | Algolia Application ID | kingfisher.algolia.2 |
Medium | ||
| Alibaba | Alibaba Access Key ID | kingfisher.alibabacloud.1 |
Medium | ||
| Alibaba | Alibaba Access Key Secret | kingfisher.alibabacloud.2 |
Medium | Yes | |
| Amazonmws | Amazon MWS Auth Token | kingfisher.amazonmws.1 |
High | ||
| Amplitude | Amplitude Secret Key | kingfisher.amplitude.1 |
Medium | Yes | |
| Anthropic | Anthropic API Key | kingfisher.anthropic.1 |
High | Yes | |
| Anthropic | Anthropic Admin API Key | kingfisher.anthropic.2 |
Medium | Yes | |
| Anypoint | Anypoint API Key | kingfisher.anypoint.1 |
Medium | Yes | |
| Apify | Apify API Token | kingfisher.apify.1 |
High | Yes | |
| Apollo | Apollo API Key | kingfisher.apollo.1 |
Medium | Yes | |
| Appcenter | Visual Studio App Center API Token | kingfisher.appcenter.1 |
Medium | Yes | |
| Artifactory | Artifactory Access Token | kingfisher.artifactory.1 |
High | Yes | |
| Artifactory | Artifactory JFrog URL | kingfisher.artifactory.2 |
Medium | ||
| Artifactory | Artifactory Identity Reference Token | kingfisher.artifactory.3 |
Medium | Yes | |
| Artifactory | Artifactory NPM Auth (base64) | kingfisher.artifactory.4 |
Medium | ||
| Asana | Asana Client ID | kingfisher.asana.1 |
Medium | ||
| Asana | Asana Client Secret | kingfisher.asana.2 |
Medium | ||
| Asana | Asana OAuth / Personal Access Token (Legacy) | kingfisher.asana.3 |
Medium | Yes | |
| Asana | Asana OAuth / Personal Access Token (V1) | kingfisher.asana.4 |
Medium | Yes | |
| Asana | Asana OAuth / Personal Access Token (V2) | kingfisher.asana.5 |
Medium | Yes | |
| Assemblyai | AssemblyAI API Key | kingfisher.assemblyai.1 |
Medium | Yes | |
| Atlassian | Atlassian API token | kingfisher.atlassian.1 |
Medium | Yes | |
| Atlassian | Atlassian Admin API Key | kingfisher.atlassian.3 |
Medium | Yes | |
| Auth0 | Auth0 Client ID | kingfisher.auth0.1 |
Medium | ||
| Auth0 | Auth0 Client Secret | kingfisher.auth0.2 |
Medium | Yes | |
| Auth0 | Auth0 Domain | kingfisher.auth0.3 |
Medium | ||
| Authress | Authress Service Client Access Key | kingfisher.authress.1 |
Medium | Yes | |
| Aviationstack | AviationStack API Key | kingfisher.aviationstack.1 |
Medium | Yes | |
| Aws | AWS Access Key ID | kingfisher.aws.1 |
Medium | ||
| Aws | AWS Secret Access Key | kingfisher.aws.2 |
Medium | Yes | Yes |
| Aws | AWS Session Token | kingfisher.aws.4 |
Medium | ||
| Aws | AWS Bedrock API Key (Short-lived) | kingfisher.aws.6 |
Medium | Yes | |
| Aws | AWS Bedrock API Key (Long-lived) | kingfisher.aws.bedrock.long_lived |
Medium | Yes | |
| Azure | Azure Connection String | kingfisher.azure.1 |
Medium | ||
| Azure | Azure App Configuration Connection String | kingfisher.azure.2 |
Medium | ||
| Azure | Azure Personal Access Token | kingfisher.azure.3 |
Medium | ||
| Azure | Azure Container Registry URL | kingfisher.azure.4 |
Medium | ||
| Azure | Azure Container Registry Password | kingfisher.azure.5 |
Medium | Yes | |
| Azure Notification Hub | Azure Notification Hub Namespace Host | kingfisher.azure.notificationhub.1 |
Medium | ||
| Azure Notification Hub | Azure Notification Hub Name | kingfisher.azure.notificationhub.2 |
Medium | ||
| Azure Notification Hub | Azure Notification Hub SAS Key Name | kingfisher.azure.notificationhub.3 |
Medium | ||
| Azure Notification Hub | Azure Notification Hub Access Key | kingfisher.azure.notificationhub.4 |
Medium | Yes | |
| Azuredevops | Azure DevOps Organization | kingfisher.azure.devops.1 |
Medium | ||
| Azuredevops | Azure DevOps Personal Access Token | kingfisher.azure.devops.2 |
Medium | Yes | |
| Azureopenai | Azure OpenAI API Key | kingfisher.azureopenai.1 |
Medium | Yes | |
| Azureopenai | Azure OpenAI Host | kingfisher.azureopenai.host.1 |
Medium | ||
| Azuresearchquery | Azure Search Query Key | kingfisher.azuresearch.key.1 |
Medium | Yes | |
| Azuresearchquery | Azure Search URL | kingfisher.azuresearch.url.1 |
Medium | ||
| Azurespeech | Azure Speech Region | kingfisher.azurespeech.1 |
Medium | ||
| Azurespeech | Azure Speech API Key | kingfisher.azurespeech.2 |
Medium | Yes | |
| Azurestorage | Azure Storage Account Name | kingfisher.azurestorage.1 |
Medium | ||
| Azurestorage | Azure Storage Account Key | kingfisher.azurestorage.2 |
Medium | Yes | |
| Azuretranslator | Azure Translator Region | kingfisher.azuretranslator.1 |
Medium | ||
| Azuretranslator | Azure Translator API Key | kingfisher.azuretranslator.2 |
Medium | Yes | |
| Baremetrics | Baremetrics API Key | kingfisher.baremetrics.1 |
Medium | Yes | |
| Baseten | Baseten API Key | kingfisher.baseten.1 |
Medium | Yes | |
| Beamer | Beamer API token | kingfisher.beamer.1 |
Medium | Yes | |
| Betterstack | Better Stack API Token | kingfisher.betterstack.1 |
Medium | Yes | |
| Bitbucket | Bitbucket Client ID | kingfisher.bitbucket.1 |
Medium | Yes | |
| Bitbucket | Bitbucket Secret | kingfisher.bitbucket.3 |
Medium | Yes | |
| Bitfinex | Bitfinex API Key | kingfisher.bitfinex.1 |
Low | ||
| Bitfinex | Bitfinex API Secret | kingfisher.bitfinex.2 |
Medium | ||
| Bitly | Bitly Access Token | kingfisher.bitly.1 |
Medium | Yes | |
| Blynk | Blynk Device Access Token | kingfisher.blynk.1 |
Medium | ||
| Blynk | Blynk Organization Access Token | kingfisher.blynk.2 |
Medium | ||
| Blynk | Blynk Organization Access Token | kingfisher.blynk.3 |
Medium | ||
| Blynk | Blynk Organization Client Credentials | kingfisher.blynk.8 |
Medium | ||
| Blynk | Blynk Organization Client Credentials | kingfisher.blynk.9 |
Medium | ||
| Box | Box API Access Token | kingfisher.box.1 |
Medium | Yes | |
| Braintree | Braintree Tokenization Key | kingfisher.braintree.1 |
Medium | ||
| Branchio | Branch.io Live Key | kingfisher.branchio.1 |
Medium | Yes | |
| Branchio | Branch.io Test Key | kingfisher.branchio.2 |
Medium | ||
| Branchio | Branch.io Secret | kingfisher.branchio.3 |
Medium | ||
| Brave | Brave Search API Key | kingfisher.brave.1 |
Medium | Yes | |
| Brevo | Brevo API Token | kingfisher.brevo.1 |
High | Yes | |
| Browserstack | BrowserStack Access Key | kingfisher.browserstack.1 |
Medium | Yes | Yes |
| Browserstack | BrowserStack Username | kingfisher.browserstack.2 |
Medium | ||
| Buildkite | Buildkite API Key | kingfisher.buildkite.1 |
Medium | Yes | Yes |
| Bunnynet | Bunny.net API Key | kingfisher.bunnynet.1 |
Medium | Yes | |
| Calendly | Calendly Personal Access Token | kingfisher.calendly.1 |
Medium | Yes | |
| Carto | CARTO API Access Token (JWT) | kingfisher.carto.1 |
Medium | ||
| Cerebras | Cerebras AI API Key | kingfisher.cerebras.1 |
High | Yes | |
| Checkout | Checkout.com Secret Key | kingfisher.checkout.1 |
High | Yes | |
| Checkout | Checkout.com Sandbox Secret Key | kingfisher.checkout.2 |
High | Yes | |
| Circleci | CircleCI API Personal Access Token | kingfisher.circleci.1 |
