forked from mirrors/kingfisher
89 KiB
89 KiB
| title | description |
|---|---|
| Built-in Rules List | Complete list of all 734+ built-in secret detection rules in Kingfisher. Searchable and filterable by provider, confidence level, and validation support. |
Built-in Rules
Kingfisher ships with 633 detection rules across 465 providers. Of these, 462 include live validation and 43 support direct revocation.
!!! tip "Search" Use the search box below to filter rules by provider name, rule ID, or confidence level.
| Provider | Rule Name | Rule ID | Confidence | Validates | Revokes |
|---|---|---|---|---|---|
| Ably | Ably API Key | kingfisher.ably.1 |
Medium | Yes | |
| Abstractapi | AbstractAPI API Key | kingfisher.abstractapi.1 |
Medium | Yes | |
| Abuseipdb | AbuseIPDB API Key | kingfisher.abuseipdb.1 |
Medium | Yes | |
| Adafruitio | Adafruit IO Key | kingfisher.adafruitio.1 |
High | Yes | |
| Adobe | Adobe Stock API Key | kingfisher.adobe.1 |
Unknown | Yes | |
| Adobe | Adobe OAuth Client Secret | kingfisher.adobe.3 |
Unknown | ||
| Age | Age Identity (X22519 secret key) | kingfisher.age.2 |
High | ||
| Age | Age Identity (MLKEM768-X25519 secret key) | kingfisher.age.4 |
High | ||
| Agora | Agora App Certificate | kingfisher.agora.2 |
Medium | ||
| Ai21 | AI21 Studio API Key | kingfisher.ai21studio.1 |
Medium | Yes | |
| Ai71 | AI71 API Key | kingfisher.ai71.1 |
Medium | Yes | |
| Airbrake | Airbrake User Key | kingfisher.airbrake.1 |
Medium | Yes | |
| Airtable | Airtable Personal Access Token | kingfisher.airtable.1 |
Medium | Yes | |
| Airtable | Airtable OAuth Token | kingfisher.airtable.2 |
Medium | Yes | |
| Aiven | Aiven API Key | kingfisher.aiven.1 |
Medium | Yes | |
| Akamai | Akamai API Client Secret | kingfisher.akamai.2 |
Medium | ||
| Alchemy | Alchemy API Key | kingfisher.alchemy.1 |
Medium | Yes | |
| Algolia | Algolia Admin API Key | kingfisher.algolia.1 |
Medium | Yes | |
| Alibaba | Alibaba Access Key Secret | kingfisher.alibabacloud.2 |
Medium | Yes | |
| Amazonmws | Amazon MWS Auth Token | kingfisher.amazonmws.1 |
High | ||
| Amplitude | Amplitude Secret Key | kingfisher.amplitude.1 |
Medium | Yes | |
| Anthropic | Anthropic API Key | kingfisher.anthropic.1 |
High | Yes | |
| Anthropic | Anthropic Admin API Key | kingfisher.anthropic.2 |
Medium | Yes | |
| Anypoint | Anypoint API Key | kingfisher.anypoint.1 |
Medium | Yes | |
| Apify | Apify API Token | kingfisher.apify.1 |
High | Yes | |
| Apollo | Apollo API Key | kingfisher.apollo.1 |
Medium | Yes | |
| Appcenter | Visual Studio App Center API Token | kingfisher.appcenter.1 |
Medium | Yes | |
| Artifactory | Artifactory Access Token | kingfisher.artifactory.1 |
High | Yes | |
| Artifactory | Artifactory Identity Reference Token | kingfisher.artifactory.3 |
Medium | Yes | |
| Artifactory | Artifactory NPM Auth (base64) | kingfisher.artifactory.4 |
Medium | ||
| Asana | Asana Client ID | kingfisher.asana.1 |
Medium | ||
| Asana | Asana Client Secret | kingfisher.asana.2 |
Medium | ||
| Asana | Asana OAuth / Personal Access Token (Legacy) | kingfisher.asana.3 |
Medium | Yes | |
| Asana | Asana OAuth / Personal Access Token (V1) | kingfisher.asana.4 |
Medium | Yes | |
| Asana | Asana OAuth / Personal Access Token (V2) | kingfisher.asana.5 |
Medium | Yes | |
| Assemblyai | AssemblyAI API Key | kingfisher.assemblyai.1 |
Medium | Yes | |
| Atlassian | Atlassian API token | kingfisher.atlassian.1 |
Medium | Yes | |
| Atlassian | Atlassian Admin API Key | kingfisher.atlassian.3 |
Medium | Yes | |
| Auth0 | Auth0 Client Secret | kingfisher.auth0.2 |
Medium | Yes | |
| Authress | Authress Service Client Access Key | kingfisher.authress.1 |
Medium | Yes | |
| Aviationstack | AviationStack API Key | kingfisher.aviationstack.1 |
Medium | Yes | |
| Aws | AWS Secret Access Key | kingfisher.aws.2 |
Medium | Yes | Yes |
| Aws | AWS Session Token | kingfisher.aws.4 |
Medium | ||
| Aws | AWS Bedrock API Key (Short-lived) | kingfisher.aws.6 |
Medium | Yes | |
| Aws | AWS Bedrock API Key (Long-lived) | kingfisher.aws.bedrock.long_lived |
Medium | Yes | |
| Azure | Azure Connection String | kingfisher.azure.1 |
Medium | ||
| Azure | Azure App Configuration Connection String | kingfisher.azure.2 |
Medium | ||
| Azure | Azure Personal Access Token | kingfisher.azure.3 |
Medium | ||
| Azure | Azure Container Registry Password | kingfisher.azure.5 |
Medium | Yes | |
| Azure Notification Hub | Azure Notification Hub Access Key | kingfisher.azure.notificationhub.4 |
Medium | Yes | |
| Azuredevops | Azure DevOps Personal Access Token | kingfisher.azure.devops.2 |
Medium | Yes | |
| Azureopenai | Azure OpenAI API Key | kingfisher.azureopenai.1 |
Medium | Yes | |
| Azuresearchquery | Azure Search Query Key | kingfisher.azuresearch.key.1 |
Medium | Yes | |
| Azuresearchquery | Azure Search URL | kingfisher.azuresearch.url.1 |
Medium | ||
| Azurespeech | Azure Speech API Key | kingfisher.azurespeech.2 |
Medium | Yes | |
| Azurestorage | Azure Storage Account Key | kingfisher.azurestorage.2 |
Medium | Yes | |
| Azuretranslator | Azure Translator API Key | kingfisher.azuretranslator.2 |
Medium | Yes | |
| Baremetrics | Baremetrics API Key | kingfisher.baremetrics.1 |
Medium | Yes | |
| Baseten | Baseten API Key | kingfisher.baseten.1 |
Medium | Yes | |
| Beamer | Beamer API token | kingfisher.beamer.1 |
Medium | Yes | |
| Betterstack | Better Stack API Token | kingfisher.betterstack.1 |
Medium | Yes | |
| Bitbucket | Bitbucket Client ID | kingfisher.bitbucket.1 |
Medium | Yes | |
| Bitbucket | Bitbucket Secret | kingfisher.bitbucket.3 |
Medium | Yes | |
| Bitfinex | Bitfinex API Secret | kingfisher.bitfinex.2 |
Medium | ||
| Bitly | Bitly Access Token | kingfisher.bitly.1 |
Medium | Yes | |
| Blynk | Blynk Device Access Token | kingfisher.blynk.1 |
Medium | ||
| Blynk | Blynk Organization Access Token | kingfisher.blynk.2 |
Medium | ||
| Blynk | Blynk Organization Access Token | kingfisher.blynk.3 |
Medium | ||
| Blynk | Blynk Organization Client Credentials | kingfisher.blynk.8 |
Medium | ||
| Blynk | Blynk Organization Client Credentials | kingfisher.blynk.9 |
Medium | ||
