Tool

BSides talks featuring TruffleHog

39 talks mention this tool across 24 BSides chapters.

Secret scanning tool for detecting exposed credentials and sensitive data in repositories

Talks featuring TruffleHog

Passive-ish Recon Techniques

BSides Leeds · 2018

Technical Web AppSec Intermediary Red Talk

Open →2018-02

Offensive Javascript Techniques for Red Teamers

Dylan Ayrey Christian Frichot

BSidesSF · 2019

Technical Web AppSec Red Talk

Open →2019-03

Fighting Secrets In Source Code With TruffleHog

BSidesSF · 2018

Technical Tooling DevSecOps Supply Chain Security Vulnerability Research Talk

Open →2018-04

Tokens & Takeovers: Cloud-Powered Supply Chain Attacks

BSides Ahmedabad · 2025

Technical Supply Chain Security Talk

Open →2025-03

BSidesSF · 2023

Technical DevSecOps Supply Chain Security Intro Blue Talk

Open →2023-05

Panda Mirror: How the Chinese CCP Manipulates NPM to Hoard Malware

BSides Canberra · 2025

Research Technical Malware Analysis Supply Chain Security Threat Intel Talk

Open →2025-12

The Secret Life of Secrets

Dylan Ayrey Hon Kwok

BSidesSF · 2024

Technical Cryptography Vulnerability Research Talk

Open →2024-07

Got popcorn? What's on the Vuln Channel tonight?

Rob Jerdonek Lily Chau

BSidesSF · 2022

Open →2022-07

How We Got Into A Unicorn's Private Codebase

Ashikka Gupta Arshit Jain

Research Technical Mobile Security Supply Chain Security Vulnerability Research Red Case Studies and Incidents Analysis Empirical Research+1

Open →2022-05

BSidesSF 2023 - Stop Committing Your Secrets - Git Hooks To The Rescue! (Dwayne McDaniel)

Dwayne Mcdaniel

BSidesSF · 2023

Technical DevSecOps Talk

Open →2023-05

Let's Talk About the AI Apocalypse

BSidesSF · 2025

Open →2025-06

Why I am (still) finding secrets in your code

BSides Canberra · 2025

Research Technical DevSecOps Supply Chain Security Vulnerability Research Blue Case Studies and Incidents Analysis Empirical Research+1

Open →2025-12

State of API Security 2024: Insights from Analyzing 1 Million Domains

Tristan Kalos Antoine Carossio

BSides Seattle · 2024

Research Empirical Research Talk

Open →2024-10

How Segment Proactively Protects Customer's API Keys

BSidesSF · 2023

Open →2023-05

Turnkey Code – Enhancing Secrets Management in Large Scale Organizations

BSides Lisbon · 2024

Technical DevSecOps Supply Chain Security Blue Talk

Open →2024-12

Zero Trust — Attack and Defend

BSides Frankfurt · 2024

Technical Cloud IAM Detection Engineering Purple Talk

Open →2025-05

Who Goes There? Actively Detecting Intruders With Cyber Deception Tools

Dwayne Mcdaniel

BSides Boulder · 2024

Open →2024-09

Securing Non-Human Identities in CI/CD Pipelines: The Next Major Attack Vector

Dhivya Balasubramanian Vikas Gattu

BSides Seattle · 2026

Technical Cloud IAM DevSecOps Supply Chain Security Intro Case Studies and Incidents Analysis Methodology Talk

Open →2026-03

Domain Takeovers For Fun And Profit

Daniel Oates-Lee

BSides Lancashire · 2023

Technical DNS Security DevSecOps Web AppSec Intermediary Red Demo Talk

Open →2023-04

BSides Munich Keynote - InfoSec's Dirty Little Secrets: Jennifer Janesko

Open →2021-06

Where Did I Put My Keys? Preventing Data Leaks at Scale with Automation

BSides Canberra · 2025

Open →2025-12

How to Start and Mature an AppSec Program

Nivedita Murthy

BSides Knoxville · 2022

Technical DevSecOps Web AppSec Talk

Open →2022-05

Top Ways I Still Hack Your Company (and How to Defend Against Them)

BSides Charm · 2024

Technical Active Directory Network Security Vulnerability Research Web AppSec Red Talk

Open →2024-06

Beyond Code and Clicks: UX Insights to Security Software

Hon Kwok Miccah

BSidesSF · 2024

Open →2024-07

Broke but Breached: Secret Scanning at Scale on a Student Budget

Raviteja Ming Chow

BSides Las Vegas · 2025

Research Technical DevSecOps Supply Chain Security Vulnerability Research Intermediary Case Studies and Incidents Analysis Empirical Research+1

Open →2025-12

Confessions of a Sh*tty SysAdmin

BSides Dallas/Fort Worth · 2021

War Stories Active Directory Career & Soft Skills Talk

Open →2021-11

Injecting Automation into Pentesting

BSides Vancouver · 2022

Technical Tooling DevSecOps Vulnerability Research Web AppSec Talk

Open →2022-07

Git Those Passwords Out Of Your Repos!

BSides Cheltenham · 2023

Technical DevSecOps Supply Chain Security Talk

Open →2023-06

5 Open Source Security Tools

Chris Koehnecke

BSides SLC · 2023

Technical Container Security DevSecOps Supply Chain Security Web AppSec Talk

Open →2023-06

Building Castles in the Cloud: AWS Security and Self-Assessment

Bsides CT · 2019

Technical Cloud IAM Talk

Open →2019-11

Securing your Open Source Project

BSides PDX · 2023

Technical Supply Chain Security Talk

Open →2023-10

An Expedition To Planet Malware

Anthony Fielding

BSides Newcastle · 2025

Technical Malware Analysis OSINT Supply Chain Security Case Studies and Incidents Analysis Talk

Open →2025-11

Do You Know Where Your Secrets Are? Exploring the Problem of Secret Sprawl

Dwayne Mcdaniel

BSides Las Vegas · 2023

Technical DevSecOps Supply Chain Security Talk

Open →2023-10

Open Source Software is Amazing and Risky

Nicole Schwartz

BSides Saskatoon · 2024

Technical DevSecOps Supply Chain Security Vulnerability Research Talk

Open →2024-09

Securing Docker Containers at CD/CI Pipeline Level

BSides Barcelona · 2019

Technical DevSecOps Talk

Open →2022-01

BSides Calgary · 2022

Technical Vulnerability Research Web AppSec Talk

Open →2022-12

Shift Left with DevSecOps: Scanning Every Code Change

BSides Newcastle · 2020

Technical DevSecOps OWASP Talk

Open →2020-11

npm Account Takeovers: Preventing the next Shai-Hulud

BSides Seattle 2026

Technical Malware Analysis Supply Chain Security Threat Intel Intermediary Red Case Studies and Incidents Analysis Talk

Open →2026-04

Building the Flight Deck: Tools and Technologies for a Robust AppSec Program

Chris Koehnecke

BSides Albuquerque

Open →2024-08