High | Yes | |
| Circleci | CircleCI API Project Token | kingfisher.circleci.2 |
Medium | Yes | |
| Ciscomeraki | Cisco Meraki API Key | kingfisher.ciscomeraki.1 |
Medium | Yes | |
| Clarifai | Clarifai API Key | kingfisher.clarifai.1 |
Medium | Yes | |
| Clay | Clay API Key | kingfisher.clay.1 |
Medium | ||
| Clearbit | Clearbit API Key | kingfisher.clearbit.1 |
Medium | Yes | |
| Clearout | Clearout API Token | kingfisher.clearout.1 |
Medium | Yes | |
| Clerk | Clerk Secret Key | kingfisher.clerk.1 |
Medium | Yes | |
| Clickhouse | ClickHouse Cloud Secret Key | kingfisher.clickhouse.1 |
High | Yes | |
| Clickhouse | ClickHouse Cloud Key ID | kingfisher.clickhouse.2 |
Medium | ||
| Clockwork | Clockwork SMS API Key | kingfisher.clockwork.1 |
Medium | Yes | |
| Clojars | Clojars Username | kingfisher.clojars.1 |
Medium | ||
| Clojars | Clojars API Token | kingfisher.clojars.2 |
Medium | ||
| Cloudant | IBM Cloudant Legacy Credentials | kingfisher.cloudant.1 |
High | ||
| Cloudflare | Cloudflare API Token | kingfisher.cloudflare.1 |
Medium | Yes | Yes |
| Cloudflare | Cloudflare CA Key | kingfisher.cloudflare.2 |
Medium | Yes | |
| Cloudinary | Cloudinary API Secret | kingfisher.cloudinary.1 |
Medium | Yes | |
| Cloudinary | Cloudinary API Key | kingfisher.cloudinary.2 |
Medium | ||
| Cloudinary | Cloudinary Cloud Name | kingfisher.cloudinary.3 |
Medium | ||
| Cloudsight | CloudSight API Key | kingfisher.cloudsight.1 |
Medium | Yes | |
| Codacy | Codacy API Key | kingfisher.codacy.1 |
Medium | Yes | |
| Codeclimate | CodeClimate Reporter ID | kingfisher.codeclimate.1 |
Medium | Yes | |
| Codecov | Codecov Access Token | kingfisher.codecov.1 |
Medium | Yes | |
| Coderabbit | CodeRabbit API Key | kingfisher.coderabbit.1 |
Medium | Yes | |
| Cohere | Cohere API Key | kingfisher.cohere.1 |
Medium | Yes | |
| Coinbase | Coinbase Access Token | kingfisher.coinbase.1 |
Unknown | Yes | |
| Coinbase | Coinbase CDP API Key (ECDSA) | kingfisher.coinbase.2 |
Unknown | Yes | |
| Coinbase | Coinbase CDP API Key (Ed25519) | kingfisher.coinbase.3 |
Unknown | Yes | |
| Coinlayer | Coinlayer API Key | kingfisher.coinlayer.1 |
Medium | Yes | |
| Confluent | Confluent Client ID | kingfisher.confluent.1 |
Medium | ||
| Confluent | Confluent API Secret | kingfisher.confluent.2 |
Medium | Yes | Yes |
| Confluent | Confluent API Secret - Updated Format | kingfisher.confluent.3 |
Medium | Yes | Yes |
| Contentful | Contentful Delivery API Token | kingfisher.contentful.1 |
Medium | Yes | |
| Contentful | Contentful Personal Access Token | kingfisher.contentful.2 |
Medium | Yes | |
| Contentstack | Contentstack Management Token | kingfisher.contentstack.1 |
Medium | Yes | |
| Contentstack | Contentstack API Key | kingfisher.contentstack.2 |
Medium | ||
| Couchbase | Couchbase Capella API Key | kingfisher.couchbase.1 |
Medium | Yes | |
| Coveralls | Coveralls Repo Identifier | kingfisher.coveralls.1 |
Medium | ||
| Coveralls | Coveralls Personal API Token | kingfisher.coveralls.2 |
Medium | Yes | |
| Coze | Coze Personal Access Token | kingfisher.coze.1 |
Medium | Yes | |
| Crates.Io | crates.io API Key | kingfisher.cratesio.1 |
Medium | ||
| Credentials | Credentials in a URL | kingfisher.credentials.1 |
Medium | ||
| Curl | Curl Basic Authentication Credentials | kingfisher.curl.1 |
Low | ||
| Curl | Curl Header Authentication | kingfisher.curl.2 |
Low | ||
| Currencylayer | Currencylayer API Key | kingfisher.currencylayer.1 |
Medium | Yes | |
| Cursor | Cursor Integrations (User) API Key | kingfisher.cursor.1 |
Medium | Yes | |
| Customerio | Customer.io Tracking API Key | kingfisher.customerio.1 |
Medium | ||
| Customerio | Customer.io App API Key | kingfisher.customerio.2 |
Medium | Yes | |
| Cypress | Cypress Record Key | kingfisher.cypress.1 |
Medium | Yes | |
| Cypress | Cypress Project ID | kingfisher.cypress.2 |
Medium | ||
| Daily | Daily API Key | kingfisher.daily.1 |
Medium | Yes | |
| Databento | Databento API Key | kingfisher.databento.1 |
Medium | Yes | |
| Databricks | Databricks API token | kingfisher.databricks.1 |
Medium | ||
| Databricks | Databricks API Token | kingfisher.databricks.2 |
Medium | Yes | |
| Databricks | Databricks Domain | kingfisher.databricks.3 |
Medium | ||
| Datadog | Datadog Site Domain | kingfisher.datadog.1 |
Medium | ||
| Datadog | Datadog API Key | kingfisher.datadog.2 |
Medium | Yes | |
| Datadog | Datadog Application Key | kingfisher.datadog.3 |
Medium | Yes | |
| Datagov | Data.gov API Key | kingfisher.datagov.1 |
Medium | Yes | |
| Datastax | DataStax Astra Application Token | kingfisher.datastax.1 |
Medium | Yes | |
| Db2 | IBM DB2 / AS400 Credentials | kingfisher.db2.1 |
Medium | ||
| Deepgram | Deepgram API Key | kingfisher.deepgram.1 |
Medium | Yes | |
| Deepseek | DeepSeek API Key | kingfisher.deepseek.1 |
Medium | Yes | |
| Definednetworking | Defined Networking API Token | kingfisher.definednetworking.1 |
Medium | Yes | |
| Delighted | Delighted API Key | kingfisher.delighted.1 |
Medium | Yes | |
| Deno | Deno Account Token | kingfisher.deno.1 |
Medium | Yes | |
| Dependency Track | Dependency-Track API Key | kingfisher.dtrack.1 |
Medium | ||
| Devcycle | DevCycle Client SDK Key | kingfisher.devcycle.1 |
Medium | Yes | |
| Devcycle | DevCycle Mobile SDK Key | kingfisher.devcycle.2 |
Medium | Yes | |
| Devcycle | DevCycle Server SDK Key | kingfisher.devcycle.3 |
Medium | Yes | |
| Deviantart | DeviantArt Access Token | kingfisher.deviantart.1 |
Medium | Yes | Yes |
| Diffbot | Diffbot API Key | kingfisher.diffbot.1 |
Unknown | Yes | |
| Dify | Dify API Key | kingfisher.dify.1 |
Medium | Yes | |
| Digitalocean | DigitalOcean API Key | kingfisher.digitalocean.1 |
Medium | Yes | |
| Digitalocean | DigitalOcean Refresh Token | kingfisher.digitalocean.2 |
Medium | Yes | |
| Discord | Discord Webhook URL | kingfisher.discord.1 |
Medium | Yes | |
| Discord | Discord Bot Token | kingfisher.discord.2 |
Medium | Yes | |
| Discord | Discord Bot ID | kingfisher.discord.3 |
Medium | ||
| Disqus | Disqus API Key | kingfisher.disqus.1 |
Medium | Yes | |
| Django | Django Secret Key | kingfisher.django.1 |
Medium | ||
| Docker | Docker Registry Credentials (auths JSON) | kingfisher.docker.1 |
Medium | Yes | |
| Dockerhub | Docker Hub Personal Access Token | kingfisher.dockerhub.1 |
Medium | Yes | |
| Dockerhub | Docker Hub Username | kingfisher.dockerhub.2 |
Medium | ||
| Dockerhub | Docker Hub Organization Access Token | kingfisher.dockerhub.3 |
Medium | Yes | |
| Docusign | DocuSign API Secret Key | kingfisher.docusign.1 |
Medium | ||
| Doppler | Doppler CLI Token | kingfisher.doppler.1 |
Medium | Yes | Yes |
| Doppler | Doppler Personal Token | kingfisher.doppler.2 |
Medium | Yes | Yes |