| Box | Box API Access Token | kingfisher.box.1 |
Medium | Yes | |
| Braintree | Braintree Tokenization Key | kingfisher.braintree.1 |
Medium | ||
| Branchio | Branch.io Live Key | kingfisher.branchio.1 |
Medium | Yes | |
| Branchio | Branch.io Test Key | kingfisher.branchio.2 |
Medium | ||
| Brave | Brave Search API Key | kingfisher.brave.1 |
Medium | Yes | |
| Brevo | Brevo API Token | kingfisher.brevo.1 |
High | Yes | |
| Browserstack | BrowserStack Access Key | kingfisher.browserstack.1 |
Medium | Yes | Yes |
| Buildkite | Buildkite API Key | kingfisher.buildkite.1 |
Medium | Yes | Yes |
| Bunnynet | Bunny.net API Key | kingfisher.bunnynet.1 |
Medium | Yes | |
| Calendly | Calendly Personal Access Token | kingfisher.calendly.1 |
Medium | Yes | |
| Carto | CARTO API Access Token (JWT) | kingfisher.carto.1 |
Medium | ||
| Cerebras | Cerebras AI API Key | kingfisher.cerebras.1 |
High | Yes | |
| Checkout | Checkout.com Secret Key | kingfisher.checkout.1 |
High | Yes | |
| Checkout | Checkout.com Sandbox Secret Key | kingfisher.checkout.2 |
High | Yes | |
| Circleci | CircleCI API Personal Access Token | kingfisher.circleci.1 |
High | Yes | |
| Circleci | CircleCI API Project Token | kingfisher.circleci.2 |
Medium | Yes | |
| Ciscomeraki | Cisco Meraki API Key | kingfisher.ciscomeraki.1 |
Medium | Yes | |
| Clarifai | Clarifai API Key | kingfisher.clarifai.1 |
Medium | Yes | |
| Clay | Clay API Key | kingfisher.clay.1 |
Medium | ||
| Clearbit | Clearbit API Key | kingfisher.clearbit.1 |
Medium | Yes | |
| Clearout | Clearout API Token | kingfisher.clearout.1 |
Medium | Yes | |
| Clerk | Clerk Secret Key | kingfisher.clerk.1 |
Medium | Yes | |
| Clickhouse | ClickHouse Cloud Secret Key | kingfisher.clickhouse.1 |
High | Yes | |
| Clockwork | Clockwork SMS API Key | kingfisher.clockwork.1 |
Medium | Yes | |
| Clojars | Clojars API Token | kingfisher.clojars.2 |
Medium | ||
| Cloudant | IBM Cloudant Legacy Credentials | kingfisher.cloudant.1 |
High | ||
| Cloudflare | Cloudflare API Token | kingfisher.cloudflare.1 |
Medium | Yes | Yes |
| Cloudflare | Cloudflare CA Key | kingfisher.cloudflare.2 |
Medium | Yes | |
| Cloudinary | Cloudinary API Secret | kingfisher.cloudinary.1 |
Medium | Yes | |
| Cloudsight | CloudSight API Key | kingfisher.cloudsight.1 |
Medium | Yes | |
| Codacy | Codacy API Key | kingfisher.codacy.1 |
Medium | Yes | |
| Codeclimate | CodeClimate Reporter ID | kingfisher.codeclimate.1 |
Medium | Yes | |
| Codecov | Codecov Access Token | kingfisher.codecov.1 |
Medium | Yes | |
| Coderabbit | CodeRabbit API Key | kingfisher.coderabbit.1 |
Medium | Yes | |
| Cohere | Cohere API Key | kingfisher.cohere.1 |
Medium | Yes | |
| Coinbase | Coinbase Access Token | kingfisher.coinbase.1 |
Unknown | Yes | |
| Coinbase | Coinbase CDP API Key (ECDSA) | kingfisher.coinbase.2 |
Unknown | Yes | |
| Coinbase | Coinbase CDP API Key (Ed25519) | kingfisher.coinbase.3 |
Unknown | Yes | |
| Coinlayer | Coinlayer API Key | kingfisher.coinlayer.1 |
Medium | Yes | |
| Confluent | Confluent API Secret | kingfisher.confluent.2 |
Medium | Yes | Yes |
| Confluent | Confluent API Secret - Updated Format | kingfisher.confluent.3 |
Medium | Yes | Yes |
| Contentful | Contentful Delivery API Token | kingfisher.contentful.1 |
Medium | Yes | |
| Contentful | Contentful Personal Access Token | kingfisher.contentful.2 |
Medium | Yes | |
| Contentstack | Contentstack Management Token | kingfisher.contentstack.1 |
Medium | Yes | |
| Couchbase | Couchbase Capella API Key | kingfisher.couchbase.1 |
Medium | Yes | |
| Coveralls | Coveralls Personal API Token | kingfisher.coveralls.2 |
Medium | Yes | |
| Coze | Coze Personal Access Token | kingfisher.coze.1 |
Medium | Yes | |
| Crates.Io | crates.io API Key | kingfisher.cratesio.1 |
Medium | ||
| Credentials | Credentials in a URL | kingfisher.credentials.1 |
Medium | ||
| Curl | Curl Basic Authentication Credentials | kingfisher.curl.1 |
Low | ||
| Curl | Curl Header Authentication | kingfisher.curl.2 |
Low | ||
| Currencylayer | Currencylayer API Key | kingfisher.currencylayer.1 |
Medium | Yes | |
| Cursor | Cursor Integrations (User) API Key | kingfisher.cursor.1 |
Medium | Yes | |
| Customerio | Customer.io Tracking API Key | kingfisher.customerio.1 |
Medium | ||
| Customerio | Customer.io App API Key | kingfisher.customerio.2 |
Medium | Yes | |
| Cypress | Cypress Record Key | kingfisher.cypress.1 |
Medium | Yes | |
| Daily | Daily API Key | kingfisher.daily.1 |
Medium | Yes | |
| Databento | Databento API Key | kingfisher.databento.1 |
Medium | Yes | |
| Databricks | Databricks API token | kingfisher.databricks.1 |
Medium | ||
| Databricks | Databricks API Token | kingfisher.databricks.2 |
Medium | Yes | |
| Datadog | Datadog API Key | kingfisher.datadog.2 |
Medium | Yes | |
| Datadog | Datadog Application Key | kingfisher.datadog.3 |
Medium | Yes | |
| Datagov | Data.gov API Key | kingfisher.datagov.1 |
Medium | Yes | |
| Datastax | DataStax Astra Application Token | kingfisher.datastax.1 |
Medium | Yes | |
| Db2 | IBM DB2 / AS400 Credentials | kingfisher.db2.1 |
Medium | ||
| Deepgram | Deepgram API Key | kingfisher.deepgram.1 |
Medium | Yes | |
| Deepseek | DeepSeek API Key | kingfisher.deepseek.1 |
Medium | Yes | |
| Definednetworking | Defined Networking API Token | kingfisher.definednetworking.1 |
Medium | Yes | |
| Delighted | Delighted API Key | kingfisher.delighted.1 |
Medium | Yes | |
| Deno | Deno Account Token | kingfisher.deno.1 |
Medium | Yes | |
| Dependency Track | Dependency-Track API Key | kingfisher.dtrack.1 |
Medium | ||
| Devcycle | DevCycle Client SDK Key | kingfisher.devcycle.1 |
Medium | Yes | |
| Devcycle | DevCycle Mobile SDK Key | kingfisher.devcycle.2 |
Medium | Yes | |
| Devcycle | DevCycle Server SDK Key | kingfisher.devcycle.3 |
Medium | Yes | |
| Deviantart | DeviantArt Access Token | kingfisher.deviantart.1 |
Medium | Yes | Yes |
| Diffbot | Diffbot API Key | kingfisher.diffbot.1 |
Unknown | Yes | |
| Dify | Dify API Key | kingfisher.dify.1 |
Medium | Yes | |
| Digitalocean | DigitalOcean API Key | kingfisher.digitalocean.1 |
Medium | Yes | |
| Digitalocean | DigitalOcean Refresh Token | kingfisher.digitalocean.2 |
