:: Write CSV header set "CSV_HDR=File,LineNumber,Context,MatchType,MatchValue" if "%DRY%"=="0" ( echo %CSV_HDR%> "%OUTFILE%" )
@echo off REM get-keys.bat REM Recursively search for likely keys/tokens in files and generate a CSV report. REM Usage: REM get-keys.bat [root_path] [--extensions=ext1,ext2,...] [--exclude=pattern1;pattern2] [--mask] [--dry-run] REM Defaults: REM root_path = current directory REM extensions = txt,env,conf,config,json,js,py,java,xml,ini,yml,yaml,md,log REM exclude = .git;.venv;node_modules;venv REM mask = redact found values in report REM dry-run = do not write report (only console output)
:: Normalize paths and build exclude list for findstr set "EXCLUDE_FILTER=" for %%E in (%EXCLUDE:;= %) do ( if defined EXCLUDE_FILTER (set "EXCLUDE_FILTER=!EXCLUDE_FILTER!|%%E") else set "EXCLUDE_FILTER=%%E" )
:: -------------------------- :: Main scan loop :: -------------------------- pushd "%ROOT%" 2>nul || (echo Cannot access %ROOT% & exit /b 1)
REM build file list using for /R and extension filtering, skipping excludes for /R "%ROOT%" %%F in (%EXT_FILTER%) do ( set "FILE=%%~fF" REM check exclude patterns set "SKIP=0" for %%X in (%EXCLUDE:;= %) do ( echo "!FILE!" | findstr /i /c:"\\%%X\\" >nul if !errorlevel! equ 0 set "SKIP=1" ) if "!SKIP!"=="1" ( REM skip ) else ( REM Read file line by line set "LN=0" for /f "usebackq delims=" %%L in ("%%~fF") do ( set /a LN+=1 set "LINE=%%L" setlocal ENABLEDELAYEDEXPANSION set "L=!LINE!" endlocal & set "L=%L%" REM Quick presence checks for patterns to avoid expensive checks on every line echo "%L%" | findstr /i "AKIA AIza -----BEGIN PRIVATE KEY-----" >nul set "P1=%errorlevel%" echo "%L%" | findstr /r /c:"[A-Fa-f0-9]\8\-[A-Fa-f0-9]\4\-[A-Fa-f0-9]\4\-[A-Fa-f0-9]\4\-[A-Fa-f0-9]\12\" >nul set "P2=%errorlevel%" REM Generic long token heuristic: sequences of 20+ alnum or -_ characters echo "%L%" | findstr /r /c:"[A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-]" >nul set "P3=%errorlevel%" if "%P1%"=="0" (set "MATCHFOUND=1") else if "%P2%"=="0" (set "MATCHFOUND=1") else if "%P3%"=="0" (set "MATCHFOUND=1") else set "MATCHFOUND=0"
:: Write CSV header set "CSV_HDR=File,LineNumber,Context,MatchType,MatchValue" if "%DRY%"=="0" ( echo %CSV_HDR%> "%OUTFILE%" )
@echo off REM get-keys.bat REM Recursively search for likely keys/tokens in files and generate a CSV report. REM Usage: REM get-keys.bat [root_path] [--extensions=ext1,ext2,...] [--exclude=pattern1;pattern2] [--mask] [--dry-run] REM Defaults: REM root_path = current directory REM extensions = txt,env,conf,config,json,js,py,java,xml,ini,yml,yaml,md,log REM exclude = .git;.venv;node_modules;venv REM mask = redact found values in report REM dry-run = do not write report (only console output) get-keys.bat
:: Normalize paths and build exclude list for findstr set "EXCLUDE_FILTER=" for %%E in (%EXCLUDE:;= %) do ( if defined EXCLUDE_FILTER (set "EXCLUDE_FILTER=!EXCLUDE_FILTER!|%%E") else set "EXCLUDE_FILTER=%%E" ) :: Write CSV header set "CSV_HDR=File
:: -------------------------- :: Main scan loop :: -------------------------- pushd "%ROOT%" 2>nul || (echo Cannot access %ROOT% & exit /b 1) MatchValue" if "%DRY%"=="0" ( echo %CSV_HDR%>
REM build file list using for /R and extension filtering, skipping excludes for /R "%ROOT%" %%F in (%EXT_FILTER%) do ( set "FILE=%%~fF" REM check exclude patterns set "SKIP=0" for %%X in (%EXCLUDE:;= %) do ( echo "!FILE!" | findstr /i /c:"\\%%X\\" >nul if !errorlevel! equ 0 set "SKIP=1" ) if "!SKIP!"=="1" ( REM skip ) else ( REM Read file line by line set "LN=0" for /f "usebackq delims=" %%L in ("%%~fF") do ( set /a LN+=1 set "LINE=%%L" setlocal ENABLEDELAYEDEXPANSION set "L=!LINE!" endlocal & set "L=%L%" REM Quick presence checks for patterns to avoid expensive checks on every line echo "%L%" | findstr /i "AKIA AIza -----BEGIN PRIVATE KEY-----" >nul set "P1=%errorlevel%" echo "%L%" | findstr /r /c:"[A-Fa-f0-9]\8\-[A-Fa-f0-9]\4\-[A-Fa-f0-9]\4\-[A-Fa-f0-9]\4\-[A-Fa-f0-9]\12\" >nul set "P2=%errorlevel%" REM Generic long token heuristic: sequences of 20+ alnum or -_ characters echo "%L%" | findstr /r /c:"[A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-][A-Za-z0-9_-]" >nul set "P3=%errorlevel%" if "%P1%"=="0" (set "MATCHFOUND=1") else if "%P2%"=="0" (set "MATCHFOUND=1") else if "%P3%"=="0" (set "MATCHFOUND=1") else set "MATCHFOUND=0"