| Doppler | Doppler Service Token | kingfisher.doppler.3 |
Medium | Yes | Yes |
| Doppler | Doppler Service Account Token | kingfisher.doppler.4 |
Medium | Yes | Yes |
| Doppler | Doppler SCIM Token | kingfisher.doppler.5 |
Medium | Yes | Yes |
| Doppler | Doppler Audit Token | kingfisher.doppler.6 |
Medium | Yes | Yes |
| Droneci | DroneCI Access Token | kingfisher.drone.1 |
Medium | Yes | |
| Dropbox | Dropbox API secret/key | kingfisher.dropbox.1 |
Medium | Yes | |
| Duffel | Duffel API Token | kingfisher.duffel.1 |
High | Yes | |
| Duo | Duo Security Integration Key | kingfisher.duo.1 |
Low | ||
| Duo | Duo Security Secret Key | kingfisher.duo.2 |
Medium | ||
| Duplocloud | DuploCloud API Key | kingfisher.duplocloud.1 |
Medium | ||
| Dwolla | Dwolla Client ID | kingfisher.dwolla.1 |
Medium | ||
| Dwolla | Dwolla Client Secret | kingfisher.dwolla.2 |
Medium | ||
| Dynatrace | Dynatrace Token | kingfisher.dynatrace.1 |
Medium | Yes | |
| Easypost | EasyPost API token | kingfisher.easypost.1 |
Medium | Yes | |
| Elasticemail | Elastic Email API Key | kingfisher.elasticemail.1 |
Medium | Yes | |
| Elevenlabs | ElevenLabs API Key | kingfisher.elevenlabs.1 |
Medium | Yes | |
| Endorlabs | Endor Labs API Key | kingfisher.endorlabs.1 |
Medium | ||
| Endorlabs | Endor Labs API Secret | kingfisher.endorlabs.2 |
Medium | Yes | |
| Equinix | Equinix Metal / Packet API Token | kingfisher.equinix.1 |
High | Yes | |
| Eraserio | Eraser API Key | kingfisher.eraser.1 |
Medium | Yes | |
| Etsy | Etsy Open API Key | kingfisher.etsy.1 |
Medium | Yes | |
| Eventbrite | Eventbrite API Key | kingfisher.eventbrite.1 |
Medium | Yes | |
| Exaai | Exa AI API Key | kingfisher.exa.1 |
Medium | Yes | |
| Facebook App ID | kingfisher.facebook.1 |
Medium | |||
| Facebook Secret Key | kingfisher.facebook.2 |
Unknown | Yes | ||
| Facebook Access Token | kingfisher.facebook.3 |
Medium | |||
| Fastly | Fastly API token | kingfisher.fastly.1 |
Medium | Yes | |
| Fernet | Fernet Symmetric Encryption Key | kingfisher.fernet.1 |
High | ||
| Figma | Figma Personal Access Token | kingfisher.figma.1 |
Medium | Yes | |
| Figma | Figma Personal Access Header Token | kingfisher.figma.2 |
Unknown | Yes | |
| Fileio | FileIO Secret Key | kingfisher.fileio.1 |
Medium | Yes | |
| Filezilla | FileZilla base64 encoded password | kingfisher.filezilla.1 |
Low | ||
| Filezilla | FileZilla stored password (Pass plaintext) | kingfisher.filezilla.2 |
Low | ||
| Finicity | Finicity API token | kingfisher.finicity.1 |
Medium | Yes | |
| Finicity | Finicity client secret | kingfisher.finicity.2 |
Medium | Yes | |
| Finnhub | Finnhub API Token | kingfisher.finnhub.1 |
Medium | Yes | |
| Firebase | Firebase Cloud Messaging Server Key | kingfisher.firebase.1 |
Medium | ||
| Firebase | Firebase Cloud Messaging Device Token | kingfisher.firebase.2 |
Medium | ||
| Firecrawl | Firecrawl API Key | kingfisher.firecrawl.1 |
Medium | Yes | |
| Fireworksai | Fireworks.ai API Key | kingfisher.fireworks.1 |
Medium | Yes | |
| Fixer | Fixer.io API Key | kingfisher.fixer.1 |
Medium | Yes | |
| Fleetbase | Fleetbase API Key | kingfisher.fleetbase.1 |
Medium | Yes | |
| Flickr | Flickr API Key | kingfisher.flickr.1 |
Medium | Yes | |
| Flickr | Flickr OAuth Token | kingfisher.flickr.2 |
Medium | Yes | |
| Flutterwave | Flutterwave Public Key | kingfisher.flutterwave.1 |
Medium | ||
| Flutterwave | Flutterwave Secret Key | kingfisher.flutterwave.2 |
Medium | ||
| Flyio | Fly.io API Token | kingfisher.flyio.1 |
Medium | Yes | |
| Forestadmin | Forest Admin Auth Secret | kingfisher.forestadmin.1 |
High | ||
| Foursquare | Foursquare Client ID | kingfisher.foursquare.1 |
Medium | ||
| Foursquare | Foursquare Client Secret | kingfisher.foursquare.2 |
Medium | Yes | |
| Frameio | Frame.io API Token | kingfisher.frameio.1 |
Medium | Yes | |
| Freemius | Freemius Secret Key | kingfisher.freemius.1 |
Medium | ||
| Freshbooks | FreshBooks Access Token | kingfisher.freshbooks.1 |
Medium | Yes | |
| Freshdesk | Freshdesk Domain | kingfisher.freshdesk.1 |
Medium | ||
| Freshdesk | Freshdesk API Key | kingfisher.freshdesk.2 |
Medium | Yes | |
| Friendli | Friendli.ai API Key | kingfisher.friendli.1 |
Medium | Yes | |
| Ftp | FTP Connection URI Credentials | kingfisher.ftp.1 |
Medium | ||
| Fullcontact | FullContact API Key | kingfisher.fullcontact.1 |
Medium | Yes | |
| Fullstory | Fullstory API Key | kingfisher.fullstory.1 |
Medium | Yes | |
| Gcnotify | GC Notify API Key | kingfisher.gcnotify.1 |
Medium | Yes | |
| Gcp | GCP API Token | kingfisher.gcp.1 |
High | Yes | Yes |
| Gcp | GCP Private Key ID | kingfisher.gcp.3 |
Medium | ||
| Gemfury | Gemfury Deploy or Push Token | kingfisher.gemfury.1 |
High | ||
| Gemfury | Gemfury Full Access Token | kingfisher.gemfury.2 |
High | ||
| Gemstash | Gemstash API Key | kingfisher.gemstash.1 |
High | ||
| Generic | Generic Secret | kingfisher.generic.1 |
Low | ||
| Generic | Generic API Key | kingfisher.generic.2 |
Low | ||
| Generic | Generic Username and Password | kingfisher.generic.3 |
Low | ||
| Generic | Generic Username and Password | kingfisher.generic.4 |
Low | ||
| Generic | Generic Password | kingfisher.generic.5 |
Low | ||
| Generic | Weak Password Pattern | kingfisher.generic.6 |
Low | ||
| Generic | Generic Username and Password | kingfisher.generic.8 |
Low | ||
| Generic | Docker Robot Credentials (plaintext pair) | kingfisher.generic.9 |
Low | ||
| Geoapify | Geoapify API Key | kingfisher.geoapify.1 |
Medium | Yes | |
| Gitalk | Gitalk OAuth Credentials | kingfisher.gitalk.1 |
Medium | ||
| Gitea | Gitea Access Token | kingfisher.gitea.1 |
Medium | Yes | |
| Github | GitHub Personal Access Token - fine-grained permissions | kingfisher.github.1 |
Unknown | Yes | Yes |
| Github | GitHub Personal Access Token | kingfisher.github.2 |
Unknown | Yes | Yes |
| Github | GitHub OAuth Access Token | kingfisher.github.3 |
Medium | Yes | |
| Github | GitHub App User-to-Server Token | kingfisher.github.4 |
Unknown | Yes | |
| Github | GitHub App Server-to-Server Token | kingfisher.github.5 |
Unknown | Yes | Yes |
| Github | GitHub Refresh Token | kingfisher.github.6 |
Unknown | Yes | |
| Github | GitHub Client ID | kingfisher.github.7 |
Unknown | ||
| Github | GitHub Legacy Secret Key | kingfisher.github.8 |
Unknown | Yes | |
| Gitlab | GitLab Private Token | kingfisher.gitlab.1 |
Medium | Yes | Yes |
| Gitlab | GitLab Runner Registration Token | kingfisher.gitlab.2 |
Unknown | Yes | |
| Gitlab | GitLab Pipeline Trigger Token | kingfisher.gitlab.3 |
Unknown | Yes | |
| Gitlab | GitLab Private Token - Routable Format | kingfisher.gitlab.4 |
Medium | Yes | Yes |
| Gitter | Gitter Access Token | kingfisher.gitter.1 |
Medium | Yes | |
| Gocardless | GoCardless API Token | kingfisher.gocardless.1 |