Medium | Yes | |
| Discord | Discord Webhook URL | kingfisher.discord.1 |
Medium | Yes | |
| Discord | Discord Bot Token | kingfisher.discord.2 |
Medium | Yes | |
| Disqus | Disqus API Key | kingfisher.disqus.1 |
Medium | Yes | |
| Django | Django Secret Key | kingfisher.django.1 |
Medium | ||
| Docker | Docker Registry Credentials (auths JSON) | kingfisher.docker.1 |
Medium | Yes | |
| Dockerhub | Docker Hub Personal Access Token | kingfisher.dockerhub.1 |
Medium | Yes | |
| Dockerhub | Docker Hub Organization Access Token | kingfisher.dockerhub.3 |
Medium | Yes | |
| Docusign | DocuSign API Secret Key | kingfisher.docusign.1 |
Medium | ||
| Doppler | Doppler CLI Token | kingfisher.doppler.1 |
Medium | Yes | Yes |
| Doppler | Doppler Personal Token | kingfisher.doppler.2 |
Medium | Yes | Yes |
| Doppler | Doppler Service Token | kingfisher.doppler.3 |
Medium | Yes | Yes |
| Doppler | Doppler Service Account Token | kingfisher.doppler.4 |
Medium | Yes | Yes |
| Doppler | Doppler SCIM Token | kingfisher.doppler.5 |
Medium | Yes | Yes |
| Doppler | Doppler Audit Token | kingfisher.doppler.6 |
Medium | Yes | Yes |
| Droneci | DroneCI Access Token | kingfisher.drone.1 |
Medium | Yes | |
| Dropbox | Dropbox API secret/key | kingfisher.dropbox.1 |
Medium | Yes | |
| Duffel | Duffel API Token | kingfisher.duffel.1 |
High | Yes | |
| Duo | Duo Security Secret Key | kingfisher.duo.2 |
Medium | ||
| Duplocloud | DuploCloud API Key | kingfisher.duplocloud.1 |
Medium | ||
| Dwolla | Dwolla Client Secret | kingfisher.dwolla.2 |
Medium | ||
| Dynatrace | Dynatrace Token | kingfisher.dynatrace.1 |
Medium | Yes | |
| Easypost | EasyPost API token | kingfisher.easypost.1 |
Medium | Yes | |
| Elasticemail | Elastic Email API Key | kingfisher.elasticemail.1 |
Medium | Yes | |
| Elevenlabs | ElevenLabs API Key | kingfisher.elevenlabs.1 |
Medium | Yes | |
| Endorlabs | Endor Labs API Secret | kingfisher.endorlabs.2 |
Medium | Yes | |
| Equinix | Equinix Metal / Packet API Token | kingfisher.equinix.1 |
High | Yes | |
| Eraserio | Eraser API Key | kingfisher.eraser.1 |
Medium | Yes | |
| Etsy | Etsy Open API Key | kingfisher.etsy.1 |
Medium | Yes | |
| Eventbrite | Eventbrite API Key | kingfisher.eventbrite.1 |
Medium | Yes | |
| Exaai | Exa AI API Key | kingfisher.exa.1 |
Medium | Yes | |
| Facebook Secret Key | kingfisher.facebook.2 |
Unknown | Yes | ||
| Facebook Access Token | kingfisher.facebook.3 |
Medium | |||
| Fastly | Fastly API token | kingfisher.fastly.1 |
Medium | Yes | |
| Fernet | Fernet Symmetric Encryption Key | kingfisher.fernet.1 |
High | ||
| Figma | Figma Personal Access Token | kingfisher.figma.1 |
Medium | Yes | |
| Figma | Figma Personal Access Header Token | kingfisher.figma.2 |
Unknown | Yes | |
| Fileio | FileIO Secret Key | kingfisher.fileio.1 |
Medium | Yes | |
| Filezilla | FileZilla base64 encoded password | kingfisher.filezilla.1 |
Low | ||
| Filezilla | FileZilla stored password (Pass plaintext) | kingfisher.filezilla.2 |
Low | ||
| Finicity | Finicity API token | kingfisher.finicity.1 |
Medium | Yes | |
| Finicity | Finicity client secret | kingfisher.finicity.2 |
Medium | Yes | |
| Finnhub | Finnhub API Token | kingfisher.finnhub.1 |
Medium | Yes | |
| Firebase | Firebase Cloud Messaging Server Key | kingfisher.firebase.1 |
Medium | ||
| Firebase | Firebase Cloud Messaging Device Token | kingfisher.firebase.2 |
Medium | ||
| Firecrawl | Firecrawl API Key | kingfisher.firecrawl.1 |
Medium | Yes | |
| Fireworksai | Fireworks.ai API Key | kingfisher.fireworks.1 |
Medium | Yes | |
| Fixer | Fixer.io API Key | kingfisher.fixer.1 |
Medium | Yes | |
| Fleetbase | Fleetbase API Key | kingfisher.fleetbase.1 |
Medium | Yes | |
| Flickr | Flickr API Key | kingfisher.flickr.1 |
Medium | Yes | |
| Flickr | Flickr OAuth Token | kingfisher.flickr.2 |
Medium | Yes | |
| Flutterwave | Flutterwave Public Key | kingfisher.flutterwave.1 |
Medium | ||
| Flutterwave | Flutterwave Secret Key | kingfisher.flutterwave.2 |
Medium | ||
| Flyio | Fly.io API Token | kingfisher.flyio.1 |
Medium | Yes | |
| Forestadmin | Forest Admin Auth Secret | kingfisher.forestadmin.1 |
High | ||
| Foursquare | Foursquare Client Secret | kingfisher.foursquare.2 |
Medium | Yes | |
| Frameio | Frame.io API Token | kingfisher.frameio.1 |
Medium | Yes | |
| Freemius | Freemius Secret Key | kingfisher.freemius.1 |
Medium | ||
| Freshbooks | FreshBooks Access Token | kingfisher.freshbooks.1 |
Medium | Yes | |
| Freshdesk | Freshdesk API Key | kingfisher.freshdesk.2 |
Medium | Yes | |
| Friendli | Friendli.ai API Key | kingfisher.friendli.1 |
Medium | Yes | |
| Ftp | FTP Connection URI Credentials | kingfisher.ftp.1 |
Medium | ||
| Fullcontact | FullContact API Key | kingfisher.fullcontact.1 |
Medium | Yes | |
| Fullstory | Fullstory API Key | kingfisher.fullstory.1 |
Medium | Yes | |
| Gcnotify | GC Notify API Key | kingfisher.gcnotify.1 |
Medium | Yes | |
| Gcp | GCP API Token | kingfisher.gcp.1 |
High | Yes | Yes |
| Gcp | GCP Private Key ID | kingfisher.gcp.3 |
Medium | ||
| Gemfury | Gemfury Deploy or Push Token | kingfisher.gemfury.1 |
High | ||
| Gemfury | Gemfury Full Access Token | kingfisher.gemfury.2 |
High | ||
| Gemstash | Gemstash API Key | kingfisher.gemstash.1 |
High | ||
| Generic | Generic Secret | kingfisher.generic.1 |
Low | ||
| Generic | Generic API Key | kingfisher.generic.2 |
Low | ||
| Generic | Generic Username and Password | kingfisher.generic.3 |
Low | ||
| Generic | Generic Username and Password | kingfisher.generic.4 |
Low | ||
| Generic | Generic Password | kingfisher.generic.5 |
Low | ||
| Generic | Weak Password Pattern | kingfisher.generic.6 |
Low | ||
| Generic | Generic Username and Password | kingfisher.generic.8 |
Low | ||
| Generic | Docker Robot Credentials (plaintext pair) | kingfisher.generic.9 |
Low | ||
| Geoapify | Geoapify API Key | kingfisher.geoapify.1 |
Medium | Yes | |
| Gitalk | Gitalk OAuth Credentials | kingfisher.gitalk.1 |
Medium | ||
| Gitea | Gitea Access Token | kingfisher.gitea.1 |
Medium | Yes | |
| Github | GitHub Personal Access Token - fine-grained permissions | kingfisher.github.1 |
