Skip to content

Releases: momenbasel/keyFinder

v2.1.1

14 May 22:28

Choose a tag to compare

What's Changed

  • Post-merge hardening: CSV LF, SECURITY.md, dependabot by @momenbasel in #16

Full Changelog: v2.1.0...v2.1.1

v2.1.0

14 May 21:52
fdd3be3

Choose a tag to compare

What's Changed

  • v2.1.0: security hardening + cross-browser parity + release CI by @momenbasel in #15

New Contributors

Full Changelog: v2.0.0...v2.1.0

KeyFinder v2.0.0 - Firefox Support

14 Apr 13:30

Choose a tag to compare

Firefox + Chrome Support

KeyFinder is now available on both browsers.

Install

Manual Install

  • Chrome: Download keyfinder-v2.0.0-chrome.zip, load via chrome://extensions (Developer mode)
  • Firefox: Download keyfinder-v2.0.0-firefox.zip, load via about:debugging > "This Firefox" > "Load Temporary Add-on"

What changed

  • Added manifest.firefox.json with gecko-specific settings (background.scripts instead of service_worker)
  • Added data_collection_permissions for AMO compliance
  • Added scripts/build.sh for packaging both browser versions
  • Zero JavaScript changes - Firefox 128+ supports chrome.* namespace and world: "MAIN" natively

Requirements

  • Firefox 128+ (ESR or later)
  • Chrome 88+ (existing)

Closes #10.

v2.0.0 - Enterprise Secret Detection

07 Apr 16:23

Choose a tag to compare

What's New

Complete rewrite from the ground up. Manifest V3, zero dependencies, 80+ detection patterns.

Secret Detection

  • 80+ patterns covering AWS, GCP, Azure, GitHub, GitLab, Stripe, Slack, Discord, OpenAI, Anthropic, and 30+ other providers
  • Shannon entropy analysis for detecting undocumented secret formats
  • 10 scanning surfaces: inline scripts, external scripts, meta tags, hidden inputs, data attributes, HTML comments, URL parameters, web storage, cookies, and network response interception

Architecture

  • Migrated to Chrome Manifest V3 with service worker
  • MAIN world interceptor for XHR/fetch response scanning and window global variable detection
  • Zero dependencies - removed jQuery, Bootstrap, font-awesome, popper.js
  • XSS-safe DOM rendering throughout

Dashboard

  • Professional dark-theme findings dashboard
  • Filter by severity, provider, scan type
  • Full-text search across all findings
  • Export as JSON or CSV
  • Badge counter on extension icon

Installation

  1. Download keyFinder-v2.0.0.zip below
  2. Extract the zip
  3. Open chrome://extensions and enable Developer mode
  4. Click "Load unpacked" and select the extracted keyFinder folder