Medium | Yes | |
| Godaddy | GoDaddy API Credentials | kingfisher.godaddy.1 |
Medium | Yes | |
| Google Client ID | kingfisher.google.1 |
Medium | |||
| Google OAuth Client Secret | kingfisher.google.2 |
Medium | |||
| Google OAuth Client Secret | kingfisher.google.3 |
Medium | |||
| Google OAuth Access Token | kingfisher.google.4 |
Medium | |||
| Google OAuth Credentials | kingfisher.google.6 |
Medium | |||
| Google Gemini API Key | kingfisher.google.7 |
Medium | Yes | ||
| Googleoauth2 | Google OAuth2 Access Token | kingfisher.google.oauth2.1 |
Medium | Yes | |
| Gradle | Hardcoded Gradle Credentials | kingfisher.gradle.1 |
Medium | ||
| Grafana | Grafana API Token | kingfisher.grafana.1 |
Medium | Yes | |
| Grafana | Grafana Cloud API Token | kingfisher.grafana.2 |
Medium | Yes | |
| Grafana | Grafana Service Account Token | kingfisher.grafana.3 |
Medium | Yes | |
| Grafana | Grafana Domain | kingfisher.grafana.4 |
Medium | ||
| Groq | Groq API Key | kingfisher.groq.1 |
High | Yes | |
| Guardian | Guardian API Key | kingfisher.guardian.1 |
Medium | Yes | |
| Gumroad | Gumroad Access Token | kingfisher.gumroad.1 |
Medium | Yes | |
| Harness | Harness Personal Access Token (PAT) | kingfisher.harness.pat.1 |
Medium | Yes | Yes |
| Hashes | Password Hash (Kerberos 5, etype 23, AS-REP) | kingfisher.krb5.asrep.23.1 |
Medium | ||
| Hashes | Password Hash (md5crypt) | kingfisher.pwhash.1 |
Medium | ||
| Hashes | Password Hash (bcrypt) | kingfisher.pwhash.2 |
Medium | ||
| Hashes | Password Hash (sha256crypt) | kingfisher.pwhash.3 |
Medium | ||
| Hashes | Password Hash (sha512crypt) | kingfisher.pwhash.4 |
Medium | ||
| Hashes | Password Hash (Cisco IOS PBKDF2 with SHA256) | kingfisher.pwhash.5 |
Medium | ||
| Hashicorp | Hashicorp Vault Service Token (< v1.10) | kingfisher.hashicorp.1 |
Medium | ||
| Hashicorp | Hashicorp Vault Batch Token (< v1.10) | kingfisher.hashicorp.2 |
Medium | ||
| Hashicorp | Hashicorp Vault Recovery Token (< v1.10) | kingfisher.hashicorp.3 |
Medium | ||
| Hashicorp | Hashicorp Vault Service Token (>= v1.10) | kingfisher.hashicorp.4 |
Medium | ||
| Hashicorp | Hashicorp Vault Batch Token (>= v1.10) | kingfisher.hashicorp.5 |
Medium | ||
| Hashicorp | Hashicorp Vault Recovery Token (>= v1.10) | kingfisher.hashicorp.6 |
Medium | ||
| Hashicorp | Hashicorp Vault Unseal Key | kingfisher.hashicorp.7 |
Medium | ||
| Heartland | Heartland Portico API Key | kingfisher.heartland.1 |
High | Yes | |
| Helpscout | Help Scout Client ID | kingfisher.helpscout.1 |
Medium | ||
| Helpscout | Help Scout OAuth Client Secret | kingfisher.helpscout.2 |
Medium | Yes | |
| Hereapi | HERE API Key | kingfisher.hereapi.1 |
Medium | Yes | |
| Heroku | Heroku API Key | kingfisher.heroku.1 |
Medium | Yes | Yes |
| Heroku | Heroku API Key (Platform Key) | kingfisher.heroku.2 |
Medium | Yes | Yes |
| Honeycomb | Honeycomb API Key | kingfisher.honeycomb.1 |
Medium | Yes | |
| Http | HTTP Basic Authentication | kingfisher.http.1 |
Low | ||
| Http | HTTP Bearer Token | kingfisher.http.2 |
Low | ||
| Huawei | Huawei Open Platform Client ID | kingfisher.huawei.1 |
Low | ||
| Huawei | Huawei Open Platform Client Secret | kingfisher.huawei.2 |
Medium | ||
| Hubspot | HubSpot Private App Token | kingfisher.hubspot.1 |
Medium | Yes | |
| Huggingface | HuggingFace User Access Token | kingfisher.huggingface.1 |
Medium | Yes | |
| Hunterio | Hunter.io API Key | kingfisher.hunterio.1 |
Medium | Yes | |
| Ibm | IBM Cloud User API Key | kingfisher.ibm.1 |
Medium | Yes | |
| Imagekit | ImageKit Private API Key | kingfisher.imagekit.1 |
Medium | Yes | |
| Influxdb | InfluxDB API Token | kingfisher.influxdb.1 |
Medium | Yes | |
| Infracost | Infracost API Token | kingfisher.infracost.1 |
High | Yes | |
| Infura | Infura API Key | kingfisher.infura.1 |
Medium | Yes | |
| Instagram Graph API Access Token | kingfisher.instagram.1 |
High | Yes | ||
| Instantly | Instantly API Key | kingfisher.instantly.1 |
Medium | Yes | |
| Intercom | Intercom API Token | kingfisher.intercom.1 |
Medium | Yes | |
| Intra42 | Intra42 Client ID | kingfisher.intra42.1 |
Medium | ||
| Intra42 | Intra42 Client Secret (s-s4t2ud/af) | kingfisher.intra42.2 |
Medium | Yes | |
| Ionic | Ionic API token | kingfisher.ionic.1 |
High | Yes | |
| Ipstack | IpStack API Key | kingfisher.ipstack.1 |
Medium | Yes | |
| Iterable | Iterable API Key | kingfisher.iterable.1 |
Medium | Yes | |
| Jdbc | JDBC connection string with embedded credentials | kingfisher.jdbc.1 |
Medium | Yes | |
| Jenkins | Jenkins Token or Crumb | kingfisher.jenkins.1 |
Medium | ||
| Jfrog | JFrog Cloud Host | kingfisher.jfrog.1 |
Medium | ||
| Jfrog | JFrog API Key | kingfisher.jfrog.2 |
Medium | Yes | |
| Jfrog | JFrog Identity Token | kingfisher.jfrog.3 |
Medium | Yes | |
| Jina | Jina Search Foundation API Key | kingfisher.jina.1 |
High | Yes | |
| Jira | Jira Domain | kingfisher.jira.1 |
Medium | ||
| Jira | Jira Token | kingfisher.jira.2 |
Medium | Yes | |
| Jotform | Jotform API Key | kingfisher.jotform.1 |
Medium | Yes | |
| Jumpcloud | Jumpcloud API Key | kingfisher.jumpcloud.1 |
Medium | Yes | |
| Jwt | JSON Web Token (base64url-encoded) | kingfisher.jwt.1 |
Medium | Yes | |
| Kagi | Kagi API Key | kingfisher.kagi.1 |
Medium | Yes | |
| Kairos | Kairos API App ID | kingfisher.kairos.1 |
Low | ||
| Kairos | Kairos API Key | kingfisher.kairos.2 |
Medium | ||
| Keenio | Keen.io API Key | kingfisher.keenio.1 |
Medium | Yes | |
| Keenio | Keen.io Project ID | kingfisher.keenio.2 |
Medium | ||
| Keycloak | Keycloak Client ID | kingfisher.keycloak.1 |
Low | ||
| Keycloak | Keycloak Client Secret | kingfisher.keycloak.2 |
Medium | ||
| Kickbox | Kickbox API Key | kingfisher.kickbox.1 |
Medium | Yes | |
| Klaviyo | Klaviyo API Key | kingfisher.klaviyo.1 |
Medium | Yes | |
| Klingai | Kling AI Secret Key | kingfisher.klingai.1 |
Medium | Yes | |
| Kraken | Kraken API Secret | kingfisher.kraken.1 |
Medium | ||
| Kubernetes | Kubernetes API Server URL | kingfisher.kubernetes.1 |
Medium | ||
| Kubernetes | Kubernetes Bootstrap Token | kingfisher.kubernetes.2 |
Medium | Yes | |
| Kubernetes | Kubernetes Bootstrap Token Pair | kingfisher.kubernetes.3 |
Medium | Yes | |
| Kucoin | KuCoin API Key | kingfisher.kucoin.1 |
Medium | ||
| Kucoin | KuCoin API Secret | kingfisher.kucoin.2 |
Medium | ||
| Lacework | Lacework API Key ID | kingfisher.lacework.1 |
Medium | ||
| Lacework | Lacework API Secret | kingfisher.lacework.2 |
High | ||
| Langchain | LangSmith Personal Access Token | kingfisher.langchain.1 |
Unknown | Yes | |
| Langchain | LangSmith Service Key | kingfisher.langchain.2 |
Unknown | Yes | |
| Langfuse | Langfuse Secret Key | kingfisher.langfuse.1 |
Medium | Yes | |
| Langfuse | Langfuse Public Key | kingfisher.langfuse.2 |