Unknown | Yes | Yes |
| Github | GitHub Personal Access Token | kingfisher.github.2 |
Unknown | Yes | Yes |
| Github | GitHub OAuth Access Token | kingfisher.github.3 |
Medium | Yes | |
| Github | GitHub App User-to-Server Token | kingfisher.github.4 |
Unknown | Yes | |
| Github | GitHub App Server-to-Server Token | kingfisher.github.5 |
Unknown | Yes | Yes |
| Github | GitHub Refresh Token | kingfisher.github.6 |
Unknown | Yes | |
| Github | GitHub Legacy Secret Key | kingfisher.github.8 |
Unknown | Yes | |
| Gitlab | GitLab Private Token | kingfisher.gitlab.1 |
Medium | Yes | Yes |
| Gitlab | GitLab Runner Registration Token | kingfisher.gitlab.2 |
Unknown | Yes | |
| Gitlab | GitLab Pipeline Trigger Token | kingfisher.gitlab.3 |
Unknown | Yes | |
| Gitlab | GitLab Private Token - Routable Format | kingfisher.gitlab.4 |
Medium | Yes | Yes |
| Gitter | Gitter Access Token | kingfisher.gitter.1 |
Medium | Yes | |
| Gocardless | GoCardless API Token | kingfisher.gocardless.1 |
Medium | Yes | |
| Godaddy | GoDaddy API Credentials | kingfisher.godaddy.1 |
Medium | Yes | |
| Google OAuth Client Secret | kingfisher.google.2 |
Medium | |||
| Google OAuth Client Secret | kingfisher.google.3 |
Medium | |||
| Google OAuth Access Token | kingfisher.google.4 |
Medium | |||
| Google OAuth Credentials | kingfisher.google.6 |
Medium | |||
| Google Gemini API Key | kingfisher.google.7 |
Medium | Yes | ||
| Googleoauth2 | Google OAuth2 Access Token | kingfisher.google.oauth2.1 |
Medium | Yes | |
| Gradle | Hardcoded Gradle Credentials | kingfisher.gradle.1 |
Medium | ||
| Grafana | Grafana API Token | kingfisher.grafana.1 |
Medium | Yes | |
| Grafana | Grafana Cloud API Token | kingfisher.grafana.2 |
Medium | Yes | |
| Grafana | Grafana Service Account Token | kingfisher.grafana.3 |
Medium | Yes | |
| Groq | Groq API Key | kingfisher.groq.1 |
High | Yes | |
| Guardian | Guardian API Key | kingfisher.guardian.1 |
Medium | Yes | |
| Gumroad | Gumroad Access Token | kingfisher.gumroad.1 |
Medium | Yes | |
| Harness | Harness Personal Access Token (PAT) | kingfisher.harness.pat.1 |
Medium | Yes | Yes |
| Hashes | Password Hash (Kerberos 5, etype 23, AS-REP) | kingfisher.krb5.asrep.23.1 |
Medium | ||
| Hashes | Password Hash (md5crypt) | kingfisher.pwhash.1 |
Medium | ||
| Hashes | Password Hash (bcrypt) | kingfisher.pwhash.2 |
Medium | ||
| Hashes | Password Hash (sha256crypt) | kingfisher.pwhash.3 |
Medium | ||
| Hashes | Password Hash (sha512crypt) | kingfisher.pwhash.4 |
Medium | ||
| Hashes | Password Hash (Cisco IOS PBKDF2 with SHA256) | kingfisher.pwhash.5 |
Medium | ||
| Hashicorp | Hashicorp Vault Service Token (< v1.10) | kingfisher.hashicorp.1 |
Medium | ||
| Hashicorp | Hashicorp Vault Batch Token (< v1.10) | kingfisher.hashicorp.2 |
Medium | ||
| Hashicorp | Hashicorp Vault Recovery Token (< v1.10) | kingfisher.hashicorp.3 |
Medium | ||
| Hashicorp | Hashicorp Vault Service Token (>= v1.10) | kingfisher.hashicorp.4 |
Medium | ||
| Hashicorp | Hashicorp Vault Batch Token (>= v1.10) | kingfisher.hashicorp.5 |
Medium | ||
| Hashicorp | Hashicorp Vault Recovery Token (>= v1.10) | kingfisher.hashicorp.6 |
Medium | ||
| Hashicorp | Hashicorp Vault Unseal Key | kingfisher.hashicorp.7 |
Medium | ||
| Heartland | Heartland Portico API Key | kingfisher.heartland.1 |
High | Yes | |
| Helpscout | Help Scout OAuth Client Secret | kingfisher.helpscout.2 |
Medium | Yes | |
| Hereapi | HERE API Key | kingfisher.hereapi.1 |
Medium | Yes | |
| Heroku | Heroku API Key | kingfisher.heroku.1 |
Medium | Yes | Yes |
| Heroku | Heroku API Key (Platform Key) | kingfisher.heroku.2 |
Medium | Yes | Yes |
| Honeycomb | Honeycomb API Key | kingfisher.honeycomb.1 |
Medium | Yes | |
| Http | HTTP Basic Authentication | kingfisher.http.1 |
Low | ||
| Http | HTTP Bearer Token | kingfisher.http.2 |
Low | ||
| Huawei | Huawei Open Platform Client Secret | kingfisher.huawei.2 |
Medium | ||
| Hubspot | HubSpot Private App Token | kingfisher.hubspot.1 |
Medium | Yes | |
| Huggingface | HuggingFace User Access Token | kingfisher.huggingface.1 |
Medium | Yes | |
| Hunterio | Hunter.io API Key | kingfisher.hunterio.1 |
Medium | Yes | |
| Ibm | IBM Cloud User API Key | kingfisher.ibm.1 |
Medium | Yes | |
| Imagekit | ImageKit Private API Key | kingfisher.imagekit.1 |
Medium | Yes | |
| Influxdb | InfluxDB API Token | kingfisher.influxdb.1 |
Medium | Yes | |
| Infracost | Infracost API Token | kingfisher.infracost.1 |
High | Yes | |
| Infura | Infura API Key | kingfisher.infura.1 |
Medium | Yes | |
| Instagram Graph API Access Token | kingfisher.instagram.1 |
High | Yes | ||
| Instantly | Instantly API Key | kingfisher.instantly.1 |
Medium | Yes | |
| Intercom | Intercom API Token | kingfisher.intercom.1 |
Medium | Yes | |
| Intra42 | Intra42 Client Secret (s-s4t2ud/af) | kingfisher.intra42.2 |
Medium | Yes | |
| Ionic | Ionic API token | kingfisher.ionic.1 |
High | Yes | |
| Ipstack | IpStack API Key | kingfisher.ipstack.1 |
Medium | Yes | |
| Iterable | Iterable API Key | kingfisher.iterable.1 |
Medium | Yes | |
| Jdbc | JDBC connection string with embedded credentials | kingfisher.jdbc.1 |
Medium | Yes | |
| Jenkins | Jenkins Token or Crumb | kingfisher.jenkins.1 |
Medium | ||
| Jfrog | JFrog API Key | kingfisher.jfrog.2 |
Medium | Yes | |
| Jfrog | JFrog Identity Token | kingfisher.jfrog.3 |
Medium | Yes | |
| Jina | Jina Search Foundation API Key | kingfisher.jina.1 |
High | Yes | |
| Jira | Jira Token | kingfisher.jira.2 |
Medium | Yes | |
| Jotform | Jotform API Key | kingfisher.jotform.1 |
Medium | Yes | |
| Jumpcloud | Jumpcloud API Key | kingfisher.jumpcloud.1 |
Medium | Yes | |
| Jwt | JSON Web Token (base64url-encoded) | kingfisher.jwt.1 |
Medium | Yes | |
| Kagi | Kagi API Key | kingfisher.kagi.1 |
Medium | Yes | |
| Kairos | Kairos API Key | kingfisher.kairos.2 |
Medium | ||
| Keenio | Keen.io API Key | kingfisher.keenio.1 |
Medium | Yes | |
| Keycloak | Keycloak Client Secret | kingfisher.keycloak.2 |
Medium | ||
| Kickbox | Kickbox API Key | kingfisher.kickbox.1 |
Medium | Yes | |
| Klaviyo | Klaviyo API Key | kingfisher.klaviyo.1 |
Medium | Yes | |
