hardcoded-credential-hunt

1# Hardcoded Credential Hunt
2 
3Detect credentials baked into client-side code or HTML responses. Targets include master passwords in form `value` attributes, secret keys in inline scripts, API tokens in configuration endpoints, and plaintext credentials leaked through debug error pages. This class of vulnerability bypasses authentication entirely — no brute force required.
4 
5## When to Use
6 
7- An application serves HTML forms with pre-filled or hidden password fields.
8- A configuration endpoint (`/api/config`, `/env`, `/settings`) returns JSON with credential-like strings.
9- A debug/error page leaks application secrets in JavaScript variables.
10- An unauthenticated API endpoint returns data that controls authentication (reset, exit registration, admin actions).
11- JavaScript bundles contain string assignments matching password patterns.
12 
13## Prerequisites
14 
15- `terminal` with curl and python3.
16- A target serving HTML, JSON, or JavaScript without proper authentication on configuration/settings endpoints.
17- Access to at least one public page, form, or API endpoint.
18 
19## How to Run
20 
21```bash
22# Scan HTML for password fields with pre-filled values
23curl --max-time 30 --connect-timeout 10 -sk "https://target.com/PATH" | grep -Poi '(?:password|passwd|senha|pass|pwd|secret)\s*[=:"]\s*"?[^"&\s]{4,30}"?' | head -10
24 
25# Scan JSON config endpoints for credential-like keys
26curl --max-time 30 --connect-timeout 10 -sk "https://target.com/api/config" | python3 -c "
27import sys, json, re
28try:
29…