Medium | ||
| Laravel | Laravel Application Encryption Key | kingfisher.laravel.1 |
High | ||
| Lark | LarkSuite Tenant Access Token | kingfisher.lark.1 |
Medium | Yes | |
| Lark | LarkSuite User Access Token | kingfisher.lark.2 |
Medium | Yes | |
| Lark | LarkSuite App Access Token | kingfisher.lark.3 |
Medium | Yes | |
| Launchdarkly | LaunchDarkly Access Token | kingfisher.launchdarkly.1 |
Medium | Yes | |
| Ldap | LDAP Credentials | kingfisher.ldap.1 |
Medium | ||
| Lemonsqueezy | LemonSqueezy API Key | kingfisher.lemonsqueezy.1 |
Medium | Yes | |
| Line | Line Messaging API Token | kingfisher.line.1 |
Medium | Yes | |
| Linear | Linear API Key | kingfisher.linear.1 |
Medium | Yes | |
| LinkedIn Client ID | kingfisher.linkedin.1 |
Medium | Yes | ||
| LinkedIn Secret Key | kingfisher.linkedin.2 |
Medium | Yes | ||
| Linode | Linode Personal Access Token | kingfisher.linode.1 |
Medium | Yes | |
| Llamacloud | Llama Cloud API Key | kingfisher.llamacloud.1 |
High | ||
| Lob | Lob API Key | kingfisher.lob.1 |
Medium | Yes | |
| Lob | Lob Publishable API Key | kingfisher.lob.2 |
Medium | Yes | |
| Lokalise | Lokalise API Token | kingfisher.lokalise.1 |
Medium | Yes | |
| Looker | Looker Base URL | kingfisher.looker.1 |
Low | ||
| Looker | Looker Client ID | kingfisher.looker.2 |
Medium | ||
| Looker | Looker Client Secret | kingfisher.looker.3 |
Medium | Yes | |
| Mailchimp | Mailchimp API Key | kingfisher.mailchimp.1 |
Medium | Yes | |
| Mailgun | MailGun Token | kingfisher.mailgun.1 |
Medium | Yes | |
| Mailgun | MailGun Primary Key | kingfisher.mailgun.2 |
Medium | Yes | |
| Mailjet | MailJetSMS API Key | kingfisher.mailjet.1 |
Medium | Yes | |
| Mailjet | MailJet Basic Auth | kingfisher.mailjet.2 |
Medium | Yes | |
| Mandrill | Mandrill API Key | kingfisher.mandrill.1 |
Medium | Yes | |
| Mapbox | Mapbox Public Access Token | kingfisher.mapbox.1 |
Medium | Yes | |
| Mapbox | Mapbox Secret Access Token | kingfisher.mapbox.2 |
Medium | Yes | Yes |
| Mapbox | Mapbox Temporary Access Token | kingfisher.mapbox.3 |
Medium | Yes | |
| Mariadb | MariaDB Credentials | kingfisher.mariadb.1 |
Medium | ||
| Mattermost | Mattermost URL | kingfisher.mattermost.1 |
Medium | ||
| Mattermost | Mattermost Access Token | kingfisher.mattermost.2 |
Medium | Yes | |
| Maxmind | MaxMind License Key | kingfisher.maxmind.1 |
Medium | Yes | |
| Maxmind | MaxMind Account ID | kingfisher.maxmind.2 |
Medium | ||
| Mercadopago | Mercado Pago Access Token | kingfisher.mercadopago.1 |
Medium | Yes | |
| Mercury | Mercury Production API Token | kingfisher.mercury.1 |
Medium | Yes | |
| Mercury | Mercury Non-Production API Token | kingfisher.mercury.2 |
Medium | Yes | |
| Mergify | Mergify Application API Key | kingfisher.mergify.1 |
High | Yes | |
| Messagebird | MessageBird API Token | kingfisher.messagebird.1 |
Medium | Yes | |
| Microsoft Teams | Microsoft Teams Webhook | kingfisher.msteams.1 |
Medium | Yes | |
| Microsoftteamswebhook | Microsoft Teams Webhook | kingfisher.microsoftteamswebhook.1 |
Medium | Yes | |
| Midtrans | Midtrans Sandbox Server/Client Key | kingfisher.midtrans.1 |
High | Yes | |
| Midtrans | Midtrans Production Server/Client Key | kingfisher.midtrans.2 |
High | Yes | |
| Miro | Miro Access Token | kingfisher.miro.1 |
Medium | Yes | |
| Mistral | Mistral AI API Key | kingfisher.mistral.1 |
Medium | Yes | |
| Mixpanel | Mixpanel API Secret | kingfisher.mixpanel.1 |
Medium | Yes | |
| Modal | Modal CLI Token Pair | kingfisher.modal.1 |
High | Yes | |
| Monday | Monday.com API Key | kingfisher.monday.1 |
Medium | Yes | |
| Moneywave | Moneywave / Flutterwave Private Key | kingfisher.moneywave.1 |
High | ||
| Mongodb | MongoDB API Private Key | kingfisher.mongodb.1 |
Unknown | Yes | Yes |
| Mongodb | MongoDB API PUBLIC Key | kingfisher.mongodb.2 |
Medium | ||
| Mongodb | MongoDB URI Connection String | kingfisher.mongodb.3 |
Unknown | Yes | |
| Mongodb | MongoDB Atlas Service Account Token | kingfisher.mongodb.4 |
Unknown | Yes | |
| Mssql | MSSQL Credentials | kingfisher.mssql.1 |
Medium | ||
| Mux | Mux Access Token Secret | kingfisher.mux.1 |
Medium | Yes | |
| Mux | Mux Access Token ID | kingfisher.mux.2 |
Medium | ||
| Mysql | MySQL URI with Credentials | kingfisher.mysql.1 |
Medium | Yes | |
| Nasa | NASA API Key | kingfisher.nasa.1 |
Unknown | Yes | |
| Neo4J | Neo4j Database Credentials | kingfisher.neo4j.1 |
Medium | ||
| Neon | Neon API Key | kingfisher.neon.1 |
High | Yes | |
| Nessus | Nessus Agent Linking Key | kingfisher.nessus.1 |
High | ||
| Netlify | Netlify API Key | kingfisher.netlify.1 |
Unknown | Yes | |
| Netlify | Netlify API Key | kingfisher.netlify.2 |
Medium | Yes | |
| Netrc | netrc Credentials | kingfisher.netrc.1 |
Medium | ||
| Newrelic | New Relic Personal API Key | kingfisher.newrelic.1 |
Medium | Yes | |
| Newsapi | NewsAPI API Key | kingfisher.newsapi.1 |
Medium | Yes | |
| Ngrok | Ngrok API Key | kingfisher.ngrok.1 |
Unknown | Yes | |
| Notion | Notion Legacy Token | kingfisher.notion.1 |
Medium | Yes | |
| Notion | Notion Token | kingfisher.notion.2 |
Medium | Yes | |
| Notion | Notion OAuth Refresh Token | kingfisher.notion.3 |
Medium | ||
| Npm | NPM Access Token (fine-grained) | kingfisher.npm.1 |
Medium | Yes | Yes |
| Npm | NPM Access Token (old format) | kingfisher.npm.2 |
Medium | Yes | Yes |
| Nuget | NuGet API Key | kingfisher.nuget.1 |
Medium | Yes | |
| Nuget | NuGet API Key | kingfisher.nuget.2 |
Medium | Yes | |
| Numverify | Numverify API Key | kingfisher.numverify.1 |
Medium | Yes | |
| Nvidia | NVIDIA NIM API Key | kingfisher.nvidia.nim.1 |
Medium | Yes | |
| Nxcloud | Nx Cloud Access Token | kingfisher.nxcloud.1 |
High | Yes | |
| Nylas | Nylas API Key | kingfisher.nylas.1 |
Medium | Yes | |
| Nylas | Nylas API URI | kingfisher.nylas.api_uri.1 |
Medium | ||
| Nytimes | New York Times API Key | kingfisher.nytimes.1 |
Medium | Yes | |
| Octopusdeploy | Octopus Deploy Server URL | kingfisher.octopusdeploy.1 |
Medium | ||
| Octopusdeploy | Octopus Deploy API Key | kingfisher.octopusdeploy.2 |
Medium | Yes | |
| Odbc | Credentials in ODBC Connection String | kingfisher.odbc.1 |
Medium | ||
| Okta | Okta API Token | kingfisher.okta.1 |
Unknown | Yes | |
| Okta | Okta Domain | kingfisher.okta.2 |
Unknown | ||
| Ollama | Ollama API Key | kingfisher.ollama.1 |
Medium | Yes | |
| Onepassword | 1Password Service-Account Token | kingfisher.1password.1 |
Medium | Yes | |
| Onepassword | 1Password Account Secret Key | kingfisher.1password.2 |
Medium | ||
| Onesignal | OneSignal REST API Key | kingfisher.onesignal.1 |
Medium | Yes | |
| Openai | OpenAI API Key | kingfisher.openai.1 |
Medium | Yes | |
| Openai | OpenAI API Key | kingfisher.openai.2 |
Medium | Yes | |