| Klingai | Kling AI Secret Key | kingfisher.klingai.1 |
Medium | Yes | |
| Kraken | Kraken API Secret | kingfisher.kraken.1 |
Medium | ||
| Kubernetes | Kubernetes Bootstrap Token | kingfisher.kubernetes.2 |
Medium | Yes | |
| Kubernetes | Kubernetes Bootstrap Token Pair | kingfisher.kubernetes.3 |
Medium | Yes | |
| Kucoin | KuCoin API Key | kingfisher.kucoin.1 |
Medium | ||
| Kucoin | KuCoin API Secret | kingfisher.kucoin.2 |
Medium | ||
| Lacework | Lacework API Secret | kingfisher.lacework.2 |
High | ||
| Langchain | LangSmith Personal Access Token | kingfisher.langchain.1 |
Unknown | Yes | |
| Langchain | LangSmith Service Key | kingfisher.langchain.2 |
Unknown | Yes | |
| Langfuse | Langfuse Secret Key | kingfisher.langfuse.1 |
Medium | Yes | |
| Laravel | Laravel Application Encryption Key | kingfisher.laravel.1 |
High | ||
| Lark | LarkSuite Tenant Access Token | kingfisher.lark.1 |
Medium | Yes | |
| Lark | LarkSuite User Access Token | kingfisher.lark.2 |
Medium | Yes | |
| Lark | LarkSuite App Access Token | kingfisher.lark.3 |
Medium | Yes | |
| Launchdarkly | LaunchDarkly Access Token | kingfisher.launchdarkly.1 |
Medium | Yes | |
| Ldap | LDAP Credentials | kingfisher.ldap.1 |
Medium | ||
| Lemonsqueezy | LemonSqueezy API Key | kingfisher.lemonsqueezy.1 |
Medium | Yes | |
| Line | Line Messaging API Token | kingfisher.line.1 |
Medium | Yes | |
| Linear | Linear API Key | kingfisher.linear.1 |
Medium | Yes | |
| LinkedIn Client ID | kingfisher.linkedin.1 |
Medium | Yes | ||
| LinkedIn Secret Key | kingfisher.linkedin.2 |
Medium | Yes | ||
| Linode | Linode Personal Access Token | kingfisher.linode.1 |
Medium | Yes | |
| Llamacloud | Llama Cloud API Key | kingfisher.llamacloud.1 |
High | ||
| Lob | Lob API Key | kingfisher.lob.1 |
Medium | Yes | |
| Lob | Lob Publishable API Key | kingfisher.lob.2 |
Medium | Yes | |
| Lokalise | Lokalise API Token | kingfisher.lokalise.1 |
Medium | Yes | |
| Looker | Looker Client ID | kingfisher.looker.2 |
Medium | ||
| Looker | Looker Client Secret | kingfisher.looker.3 |
Medium | Yes | |
| Mailchimp | Mailchimp API Key | kingfisher.mailchimp.1 |
Medium | Yes | |
| Mailgun | MailGun Token | kingfisher.mailgun.1 |
Medium | Yes | |
| Mailgun | MailGun Primary Key | kingfisher.mailgun.2 |
Medium | Yes | |
| Mailjet | MailJetSMS API Key | kingfisher.mailjet.1 |
Medium | Yes | |
| Mailjet | MailJet Basic Auth | kingfisher.mailjet.2 |
Medium | Yes | |
| Mandrill | Mandrill API Key | kingfisher.mandrill.1 |
Medium | Yes | |
| Mapbox | Mapbox Public Access Token | kingfisher.mapbox.1 |
Medium | Yes | |
| Mapbox | Mapbox Secret Access Token | kingfisher.mapbox.2 |
Medium | Yes | Yes |
| Mapbox | Mapbox Temporary Access Token | kingfisher.mapbox.3 |
Medium | Yes | |
| Mariadb | MariaDB Credentials | kingfisher.mariadb.1 |
Medium | ||
| Mattermost | Mattermost Access Token | kingfisher.mattermost.2 |
Medium | Yes | |
| Maxmind | MaxMind License Key | kingfisher.maxmind.1 |
Medium | Yes | |
| Mercadopago | Mercado Pago Access Token | kingfisher.mercadopago.1 |
Medium | Yes | |
| Mercury | Mercury Production API Token | kingfisher.mercury.1 |
Medium | Yes | |
| Mercury | Mercury Non-Production API Token | kingfisher.mercury.2 |
Medium | Yes | |
| Mergify | Mergify Application API Key | kingfisher.mergify.1 |
High | Yes | |
| Messagebird | MessageBird API Token | kingfisher.messagebird.1 |
Medium | Yes | |
| Microsoft Teams | Microsoft Teams Webhook | kingfisher.msteams.1 |
Medium | Yes | |
| Microsoftteamswebhook | Microsoft Teams Webhook | kingfisher.microsoftteamswebhook.1 |
Medium | Yes | |
| Midtrans | Midtrans Sandbox Server/Client Key | kingfisher.midtrans.1 |
High | Yes | |
| Midtrans | Midtrans Production Server/Client Key | kingfisher.midtrans.2 |
High | Yes | |
| Miro | Miro Access Token | kingfisher.miro.1 |
Medium | Yes | |
| Mistral | Mistral AI API Key | kingfisher.mistral.1 |
Medium | Yes | |
| Mixpanel | Mixpanel API Secret | kingfisher.mixpanel.1 |
Medium | Yes | |
| Modal | Modal CLI Token Pair | kingfisher.modal.1 |
High | Yes | |
| Monday | Monday.com API Key | kingfisher.monday.1 |
Medium | Yes | |
| Moneywave | Moneywave / Flutterwave Private Key | kingfisher.moneywave.1 |
High | ||
| Mongodb | MongoDB API Private Key | kingfisher.mongodb.1 |
Unknown | Yes | Yes |
| Mongodb | MongoDB URI Connection String | kingfisher.mongodb.3 |
Unknown | Yes | |
| Mongodb | MongoDB Atlas Service Account Token | kingfisher.mongodb.4 |
Unknown | Yes | |
| Mssql | MSSQL Credentials | kingfisher.mssql.1 |
Medium | ||
| Mux | Mux Access Token Secret | kingfisher.mux.1 |
Medium | Yes | |
| Mysql | MySQL URI with Credentials | kingfisher.mysql.1 |
Medium | Yes | |
| Nasa | NASA API Key | kingfisher.nasa.1 |
Unknown | Yes | |
| Neo4J | Neo4j Database Credentials | kingfisher.neo4j.1 |
Medium | ||
| Neon | Neon API Key | kingfisher.neon.1 |
High | Yes | |
| Nessus | Nessus Agent Linking Key | kingfisher.nessus.1 |
High | ||
| Netlify | Netlify API Key | kingfisher.netlify.1 |
Unknown | Yes | |
| Netlify | Netlify API Key | kingfisher.netlify.2 |
Medium | Yes | |
| Netrc | netrc Credentials | kingfisher.netrc.1 |
Medium | ||
| Newrelic | New Relic Personal API Key | kingfisher.newrelic.1 |
Medium | Yes | |
| Newsapi | NewsAPI API Key | kingfisher.newsapi.1 |
Medium | Yes | |
| Ngrok | Ngrok API Key | kingfisher.ngrok.1 |
Unknown | Yes | |
| Notion | Notion Legacy Token | kingfisher.notion.1 |
Medium | Yes | |
| Notion | Notion Token | kingfisher.notion.2 |
Medium | Yes | |
| Notion | Notion OAuth Refresh Token | kingfisher.notion.3 |
Medium | ||
| Npm | NPM Access Token (fine-grained) | kingfisher.npm.1 |
Medium | Yes | Yes |
| Npm | NPM Access Token (old format) | kingfisher.npm.2 |
Medium | Yes | Yes |
| Nuget | NuGet API Key | kingfisher.nuget.1 |
Medium | Yes | |
| Nuget | NuGet API Key | kingfisher.nuget.2 |
Medium | Yes | |
| Numverify | Numverify API Key | kingfisher.numverify.1 |
Medium | Yes | |
| Nvidia | NVIDIA NIM API Key | kingfisher.nvidia.nim.1 |
Medium | Yes | |
| Nxcloud | Nx Cloud Access Token | kingfisher.nxcloud.1 |
High | Yes | |
| Nylas | Nylas API Key | kingfisher.nylas.1 |
Medium | Yes | |
