> For the complete documentation index, see [llms.txt](https://scansuite.gitbook.io/scansuite/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://scansuite.gitbook.io/scansuite/usage/credentials.md).

# Credentials

Credentials found during the Static Code Analysis, such as **Secrets Detection**, and Infrastructure checks, such as **OSINT** (credentials leakage checks stage) or **Bruteforcer** scan are saved and can be managed via Credentials page.

The link refers directly to the code line to quickly check the issue:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FQROU34wjeu1Mzmkfrnyz%2FScreenshot%202025-12-25%20at%2012.22.51.png?alt=media&amp;token=f67bde35-3210-4eec-9ad3-cf20a495f553" alt=""><figcaption></figcaption></figure>

Credentials matching login/password pair pattern may be used by the Bruteforcer scanner to verify their validity.

One can input leaked credentials manually or upload a bulk as JSON list:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FOYUzhWN6aTjaFkMoa3Po%2Fimage.png?alt=media&amp;token=a502f7fd-bf2a-4b1f-8eb5-7a830ad3bca9" alt=""><figcaption></figcaption></figure>

Execute the Bruteforcer scan:<br>

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FYFwJMcaRS6gOLRqOVfXn%2Fimage.png?alt=media&amp;token=1ac8bb90-d26e-449b-aeca-338d764da4ff" alt=""><figcaption></figcaption></figure>

And check if confirmed credentials are alerted via scan logs:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FeJrXGnOK7Yi9uk8WgGOP%2Fimage.png?alt=media&amp;token=03346a21-5a3e-4520-b0fc-c58beb0cd2a7" alt=""><figcaption></figcaption></figure>

Confirmed credentials are updated in Credentials tab via Verified and Details fields:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FYvpjIjfvv04B0RqM4Opi%2Fimage.png?alt=media&amp;token=d8c3135e-9d7e-44bc-97fa-5c6f662df35c" alt=""><figcaption></figcaption></figure>

Click on the Credential name to see full details:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FDs7Hp3kAS2HLKkjaOtkR%2Fimage.png?alt=media&amp;token=508ed4df-ed5b-400f-b60c-48f75409468f" alt=""><figcaption></figcaption></figure>