| Openai | OpenAI API Key (Short Prefixed) | kingfisher.openai.3 |
Medium | Yes | |
| Openrouter | OpenRouter API Key | kingfisher.openrouter.1 |
Medium | Yes | |
| Openshift | OpenShift API Server URL | kingfisher.openshift.1 |
Medium | ||
| Openshift | OpenShift OAuth Access Token | kingfisher.openshift.2 |
Medium | Yes | |
| Openweathermap | OpenWeather Map API Key | kingfisher.openweather.1 |
Medium | Yes | |
| Opsgenie | OpsGenie API Key | kingfisher.opsgenie.1 |
Unknown | Yes | |
| Optimizely | Optimizely Personal Access Token | kingfisher.optimizely.1 |
Medium | Yes | |
| Oracle | Oracle Database Connection URI | kingfisher.oracle.1 |
Medium | ||
| Ovh | OVH Application Key | kingfisher.ovh.1 |
Low | ||
| Ovh | OVH Application Secret | kingfisher.ovh.2 |
Medium | ||
| Owlbot | Owlbot API Key | kingfisher.owlbot.1 |
Medium | Yes | |
| Packagecloud | PackageCloud API Key | kingfisher.packagecloud.1 |
Medium | Yes | |
| Pagerdutyapikey | PagerDuty API Key | kingfisher.pagerduty.1 |
Medium | Yes | |
| Particle.Io | particle.io Access Token | kingfisher.particleio.1 |
Medium | Yes | Yes |
| Particle.Io | particle.io Access Token | kingfisher.particleio.2 |
Medium | Yes | Yes |
| Pastebin | Pastebin API Key | kingfisher.pastebin.1 |
Medium | Yes | |
| Paypal | PayPal OAuth Client ID | kingfisher.paypal.1 |
Unknown | ||
| Paypal | PayPal OAuth Secret | kingfisher.paypal.2 |
Unknown | Yes | |
| Paystack | Paystack API Key | kingfisher.paystack.1 |
Medium | Yes | |
| Pdflayer | PdfLayer API Key | kingfisher.pdflayer.1 |
Medium | Yes | |
| Pem | PEM-Encoded Private Key | kingfisher.pem.1 |
High | ||
| Pem | Base64-PEM-Encoded Private Key | kingfisher.pem.2 |
High | ||
| Pendo | Pendo Integration Key | kingfisher.pendo.1 |
Medium | Yes | |
| Pepipost | Pepipost API Key | kingfisher.pepipost.1 |
Medium | Yes | |
| Perplexity | Perplexity AI API Key | kingfisher.perplexity.1 |
Medium | Yes | |
| Phpmailer | PHPMailer Credentials | kingfisher.phpmailer.1 |
Medium | ||
| Pinecone | Pinecone API Key | kingfisher.pinecone.1 |
Medium | Yes | |
| Pingdom | Pingdom API Token | kingfisher.pingdom.1 |
Medium | Yes | |
| Pingidentity | PingOne Client ID | kingfisher.pingidentity.1 |
Medium | ||
| Pingidentity | PingOne Client Secret | kingfisher.pingidentity.2 |
Medium | ||
| Pipedrive | Pipedrive API Token | kingfisher.pipedrive.1 |
High | Yes | |
| Plaid | Plaid Client ID (helper) | kingfisher.plaid.1 |
Medium | ||
| Plaid | Plaid Secret (Production) | kingfisher.plaid.2 |
Medium | Yes | |
| Plaid | Plaid Secret (Sandbox) | kingfisher.plaid.3 |
Medium | Yes | |
| Plaid | Plaid Access Token (Production) | kingfisher.plaid.4 |
Medium | Yes | |
| Plaid | Plaid Access Token (Sandbox) | kingfisher.plaid.5 |
Medium | Yes | |
| Planetscale | PlanetScale API Token | kingfisher.planetscale.1 |
Unknown | Yes | |
| Planetscale | PlanetScale Username | kingfisher.planetscale.2 |
Unknown | ||
| Plivo | Plivo Auth ID | kingfisher.plivo.1 |
Low | ||
| Plivo | Plivo Auth Token | kingfisher.plivo.2 |
Medium | Yes | |
| Polymarket | Polymarket Builder Secret | kingfisher.polymarket.1 |
Medium | ||
| Polymarket | Polymarket Builder Passphrase | kingfisher.polymarket.2 |
Medium | ||
| Polymarket | Polymarket Builder API Key | kingfisher.polymarket.3 |
Medium | ||
| Positionstack | Positionstack API Key | kingfisher.positionstack.1 |
Medium | Yes | |
| Postgres | Postgres URL with hardcoded password | kingfisher.postgres.1 |
Medium | Yes | |
| Posthog | PostHog Personal API Key | kingfisher.posthog.2 |
Medium | Yes | |
| Posthog | PostHog Feature Flags Secure API Key | kingfisher.posthog.3 |
Medium | ||
| Posthog | PostHog OAuth Access Token | kingfisher.posthog.4 |
Medium | ||
| Posthog | PostHog OAuth Refresh Token | kingfisher.posthog.5 |
Medium | ||
| Postman | Postman API Key | kingfisher.postman.1 |
Medium | Yes | |
| Postmark | Postmark API Token | kingfisher.postmark.1 |
Medium | Yes | |
| Prefect | Prefect API Token | kingfisher.prefect.1 |
Medium | Yes | |
| Privateai | Private AI API Key | kingfisher.privateai.1 |
Medium | Yes | |
| Privkey | Contains encrypted RSA private key | kingfisher.privkey.1 |
High | ||
| Privkey | Contains Private Key | kingfisher.privkey.2 |
High | ||
| Psexec | Credentials in PsExec | kingfisher.psexec.1 |
Medium | ||
| Pubnub | PubNub Publish Key | kingfisher.pubnub.1 |
Unknown | Yes | |
| Pubnub | PubNub Subscription Key | kingfisher.pubnub.2 |
Medium | Yes | |
| Pulumi | Pulumi API Key | kingfisher.pulumi.1 |
Unknown | Yes | |
| Pushbullet | Pushbullet Access Token | kingfisher.pushbullet.1 |
Medium | Yes | |
| Pusher | Pusher Channels App Key | kingfisher.pusher.1 |
Low | ||
| Pusher | Pusher Channels App Secret | kingfisher.pusher.2 |
Medium | ||
| Pypi | PyPI Upload Token | kingfisher.pypi.1 |
Medium | Yes | |
| Rabbitmq | RabbitMQ Credential | kingfisher.rabbitmq.1 |
Medium | ||
| Rails | Rails Master Key | kingfisher.rails.1 |
High | ||
| Rails | Rails Secret Key Base | kingfisher.rails.2 |
High | ||
| Railway | Railway API Token | kingfisher.railway.1 |
Medium | Yes | |
| Rapidapi | RapidAPI Key | kingfisher.rapidapi.1 |
Medium | Yes | |
| Razorpay | Razorpay API Key | kingfisher.razorpay.1 |
Medium | Yes | |
| Razorpay | Razorpay Test API Key | kingfisher.razorpay.2 |
Medium | Yes | |
| Razorpay | Razorpay API Secret | kingfisher.razorpay.3 |
Medium | ||
| React | React App Username | kingfisher.reactapp.1 |
Medium | ||
| React | React App Password | kingfisher.reactapp.2 |
Medium | ||
| Readme | ReadMe API Key | kingfisher.readme.1 |
Medium | Yes | |
| Recaptcha | reCAPTCHA API Key | kingfisher.recaptcha.1 |
Medium | Yes | |
| Redis | Redis URI Connection String | kingfisher.redis.1 |
Medium | ||
| Redis | Python Redis Client Debug Output | kingfisher.redis.2 |
Medium | ||
| Redis | Redis Password (Standalone Config) | kingfisher.redis.3 |
Low | ||
| Redshift | Amazon Redshift Connection URI | kingfisher.redshift.1 |
Medium | ||
| Render | Render API Key | kingfisher.render.1 |
Medium | Yes | |
| Replicate | Replicate API Token | kingfisher.replicate.1 |
Medium | Yes | |
| Resend | Resend API Key | kingfisher.resend.api_key.1 |
High | Yes | |
| Retellai | Retell AI API Key | kingfisher.retellai.1 |
Medium | Yes | |
| Ringcentral | RingCentral Client ID | kingfisher.ringcentral.1 |
Medium | ||
| Ringcentral | RingCentral Client Secret | kingfisher.ringcentral.2 |
Medium | ||
| Riot | Riot Platform Host | kingfisher.riot.1 |
Medium | ||
| Riot | Riot Games API Key | kingfisher.riot.2 |
Medium | Yes | |
| Rollbar | Rollbar Access Token | kingfisher.rollbar.1 |
Medium | Yes | |
| Rubygems | RubyGems API Key | kingfisher.rubygems.1 |
Medium | Yes | |
| Runway | Runway API Key | kingfisher.runway.1 |
Medium | Yes | |
| Salesforce | Salesforce Access Token | kingfisher.salesforce.1 |