| Nytimes | New York Times API Key | kingfisher.nytimes.1 |
Medium | Yes | |
| Octopusdeploy | Octopus Deploy API Key | kingfisher.octopusdeploy.2 |
Medium | Yes | |
| Odbc | Credentials in ODBC Connection String | kingfisher.odbc.1 |
Medium | ||
| Okta | Okta API Token | kingfisher.okta.1 |
Unknown | Yes | |
| Ollama | Ollama API Key | kingfisher.ollama.1 |
Medium | Yes | |
| Onepassword | 1Password Service-Account Token | kingfisher.1password.1 |
Medium | Yes | |
| Onepassword | 1Password Account Secret Key | kingfisher.1password.2 |
Medium | ||
| Onesignal | OneSignal REST API Key | kingfisher.onesignal.1 |
Medium | Yes | |
| Openai | OpenAI API Key | kingfisher.openai.1 |
Medium | Yes | |
| Openai | OpenAI API Key | kingfisher.openai.2 |
Medium | Yes | |
| Openai | OpenAI API Key (Short Prefixed) | kingfisher.openai.3 |
Medium | Yes | |
| Openrouter | OpenRouter API Key | kingfisher.openrouter.1 |
Medium | Yes | |
| Openshift | OpenShift OAuth Access Token | kingfisher.openshift.2 |
Medium | Yes | |
| Openweathermap | OpenWeather Map API Key | kingfisher.openweather.1 |
Medium | Yes | |
| Opsgenie | OpsGenie API Key | kingfisher.opsgenie.1 |
Unknown | Yes | |
| Optimizely | Optimizely Personal Access Token | kingfisher.optimizely.1 |
Medium | Yes | |
| Oracle | Oracle Database Connection URI | kingfisher.oracle.1 |
Medium | ||
| Ovh | OVH Application Secret | kingfisher.ovh.2 |
Medium | ||
| Owlbot | Owlbot API Key | kingfisher.owlbot.1 |
Medium | Yes | |
| Packagecloud | PackageCloud API Key | kingfisher.packagecloud.1 |
Medium | Yes | |
| Pagerdutyapikey | PagerDuty API Key | kingfisher.pagerduty.1 |
Medium | Yes | |
| Particle.Io | particle.io Access Token | kingfisher.particleio.1 |
Medium | Yes | Yes |
| Particle.Io | particle.io Access Token | kingfisher.particleio.2 |
Medium | Yes | Yes |
| Pastebin | Pastebin API Key | kingfisher.pastebin.1 |
Medium | Yes | |
| Paypal | PayPal OAuth Secret | kingfisher.paypal.2 |
Unknown | Yes | |
| Paystack | Paystack API Key | kingfisher.paystack.1 |
Medium | Yes | |
| Pdflayer | PdfLayer API Key | kingfisher.pdflayer.1 |
Medium | Yes | |
| Pem | PEM-Encoded Private Key | kingfisher.pem.1 |
High | ||
| Pem | Base64-PEM-Encoded Private Key | kingfisher.pem.2 |
High | ||
| Pendo | Pendo Integration Key | kingfisher.pendo.1 |
Medium | Yes | |
| Pepipost | Pepipost API Key | kingfisher.pepipost.1 |
Medium | Yes | |
| Perplexity | Perplexity AI API Key | kingfisher.perplexity.1 |
Medium | Yes | |
| Phpmailer | PHPMailer Credentials | kingfisher.phpmailer.1 |
Medium | ||
| Pinecone | Pinecone API Key | kingfisher.pinecone.1 |
Medium | Yes | |
| Pingdom | Pingdom API Token | kingfisher.pingdom.1 |
Medium | Yes | |
| Pingidentity | PingOne Client Secret | kingfisher.pingidentity.2 |
Medium | ||
| Pipedrive | Pipedrive API Token | kingfisher.pipedrive.1 |
High | Yes | |
| Plaid | Plaid Secret (Production) | kingfisher.plaid.2 |
Medium | Yes | |
| Plaid | Plaid Secret (Sandbox) | kingfisher.plaid.3 |
Medium | Yes | |
| Plaid | Plaid Access Token (Production) | kingfisher.plaid.4 |
Medium | Yes | |
| Plaid | Plaid Access Token (Sandbox) | kingfisher.plaid.5 |
Medium | Yes | |
| Planetscale | PlanetScale API Token | kingfisher.planetscale.1 |
Unknown | Yes | |
| Plivo | Plivo Auth Token | kingfisher.plivo.2 |
Medium | Yes | |
| Polymarket | Polymarket Builder API Key | kingfisher.polymarket.3 |
Medium | ||
| Positionstack | Positionstack API Key | kingfisher.positionstack.1 |
Medium | Yes | |
| Postgres | Postgres URL with hardcoded password | kingfisher.postgres.1 |
Medium | Yes | |
| Posthog | PostHog Personal API Key | kingfisher.posthog.2 |
Medium | Yes | |
| Posthog | PostHog Feature Flags Secure API Key | kingfisher.posthog.3 |
Medium | ||
| Posthog | PostHog OAuth Access Token | kingfisher.posthog.4 |
Medium | ||
| Posthog | PostHog OAuth Refresh Token | kingfisher.posthog.5 |
Medium | ||
| Postman | Postman API Key | kingfisher.postman.1 |
Medium | Yes | |
| Postmark | Postmark API Token | kingfisher.postmark.1 |
Medium | Yes | |
| Prefect | Prefect API Token | kingfisher.prefect.1 |
Medium | Yes | |
| Privateai | Private AI API Key | kingfisher.privateai.1 |
Medium | Yes | |
| Privkey | Contains encrypted RSA private key | kingfisher.privkey.1 |
High | ||
| Privkey | Contains Private Key | kingfisher.privkey.2 |
High | ||
| Psexec | Credentials in PsExec | kingfisher.psexec.1 |
Medium | ||
| Pubnub | PubNub Publish Key | kingfisher.pubnub.1 |
Unknown | Yes | |
| Pubnub | PubNub Subscription Key | kingfisher.pubnub.2 |
Medium | Yes | |
| Pulumi | Pulumi API Key | kingfisher.pulumi.1 |
Unknown | Yes | |
| Pushbullet | Pushbullet Access Token | kingfisher.pushbullet.1 |
Medium | Yes | |
| Pusher | Pusher Channels App Secret | kingfisher.pusher.2 |
Medium | ||
| Pypi | PyPI Upload Token | kingfisher.pypi.1 |
Medium | Yes | |
| Rabbitmq | RabbitMQ Credential | kingfisher.rabbitmq.1 |
Medium | ||
| Rails | Rails Master Key | kingfisher.rails.1 |
High | ||
| Rails | Rails Secret Key Base | kingfisher.rails.2 |
High | ||
| Railway | Railway API Token | kingfisher.railway.1 |
Medium | Yes | |
| Rapidapi | RapidAPI Key | kingfisher.rapidapi.1 |
Medium | Yes | |
| Razorpay | Razorpay API Key | kingfisher.razorpay.1 |
Medium | Yes | |
| Razorpay | Razorpay Test API Key | kingfisher.razorpay.2 |
Medium | Yes | |
| React | React App Username | kingfisher.reactapp.1 |
Medium | ||
| React | React App Password | kingfisher.reactapp.2 |
Medium | ||
| Readme | ReadMe API Key | kingfisher.readme.1 |
Medium | Yes | |
| Recaptcha | reCAPTCHA API Key | kingfisher.recaptcha.1 |
Medium | Yes | |
| Redis | Redis URI Connection String | kingfisher.redis.1 |
Medium | ||
| Redis | Python Redis Client Debug Output | kingfisher.redis.2 |
Medium | ||
| Redis | Redis Password (Standalone Config) | kingfisher.redis.3 |
Low | ||
| Redshift | Amazon Redshift Connection URI | kingfisher.redshift.1 |
Medium | ||
| Render | Render API Key | kingfisher.render.1 |
Medium | Yes | |
| Replicate | Replicate API Token | kingfisher.replicate.1 |
Medium | Yes | |
| Resend | Resend API Key | kingfisher.resend.api_key.1 |
High | Yes | |
