Keyhacks is a reference guide that demonstrates how to validate leaked API keys discovered during bug bounty programs.
The tool addresses the problem of determining whether exposed API credentials are actually functional and pose a real security risk. When a bug bounty hunter discovers what appears to be an API key, they need a quick way to test its validity before reporting it. Keyhacks provides methods for checking various types of API keys by showing the specific endpoints, requests, or techniques that can verify whether each key is active and usable.
Keyhacks is most valuable for security researchers and bug bounty hunters who need to triage findings and confirm the severity of credential leaks. It suits anyone conducting security assessments who encounters API keys in source code, configuration files, or other exposed locations. The repository serves as a practical reference rather than an automated tool, offering manual validation approaches for different API providers and services.
The project maintains a straightforward collection of validation techniques without active development cycles or frequent updates. Contributions appear to come from the security community adding new API key validation methods as they discover them.