Medium | Yes | |
| Salesforce | Salesforce Instance URL | kingfisher.salesforce.2 |
Medium | ||
| Salesforce | Salesforce Consumer Key | kingfisher.salesforce.3 |
Medium | ||
| Salesforce | Salesforce Consumer Secret | kingfisher.salesforce.4 |
Medium | ||
| Salesforce | Salesforce Consumer Key and Secret | kingfisher.salesforce.5 |
Medium | ||
| Salesforce | Salesforce Refresh Token | kingfisher.salesforce.6 |
Medium | ||
| Salesforce | Salesforce Connected App Consumer Key (Prefixed) | kingfisher.salesforce.7 |
Medium | Yes | |
| Salesloft | Salesloft API Key | kingfisher.salesloft.1 |
Medium | Yes | |
| Samsara | Samsara API Token (prefixed) | kingfisher.samsara.1 |
High | Yes | |
| Samsara | Samsara API Token (contextual) | kingfisher.samsara.2 |
Low | Yes | |
| Sanity | Sanity API Token | kingfisher.sanity.1 |
Medium | Yes | |
| Sauce | Sauce Labs Username | kingfisher.saucelabs.1 |
Medium | ||
| Sauce | Sauce Labs API Endpoint | kingfisher.saucelabs.2 |
Medium | ||
| Sauce | Sauce Labs Access Key | kingfisher.saucelabs.3 |
Medium | Yes | |
| Scale | Scale API Key | kingfisher.scale.1 |
Medium | Yes | |
| Scale | Scale Callback Auth Key | kingfisher.scale.2 |
Medium | ||
| Scaleway | Scaleway Secret Key | kingfisher.scaleway.1 |
Medium | Yes | |
| Scalingo | Scalingo API Token | kingfisher.scalingo.1 |
Medium | Yes | |
| Scalr | Scalr API Access Token | kingfisher.scalr.1 |
High | Yes | |
| Scraperapi | ScraperAPI Key | kingfisher.scraperapi.1 |
Medium | Yes | |
| Segment | Segment Public API Token | kingfisher.segment.1 |
Medium | Yes | |
| Segment | Segment API Key | kingfisher.segment.2 |
Medium | Yes | |
| Sendbird | Sendbird Application ID | kingfisher.sendbird.1 |
Medium | ||
| Sendbird | Sendbird API Token | kingfisher.sendbird.2 |
Medium | Yes | |
| Sendgrid | Sendgrid API token | kingfisher.sendgrid.1 |
Medium | Yes | Yes |
| Sendinblue | Sendinblue API Token | kingfisher.sendinblue.1 |
Medium | Yes | |
| Sentry | Sentry Access Token | kingfisher.sentry.1 |
Medium | Yes | |
| Sentry | Sentry Organization Token | kingfisher.sentry.2 |
Medium | Yes | |
| Sentry | Sentry User Token | kingfisher.sentry.3 |
Medium | Yes | |
| Serpapi | SerpApi API Key | kingfisher.serpapi.1 |
Medium | Yes | |
| Settlemint | SettleMint Personal Access Token | kingfisher.settlemint.1 |
Medium | ||
| Settlemint | SettleMint Application Access Token | kingfisher.settlemint.2 |
Medium | ||
| Settlemint | SettleMint Service Access Token | kingfisher.settlemint.3 |
Medium | ||
| Shippo | Shippo API Token | kingfisher.shippo.1 |
Medium | Yes | |
| Shodan | SHODAN API Key | kingfisher.shodan.1 |
Medium | Yes | |
| Shopify | Shopify access token | kingfisher.shopify.1 |
Unknown | Yes | |
| Shopify | Shopify Domain | kingfisher.shopify.2 |
Unknown | ||
| Shortcut | Shortcut API Token | kingfisher.shortcut.1 |
Medium | Yes | |
| Shutterstock | Shutterstock OAuth Token | kingfisher.shutterstock.1 |
Medium | Yes | |
| Sidekiq | Sidekiq Enterprise Credential | kingfisher.sidekiq.1 |
Medium | ||
| Sidekiq | Sidekiq Sensitive URL | kingfisher.sidekiq.2 |
Medium | ||
| Signifyd | Signifyd API Key | kingfisher.signifyd.1 |
Medium | Yes | |
| Slack | Slack App Token | kingfisher.slack.1 |
Unknown | Yes | Yes |
| Slack | Slack Token | kingfisher.slack.2 |
Unknown | Yes | Yes |
| Slack | Slack Webhook | kingfisher.slack.4 |
Unknown | Yes | |
| Smb | SMB / CIFS Connection URI | kingfisher.smb.1 |
Medium | ||
| Smtp | SMTP Credentials | kingfisher.smtp.1 |
Medium | ||
| Snowflake | Snowflake Connection URI Credentials | kingfisher.snowflake.1 |
Medium | ||
| Snyk | Snyk API Key | kingfisher.snyk.1 |
Unknown | Yes | |
| Solr | Apache Solr Connection URI | kingfisher.solr.1 |
Medium | ||
| Sonarcloud | SonarCloud API Token | kingfisher.sonarcloud.1 |
Unknown | Yes | |
| Sonarqube | SonarQube API Key | kingfisher.sonarqube.1 |
Unknown | Yes | |
| Sonarqube | SonarQube Host | kingfisher.sonarqube.2 |
Unknown | ||
| Sonarqube | SonarQube Token | kingfisher.sonarqube.3 |
Medium | ||
| Sourcegraph | Sourcegraph Access Token | kingfisher.sourcegraph.1 |
Unknown | Yes | |
| Sourcegraph | Sourcegraph _Legacy_ API Key | kingfisher.sourcegraph.2 |
Medium | Yes | |
| Sourcegraph | Sourcegraph Cody Gateway Key | kingfisher.sourcegraph.3 |
Medium | Yes | |
| Sparkpost | SparkPost API Key | kingfisher.sparkpost.1 |
Medium | Yes | |
| Splunk | Splunk Authentication Token | kingfisher.splunk.1 |
Medium | ||
| Spotify | Spotify Access Token | kingfisher.spotify.1 |
Medium | Yes | |
| Sqreen | Sqreen Token | kingfisher.sqreen.1 |
High | ||
| Square | Square Access Token | kingfisher.square.1 |
Medium | Yes | |
| Square | Square Access Token | kingfisher.square.2 |
Medium | Yes | |
| Square | Square OAuth Secret | kingfisher.square.3 |
Medium | Yes | |
| Squarespace | Squarespace API Key | kingfisher.squarespace.1 |
Medium | Yes | |
| Sshpass | SSH / SCP Password (sshpass) | kingfisher.sshpass.1 |
Medium | ||
| Sslmate | SslMate API Key | kingfisher.sslmate.1 |
Medium | Yes | |
| Stabilityai | Stability AI API Key | kingfisher.stabilityai.1 |
Medium | Yes | |
| Stackhawk | StackHawk API Key | kingfisher.stackhawk.1 |
Medium | Yes | |
| Statsig | Statsig Server Secret Key | kingfisher.statsig.1 |
High | Yes | |
| Statuscake | StatusCake API Token | kingfisher.statuscake.1 |
Medium | Yes | |
| Statuspage | Statuspage API Key | kingfisher.statuspage.1 |
Medium | Yes | |
| Storyblok | Storyblok API Token | kingfisher.storyblok.1 |
Medium | Yes | |
| Strava | Strava Access Token | kingfisher.strava.1 |
Medium | Yes | |
| Stream | Stream.io API Key | kingfisher.stream.1 |
Low | ||
| Stream | Stream.io API Secret | kingfisher.stream.2 |
Medium | ||
| Stripe | Stripe Publishable Key | kingfisher.stripe.1 |
Medium | ||
| Stripe | Stripe Secret / Restricted Key | kingfisher.stripe.2 |
Medium | Yes | |
| Stytch | Stytch Project ID | kingfisher.stytch.1 |
Medium | ||
| Stytch | Stytch Project Secret | kingfisher.stytch.2 |
Medium | Yes | |
| Sumologic | Sumo Logic Access ID | kingfisher.sumologic.1 |
Medium | ||
| Sumologic | Sumo Logic Access Key | kingfisher.sumologic.2 |
Medium | Yes | Yes |
| Supabase | Supabase Management Token | kingfisher.supabase.1 |
Medium | Yes | |
| Supabase | Supabase Project API Key | kingfisher.supabase.2 |
Medium | Yes | |
| Supabase | Supabase Project URL | kingfisher.supabase.3 |
Medium | ||
| Surge | Surge.sh Deploy Token | kingfisher.surge.1 |
High | ||
| Tableau | Tableau Personal Access Token | kingfisher.tableau.1 |
Medium | ||
| Tailscale | Tailscale API Key | kingfisher.tailscale.1 |
Medium | Yes | Yes |
| Tavily | Tavily API Key | kingfisher.tavily.1 |
Medium | Yes | |
| Tavus | Tavus API Key | kingfisher.tavus.1 |
