Expose

____  ___                                
\   \/  /______    ____   ______  ____   
 \     / \____ \  /  _ \ /  ___/_/ __ \  
 /     \ |  |_> >(  <_> )\___ \ \  ___/  
/___/\  \|   __/  \____//____  > \___  > 
      \_/|__|                \/      \/ 

Secret scanner that walks a directory (or a cloned GitHub repo) and matches configured regex rules.

What is this for?

• Helps find potential secrets in your codebase (e.g., API keys, DB credentials, etc.).
• Scans a local folder or a remote GitHub repo and generates a report.json of findings.

Project layout (important)

• Entrypoint script: xpose.py (at repo root)
• Rules live under: expose/rules/

Setup (Windows)

1. Install Git (if needed)

   • https://git-scm.com/download/win

2. Install Python 3.8+

   • https://www.python.org/downloads/windows/

3. Setup

   git clone https://github.com/Rexxyqt/Xpose.git
   pip install -r expose\requirements.txt

Running the tool

Interactive menu (recommended)

python -u xpose.py

Direct CLI commands

Local scan:

python -u xpose.py scan .
python -u xpose.py scan C:\path\to\dir

Remote scan (GitHub):

python -u xpose.py remote https://github.com/user/repo
python -u xpose.py remote https://github.com/user/repo --tree

Output

Each run writes findings to:

• report.json in the current working directory.

✅ Use the provided entrypoint:

python -u xpose.py scan .