Comment by 3eb7988a1663
16 hours ago
The post keeps saying "verified secrets" - how are they verified? Did the author attempt to login to each service? Or does verified just means that it looks like a valid token?
16 hours ago
The post keeps saying "verified secrets" - how are they verified? Did the author attempt to login to each service? Or does verified just means that it looks like a valid token?
Tools like TruffleHog[1] will attempt to verify any credentials it finds by making some sort of authenticated request.
[1] https://github.com/trufflesecurity/trufflehog#validation-