Medium | Yes | |
| Teamcity | TeamCity API Token | kingfisher.teamcity.1 |
Unknown | ||
| Telegram | Telegram Bot Token | kingfisher.telegram.1 |
Medium | Yes | |
| Temporal | Temporal Cloud API Key | kingfisher.temporal.1 |
Medium | Yes | |
| Tencent | Tencent Cloud Secret ID | kingfisher.tencent.1 |
Low | ||
| Tencent | Tencent Cloud Secret Key | kingfisher.tencent.2 |
Medium | ||
| Terraform | Terraform Cloud / HCP Terraform API Token | kingfisher.terraform.1 |
High | Yes | |
| Testkube | Testkube API Key | kingfisher.testkube.1 |
Medium | Yes | |
| Testkube | Testkube Organization ID | kingfisher.testkube.2 |
Medium | ||
| Testkube | Testkube Environment ID | kingfisher.testkube.3 |
Medium | ||
| Thingsboard | ThingsBoard Access Token | kingfisher.thingsboard.1 |
Medium | ||
| Thingsboard | ThingsBoard Provision Device Key | kingfisher.thingsboard.2 |
Medium | ||
| Thingsboard | ThingsBoard Provision Device Secret | kingfisher.thingsboard.3 |
Medium | ||
| Thycotic | Thycotic / Delinea Secret Server Credentials | kingfisher.thycotic.1 |
Medium | ||
| Todoist | Todoist API Token | kingfisher.todoist.1 |
Medium | Yes | |
| Togetherai | Together.ai API Key | kingfisher.together.1 |
Medium | Yes | |
| Travisci | Travis CI Token | kingfisher.travisci.1 |
Medium | Yes | |
| Travisci | Travis CI Encrypted Variable | kingfisher.travisci.2 |
Medium | ||
| Trello | Trello API Token | kingfisher.trello.1 |
Medium | ||
| Trendmicro | Trend Micro Deep Security API Key | kingfisher.trendmicro.1 |
High | Yes | |
| Trendmicro | Trend Micro Cloud One API Key | kingfisher.trendmicro.2 |
High | Yes | |
| Truenas | TrueNAS API Key (WebSocket) | kingfisher.truenas.1 |
Medium | Yes | |
| Truenas | TrueNAS API Key (REST API) | kingfisher.truenas.2 |
Medium | Yes | |
| Truenas | TrueNAS Instance URL | kingfisher.truenas.3 |
Medium | ||
| Truenas | TrueNAS API Key (keyword proximity) | kingfisher.truenas.4 |
Medium | Yes | |
| Twilio | Twilio API ID | kingfisher.twilio.1 |
Unknown | ||
| Twilio | Twilio API Key | kingfisher.twilio.2 |
Unknown | Yes | Yes |
| Twitch | Twitch API Token | kingfisher.twitch.1 |
Medium | Yes | Yes |
| X / Twitter Bearer Token (App-only) | kingfisher.twitter.1 |
Medium | Yes | ||
| Twitter Consumer Key | kingfisher.twitter.2 |
Unknown | |||
| X / Twitter Consumer Secret | kingfisher.twitter.3 |
Unknown | Yes | ||
| Typeform | Typeform API Token | kingfisher.typeform.1 |
Medium | Yes | |
| Uber | Uber Server Token | kingfisher.uber.1 |
High | ||
| Ubidots | Ubidots API Key | kingfisher.ubidots.1 |
High | ||
| Unkey | Unkey Root Key | kingfisher.unkey.1 |
Medium | Yes | |
| Unkey | Unkey API Key (key_ prefix) | kingfisher.unkey.2 |
Medium | Yes | |
| Unkey | Unkey API Key Secret (creation-only plaintext) | kingfisher.unkey.3 |
Medium | ||
| Unsplash | Unsplash Access Key | kingfisher.unsplash.1 |
Medium | Yes | |
| Uptimerobot | UptimeRobot API Key | kingfisher.uptimerobot.1 |
Medium | Yes | |
| Uri | URI with Username and Secret | kingfisher.uri.1 |
Medium | Yes | |
| Urlscan | urlscan.io API Key | kingfisher.urlscan.1 |
Medium | Yes | |
| Vapi | Vapi API Key | kingfisher.vapi.1 |
Medium | Yes | |
| Vastai | Vast.ai API Key | kingfisher.vastai.1 |
Medium | Yes | |
| Vercel | Vercel API Token (legacy 24-char) | kingfisher.vercel.1 |
Medium | Yes | Yes |
| Vercel | Vercel Personal Access Token (vcp_) | kingfisher.vercel.2 |
Medium | Yes | Yes |
| Vercel | Vercel Integration Token (vci_) | kingfisher.vercel.3 |
Medium | Yes | Yes |
| Vercel | Vercel App Access Token (vca_) | kingfisher.vercel.4 |
Medium | Yes | Yes |
| Vercel | Vercel App Refresh Token (vcr_) | kingfisher.vercel.5 |
Medium | Yes | Yes |
| Vercel | Vercel AI Gateway API Key (vck_) | kingfisher.vercel.6 |
Medium | Yes | |
| Virustotal | VirusTotal API Key | kingfisher.virustotal.1 |
Medium | Yes | |
| Vkontakte | VKontakte Access Token | kingfisher.vkontakte.1 |
High | Yes | |
| Vmware | Credentials in Connect-VIServer Invocation | kingfisher.vmware.1 |
Unknown | ||
| Vonage | Vonage (Nexmo) API Key | kingfisher.vonage.1 |
Low | ||
| Vonage | Vonage (Nexmo) API Secret | kingfisher.vonage.2 |
Medium | Yes | |
| Voyageai | Voyage AI API Key | kingfisher.voyageai.api_key |
High | Yes | |
| Vultr | Vultr API Key | kingfisher.vultr.1 |
Medium | Yes | Yes |
| Wakatime | WakaTime API Key | kingfisher.wakatime.1 |
Medium | Yes | |
| Wakatime | WakaTime Prefixed API Key | kingfisher.wakatime.2 |
Medium | Yes | |
| Weatherapi | WeatherAPI.com API Key | kingfisher.weatherapi.1 |
Medium | Yes | |
| Webex | Webex Integration Client ID | kingfisher.webex.1 |
Low | ||
| Webex | Webex Integration Client Secret | kingfisher.webex.2 |
Medium | ||
| Webflow | Webflow API Token | kingfisher.webflow.1 |
Medium | Yes | |
| WeChat App ID | kingfisher.wechat.1 |
Low | |||
| WeChat App Secret | kingfisher.wechat.2 |
Medium | |||
| Weightsandbiases | Weights and Biases API Key | kingfisher.wandb.1 |
Medium | Yes | |
| Weightsandbiases | Weights and Biases API Key (v1) | kingfisher.wandb.2 |
Medium | Yes | |
| Wepay | WePay Access Token | kingfisher.wepay.1 |
High | Yes | |
| Wireguard | WireGuard Private Key | kingfisher.wireguard.1 |
Medium | ||
| Wireguard | WireGuard Preshared Key | kingfisher.wireguard.2 |
Medium | ||
| Wiz | Wiz Client ID | kingfisher.wiz.1 |
Medium | ||
| Wiz | Wiz Client Secret | kingfisher.wiz.2 |
Medium | Yes | |
| Workato | Workato API Token | kingfisher.workato.1 |
Medium | Yes | |
| Wpengine | WPEngine API Key | kingfisher.wpengine.1 |
Medium | Yes | |
| Wpengine | WPEngine Account Name | kingfisher.wpengine.2 |
Medium | ||
| Xai | xAI (Grok) API Key | kingfisher.xai.1 |
Medium | Yes | |
| Yahoo | Yahoo OAuth2 Client ID | kingfisher.yahoo.1 |
High | ||
| Yahoo | Yahoo OAuth2 Client Secret | kingfisher.yahoo.2 |
Medium | ||
| Yandex | Yandex API Key | kingfisher.yandex.1 |
Medium | Yes | |
| Yelp | Yelp API Key | kingfisher.yelp.1 |
Medium | Yes | |
| Yousign | YouSign API Key | kingfisher.yousign.1 |
High | Yes | |
| Youtube | YouTube API Key | kingfisher.youtube.1 |
Medium | Yes | |
| Zapier | Zapier Webhook URL | kingfisher.zapier.1 |
Medium | ||
| Zendesk | Zendesk Subdomain | kingfisher.zendesk.1 |
Medium | ||
| Zendesk | Zendesk Account Email | kingfisher.zendesk.2 |
Medium | ||
| Zendesk | Zendesk API Token | kingfisher.zendesk.3 |
Medium | Yes | |
| Zerobounce | ZeroBounce API Key | kingfisher.zerobounce.1 |
Medium | Yes | |
| Zhipu | Zhipu (BigModel) API Key | kingfisher.zhipu.1 |
Medium | Yes | |
| Zohocrm | Zoho CRM API Access Token | kingfisher.zohocrm.1 |
Medium | Yes | |
| Zoom | Zoom OAuth Client ID | kingfisher.zoom.1 |
Low | ||
| Zoom | Zoom OAuth Client Secret | kingfisher.zoom.2 |
Medium | ||
| Zuplo | Zuplo API Key | kingfisher.zuplo.1 |
Medium | Yes |