| Retellai | Retell AI API Key | kingfisher.retellai.1 |
Medium | Yes | |
| Ringcentral | RingCentral Client Secret | kingfisher.ringcentral.2 |
Medium | ||
| Riot | Riot Games API Key | kingfisher.riot.2 |
Medium | Yes | |
| Rollbar | Rollbar Access Token | kingfisher.rollbar.1 |
Medium | Yes | |
| Rubygems | RubyGems API Key | kingfisher.rubygems.1 |
Medium | Yes | |
| Runway | Runway API Key | kingfisher.runway.1 |
Medium | Yes | |
| Salesforce | Salesforce Access Token | kingfisher.salesforce.1 |
Medium | Yes | |
| Salesforce | Salesforce Consumer Key | kingfisher.salesforce.3 |
Medium | ||
| Salesforce | Salesforce Consumer Secret | kingfisher.salesforce.4 |
Medium | ||
| Salesforce | Salesforce Consumer Key and Secret | kingfisher.salesforce.5 |
Medium | ||
| Salesforce | Salesforce Refresh Token | kingfisher.salesforce.6 |
Medium | ||
| Salesforce | Salesforce Connected App Consumer Key (Prefixed) | kingfisher.salesforce.7 |
Medium | Yes | |
| Salesloft | Salesloft API Key | kingfisher.salesloft.1 |
Medium | Yes | |
| Samsara | Samsara API Token (prefixed) | kingfisher.samsara.1 |
High | Yes | |
| Samsara | Samsara API Token (contextual) | kingfisher.samsara.2 |
Low | Yes | |
| Sanity | Sanity API Token | kingfisher.sanity.1 |
Medium | Yes | |
| Sauce | Sauce Labs Access Key | kingfisher.saucelabs.3 |
Medium | Yes | |
| Scale | Scale API Key | kingfisher.scale.1 |
Medium | Yes | |
| Scale | Scale Callback Auth Key | kingfisher.scale.2 |
Medium | ||
| Scaleway | Scaleway Secret Key | kingfisher.scaleway.1 |
Medium | Yes | |
| Scalingo | Scalingo API Token | kingfisher.scalingo.1 |
Medium | Yes | |
| Scalr | Scalr API Access Token | kingfisher.scalr.1 |
High | Yes | |
| Scraperapi | ScraperAPI Key | kingfisher.scraperapi.1 |
Medium | Yes | |
| Segment | Segment Public API Token | kingfisher.segment.1 |
Medium | Yes | |
| Segment | Segment API Key | kingfisher.segment.2 |
Medium | Yes | |
| Sendbird | Sendbird API Token | kingfisher.sendbird.2 |
Medium | Yes | |
| Sendgrid | Sendgrid API token | kingfisher.sendgrid.1 |
Medium | Yes | Yes |
| Sendinblue | Sendinblue API Token | kingfisher.sendinblue.1 |
Medium | Yes | |
| Sentry | Sentry Access Token | kingfisher.sentry.1 |
Medium | Yes | |
| Sentry | Sentry Organization Token | kingfisher.sentry.2 |
Medium | Yes | |
| Sentry | Sentry User Token | kingfisher.sentry.3 |
Medium | Yes | |
| Serpapi | SerpApi API Key | kingfisher.serpapi.1 |
Medium | Yes | |
| Settlemint | SettleMint Personal Access Token | kingfisher.settlemint.1 |
Medium | ||
| Settlemint | SettleMint Application Access Token | kingfisher.settlemint.2 |
Medium | ||
| Settlemint | SettleMint Service Access Token | kingfisher.settlemint.3 |
Medium | ||
| Shippo | Shippo API Token | kingfisher.shippo.1 |
Medium | Yes | |
| Shodan | SHODAN API Key | kingfisher.shodan.1 |
Medium | Yes | |
| Shopify | Shopify access token | kingfisher.shopify.1 |
Unknown | Yes | |
| Shortcut | Shortcut API Token | kingfisher.shortcut.1 |
Medium | Yes | |
| Shutterstock | Shutterstock OAuth Token | kingfisher.shutterstock.1 |
Medium | Yes | |
| Sidekiq | Sidekiq Enterprise Credential | kingfisher.sidekiq.1 |
Medium | ||
| Sidekiq | Sidekiq Sensitive URL | kingfisher.sidekiq.2 |
Medium | ||
| Signifyd | Signifyd API Key | kingfisher.signifyd.1 |
Medium | Yes | |
| Slack | Slack App Token | kingfisher.slack.1 |
Unknown | Yes | Yes |
| Slack | Slack Token | kingfisher.slack.2 |
Unknown | Yes | Yes |
| Slack | Slack Webhook | kingfisher.slack.4 |
Unknown | Yes | |
| Smb | SMB / CIFS Connection URI | kingfisher.smb.1 |
Medium | ||
| Smtp | SMTP Credentials | kingfisher.smtp.1 |
Medium | ||
| Snowflake | Snowflake Connection URI Credentials | kingfisher.snowflake.1 |
Medium | ||
| Snyk | Snyk API Key | kingfisher.snyk.1 |
Unknown | Yes | |
| Solr | Apache Solr Connection URI | kingfisher.solr.1 |
Medium | ||
| Sonarcloud | SonarCloud API Token | kingfisher.sonarcloud.1 |
Unknown | Yes | |
| Sonarqube | SonarQube API Key | kingfisher.sonarqube.1 |
Unknown | Yes | |
| Sonarqube | SonarQube Token | kingfisher.sonarqube.3 |
Medium | ||
| Sourcegraph | Sourcegraph Access Token | kingfisher.sourcegraph.1 |
Unknown | Yes | |
| Sourcegraph | Sourcegraph _Legacy_ API Key | kingfisher.sourcegraph.2 |
Medium | Yes | |
| Sourcegraph | Sourcegraph Cody Gateway Key | kingfisher.sourcegraph.3 |
Medium | Yes | |
| Sparkpost | SparkPost API Key | kingfisher.sparkpost.1 |
Medium | Yes | |
| Splunk | Splunk Authentication Token | kingfisher.splunk.1 |
Medium | ||
| Spotify | Spotify Access Token | kingfisher.spotify.1 |
Medium | Yes | |
| Sqreen | Sqreen Token | kingfisher.sqreen.1 |
High | ||
| Square | Square Access Token | kingfisher.square.1 |
Medium | Yes | |
| Square | Square Access Token | kingfisher.square.2 |
Medium | Yes | |
| Square | Square OAuth Secret | kingfisher.square.3 |
Medium | Yes | |
| Squarespace | Squarespace API Key | kingfisher.squarespace.1 |
Medium | Yes | |
| Sshpass | SSH / SCP Password (sshpass) | kingfisher.sshpass.1 |
Medium | ||
| Sslmate | SslMate API Key | kingfisher.sslmate.1 |
Medium | Yes | |
| Stabilityai | Stability AI API Key | kingfisher.stabilityai.1 |
Medium | Yes | |
| Stackhawk | StackHawk API Key | kingfisher.stackhawk.1 |
Medium | Yes | |
| Statsig | Statsig Server Secret Key | kingfisher.statsig.1 |
High | Yes | |
| Statuscake | StatusCake API Token | kingfisher.statuscake.1 |
Medium | Yes | |
| Statuspage | Statuspage API Key | kingfisher.statuspage.1 |
Medium | Yes | |
| Storyblok | Storyblok API Token | kingfisher.storyblok.1 |
Medium | Yes | |
| Strava | Strava Access Token | kingfisher.strava.1 |
Medium | Yes | |
| Stream | Stream.io API Secret | kingfisher.stream.2 |
Medium | ||
| Stripe | Stripe Publishable Key | kingfisher.stripe.1 |
Medium | ||
| Stripe | Stripe Secret / Restricted Key | kingfisher.stripe.2 |
Medium | Yes | |
| Stytch | Stytch Project Secret | kingfisher.stytch.2 |
Medium | Yes | |
| Sumologic | Sumo Logic Access Key | kingfisher.sumologic.2 |
Medium | Yes | Yes |
| Supabase | Supabase Management Token | kingfisher.supabase.1 |
Medium | Yes | |
| Supabase | Supabase Project API Key | kingfisher.supabase.2 |
