A penetration tester successfully clones a source code repository and then runs the following command: find . -type f -exec egrep -i "token|key|login" {} \; Which of the following is the penetration…

The correct answer is B. Secrets scanning. Penetration testers search for hardcoded credentials, API keys, and authentication tokens in source code repositories to identify secrets leakage. Secrets scanning: The find and egrep command scans all files recursively for sensitive keywords like "token," "key," Attackers use…

Submitted by jian89· Mar 6, 2026Vulnerability Discovery and Analysis

Question

A penetration tester successfully clones a source code repository and then runs the following command:

find . -type f -exec egrep -i "token|key|login" {} ; Which of the following is the penetration tester conducting?

Options

AData tokenization
BSecrets scanning
CPassword spraying
DSource code analysis

How the community answered

(30 responses)

A
3% (1)
B
73% (22)
C
10% (3)
D
13% (4)

Explanation

Penetration testers search for hardcoded credentials, API keys, and authentication tokens in source code repositories to identify secrets leakage. Secrets scanning: The find and egrep command scans all files recursively for sensitive keywords like "token," "key," Attackers use tools like TruffleHog and GitLeaks to automate secret discovery.

Topics

#secrets scanning#source code analysis#sensitive data discovery

Community Discussion

No community discussion yet for this question.

Full PT0-003 Practice