Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
It is useful both for offensive and defensive security testing.
Nosey Parker is essentially a special-purpose grep-like tool for detection of secrets. The typical workflow is three phases:
- Scan inputs of interest using the scan command.
- Report details of scan results using the report command.
- Review and triage findings.
The scanning and reporting steps are implemented as separate commands because you may wish to generate several reports from one expensive scan run.
This is free and open source software.
Features include:
- Natively scans files, directories, and Git repository history.
- Uses regular expression matching with a set of 151 patterns chosen for high signal-to-noise based on experience and feedback from offensive security engagements.
- Deduplicates its findings, grouping matches together that share the same secret, which in practice can reduce review burden by 100x or more compared to other tools.
- Fast in operation: it can scan at hundreds of megabytes per second on a single core, and is able to scan 100GB of Linux kernel source history in less than 2 minutes on an older MacBook Pro.
- Scalability: it has scanned inputs as large as 20TiB during security engagements.
- Cross-platform support – runs under Linux, macOS, and Windows.
Website: github.com/praetorian-inc/noseyparker
Support:
Developer: Brad Larsen
License: Apache License 2.0
Nosey Parker is written in Rust. Learn Rust with our recommended free books and free tutorials
| Explore Linux | |
|---|---|
 | Best Free and Open Source Software - A huge collection of recommended free and open source software covering every major category. |
 | In-depth Linux Software Reviews - Detailed assessments of Linux software covering features, usability and overall quality. |
 | The Big List of Active Linux Distros - An extensive collection of actively developed Linux distributions. |
 | Open Source Alternatives - Alternatives to software and services from Google, Microsoft, Apple, Adobe, IBM, Autodesk, Oracle and others. |
 | Essential Linux System Tools - Indispensable utilities for monitoring, maintaining and managing Linux systems. |
 | Linux Productivity Tools - Useful utilities for improving productivity and streamlining everyday tasks. |
 | Alternatives to Popular CLI Tools - Modern alternatives to familiar command-line utilities supplied with Linux systems. |
 | Awesome Free Linux Game Tools - Tools, utilities and companion software that improve gaming on Linux. |
 | Machine Learning on Linux - Machine learning and deep learning software, self-hosted applications and practical tools. |
 | Saving Money with Linux - Practical ways to reduce electricity consumption and lower computing costs with Linux. |
 | Linux Candy - Fun, entertaining and sometimes delightfully quirky software from the lighter side of Linux. |
Please read our Comment Policy before commenting.