Medium | Yes | |
| Surge | Surge.sh Deploy Token | kingfisher.surge.1 |
High | ||
| Tableau | Tableau Personal Access Token | kingfisher.tableau.1 |
Medium | ||
| Tailscale | Tailscale API Key | kingfisher.tailscale.1 |
Medium | Yes | Yes |
| Tavily | Tavily API Key | kingfisher.tavily.1 |
Medium | Yes | |
| Tavus | Tavus API Key | kingfisher.tavus.1 |
Medium | Yes | |
| Teamcity | TeamCity API Token | kingfisher.teamcity.1 |
Unknown | ||
| Telegram | Telegram Bot Token | kingfisher.telegram.1 |
Medium | Yes | |
| Temporal | Temporal Cloud API Key | kingfisher.temporal.1 |
Medium | Yes | |
| Tencent | Tencent Cloud Secret Key | kingfisher.tencent.2 |
Medium | ||
| Terraform | Terraform Cloud / HCP Terraform API Token | kingfisher.terraform.1 |
High | Yes | |
| Testkube | Testkube API Key | kingfisher.testkube.1 |
Medium | Yes | |
| Thingsboard | ThingsBoard Access Token | kingfisher.thingsboard.1 |
Medium | ||
| Thingsboard | ThingsBoard Provision Device Key | kingfisher.thingsboard.2 |
Medium | ||
| Thingsboard | ThingsBoard Provision Device Secret | kingfisher.thingsboard.3 |
Medium | ||
| Thycotic | Thycotic / Delinea Secret Server Credentials | kingfisher.thycotic.1 |
Medium | ||
| Todoist | Todoist API Token | kingfisher.todoist.1 |
Medium | Yes | |
| Togetherai | Together.ai API Key | kingfisher.together.1 |
Medium | Yes | |
| Travisci | Travis CI Token | kingfisher.travisci.1 |
Medium | Yes | |
| Travisci | Travis CI Encrypted Variable | kingfisher.travisci.2 |
Medium | ||
| Trello | Trello API Token | kingfisher.trello.1 |
Medium | ||
| Trendmicro | Trend Micro Deep Security API Key | kingfisher.trendmicro.1 |
High | Yes | |
| Trendmicro | Trend Micro Cloud One API Key | kingfisher.trendmicro.2 |
High | Yes | |
| Truenas | TrueNAS API Key (WebSocket) | kingfisher.truenas.1 |
Medium | Yes | |
| Truenas | TrueNAS API Key (REST API) | kingfisher.truenas.2 |
Medium | Yes | |
| Truenas | TrueNAS API Key (keyword proximity) | kingfisher.truenas.4 |
Medium | Yes | |
| Twilio | Twilio API Key | kingfisher.twilio.2 |
Unknown | Yes | Yes |
| Twitch | Twitch API Token | kingfisher.twitch.1 |
Medium | Yes | Yes |
| X / Twitter Bearer Token (App-only) | kingfisher.twitter.1 |
Medium | Yes | ||
| X / Twitter Consumer Secret | kingfisher.twitter.3 |
Unknown | Yes | ||
| Typeform | Typeform API Token | kingfisher.typeform.1 |
Medium | Yes | |
| Uber | Uber Server Token | kingfisher.uber.1 |
High | ||
| Ubidots | Ubidots API Key | kingfisher.ubidots.1 |
High | ||
| Unkey | Unkey Root Key | kingfisher.unkey.1 |
Medium | Yes | |
| Unkey | Unkey API Key (key_ prefix) | kingfisher.unkey.2 |
Medium | Yes | |
| Unkey | Unkey API Key Secret (creation-only plaintext) | kingfisher.unkey.3 |
Medium | ||
| Unsplash | Unsplash Access Key | kingfisher.unsplash.1 |
Medium | Yes | |
| Uptimerobot | UptimeRobot API Key | kingfisher.uptimerobot.1 |
Medium | Yes | |
| Uri | URI with Username and Secret | kingfisher.uri.1 |
Medium | Yes | |
| Urlscan | urlscan.io API Key | kingfisher.urlscan.1 |
Medium | Yes | |
| Vapi | Vapi API Key | kingfisher.vapi.1 |
Medium | Yes | |
| Vastai | Vast.ai API Key | kingfisher.vastai.1 |
Medium | Yes | |
| Vercel | Vercel API Token (legacy 24-char) | kingfisher.vercel.1 |
Medium | Yes | Yes |
| Vercel | Vercel Personal Access Token (vcp_) | kingfisher.vercel.2 |
Medium | Yes | Yes |
| Vercel | Vercel Integration Token (vci_) | kingfisher.vercel.3 |
Medium | Yes | Yes |
| Vercel | Vercel App Access Token (vca_) | kingfisher.vercel.4 |
Medium | Yes | Yes |
| Vercel | Vercel App Refresh Token (vcr_) | kingfisher.vercel.5 |
Medium | Yes | Yes |
| Vercel | Vercel AI Gateway API Key (vck_) | kingfisher.vercel.6 |
Medium | Yes | |
| Virustotal | VirusTotal API Key | kingfisher.virustotal.1 |
Medium | Yes | |
| Vkontakte | VKontakte Access Token | kingfisher.vkontakte.1 |
High | Yes | |
| Vmware | Credentials in Connect-VIServer Invocation | kingfisher.vmware.1 |
Unknown | ||
| Vonage | Vonage (Nexmo) API Secret | kingfisher.vonage.2 |
Medium | Yes | |
| Voyageai | Voyage AI API Key | kingfisher.voyageai.api_key |
High | Yes | |
| Vultr | Vultr API Key | kingfisher.vultr.1 |
Medium | Yes | Yes |
| Wakatime | WakaTime API Key | kingfisher.wakatime.1 |
Medium | Yes | |
| Wakatime | WakaTime Prefixed API Key | kingfisher.wakatime.2 |
Medium | Yes | |
| Weatherapi | WeatherAPI.com API Key | kingfisher.weatherapi.1 |
Medium | Yes | |
| Webex | Webex Integration Client Secret | kingfisher.webex.2 |
Medium | ||
| Webflow | Webflow API Token | kingfisher.webflow.1 |
Medium | Yes | |
| WeChat App Secret | kingfisher.wechat.2 |
Medium | |||
| Weightsandbiases | Weights and Biases API Key | kingfisher.wandb.1 |
Medium | Yes | |
| Weightsandbiases | Weights and Biases API Key (v1) | kingfisher.wandb.2 |
Medium | Yes | |
| Wepay | WePay Access Token | kingfisher.wepay.1 |
High | Yes | |
| Wireguard | WireGuard Private Key | kingfisher.wireguard.1 |
Medium | ||
| Wireguard | WireGuard Preshared Key | kingfisher.wireguard.2 |
Medium | ||
| Wiz | Wiz Client Secret | kingfisher.wiz.2 |
Medium | Yes | |
| Workato | Workato API Token | kingfisher.workato.1 |
Medium | Yes | |
| Wpengine | WPEngine API Key | kingfisher.wpengine.1 |
Medium | Yes | |
| Xai | xAI (Grok) API Key | kingfisher.xai.1 |
Medium | Yes | |
| Yahoo | Yahoo OAuth2 Client Secret | kingfisher.yahoo.2 |
Medium | ||
| Yandex | Yandex API Key | kingfisher.yandex.1 |
Medium | Yes | |
| Yelp | Yelp API Key | kingfisher.yelp.1 |
Medium | Yes | |
| Yousign | YouSign API Key | kingfisher.yousign.1 |
High | Yes | |
| Youtube | YouTube API Key | kingfisher.youtube.1 |
Medium | Yes | |
| Zapier | Zapier Webhook URL | kingfisher.zapier.1 |
Medium | ||
| Zendesk | Zendesk API Token | kingfisher.zendesk.3 |
Medium | Yes | |
| Zerobounce | ZeroBounce API Key | kingfisher.zerobounce.1 |
Medium | Yes | |
| Zhipu | Zhipu (BigModel) API Key | kingfisher.zhipu.1 |
Medium | Yes | |
| Zohocrm | Zoho CRM API Access Token | kingfisher.zohocrm.1 |
Medium | Yes | |
| Zoom | Zoom OAuth Client Secret | kingfisher.zoom.2 |
Medium | ||
| Zuplo | Zuplo API Key | kingfisher.zuplo.1 |
Medium | Yes |