Nosey Parker, a fast and low-noise secrets detector for textual data
Nosey Parker is an Apache-licensed command-line tool that finds secrets and sensitive information in textual data. It's useful both for offensive and defensive security testing. The big idea: textual content in, hardcoded secrets out. These include things like API keys and passwords. It should do a reasonable job on any textual input. It will recursively scan any directories it is pointed at. It also has special support for scanning the complete contents of Git repositories. The default rules in Nosey Parker have been carefully chosen to minimize false positives. Many API tokens these days…
In plain words
Nosey Parker is an Apache-licensed command-line tool that scans textual data to find hardcoded secrets like API keys and passwords. It recursively searches directories and has special support for Git repositories. Designed for both offensive and defensive security testing, it uses carefully chosen rules to minimize false positives and deduplicates findings for higher accuracy. The tool is fast and handles any textual input reasonably well.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Nosey Parker is an Apache-licensed command-line tool that finds secrets and sensitive information in textual data. It's useful both for offensive and defensive security testing. The big idea: textual content in, hardcoded secrets out. These include things like API keys and passwords. It should do a reasonable job on any textual input. It will recursively scan any directories it is pointed at. It also has special support for scanning the complete contents of Git repositories. The default rules in Nosey Parker have been carefully chosen to minimize false positives. Many API tokens these days have well-specified formats that are amenable to precise matching with regular expressions, and these are the kind of things that the default rules detect. Additionally, its findings are deduplicated. Together, these give much higher signal-to-noise compared to similar tools. Nosey Parker is fast: it can scan 100GB of Linux kernel commit history in just over a minute on my laptop. This speed comes from several factors, but most significantly from using the amazing Hyperscan library for simultaneous matching of all regex rules in a single pass. In comparison with similar tools on large inputs, Nosey Parker is usually 1-3 orders of magnitude faster. Nosey Parker was originally created to help construct a labeled dataset of secrets for machine learning purposes. But it proved surprisingly useful on its own. In the past year, an internal, proprietary version (with added machine learning capabilities) has been regularly used in security engagements at Praetorian. In late 2022, Nosey Parker was reimplemented in Rust, released as open-source, and presented at Black Hat Arsenal. It now supports enumeration and scanning of GitHub repositories by providing just usernames or organization names. It also recently got support for SARIF output, which several other tools understand.
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Launched alongside, March 2023
the whole month →
- BI
I'm a big fan of the BBC podcast In Our Time -- and (like most people) I've been playing with the OpenAI APIs. In Our Time has almost 1,000 episodes on everything from Cleopatra to the evolution of teeth to plasma physics, all still available, so it's my starting point to learn about most topics. But it's not well organised. So here are the episodes sorted by library code. It's fun to explore. Web scraping is usually pretty tedious, but I found that I could send the minimised HTML to GPT-3 and get (almost) perfect JSON back: the prompt includes the Typescript definition. At the same time I…
AI · 2023 · genmon.github.io