Start analyzing file contents for potentially sensitive information.

[Broham]

Initially I'm thinking we should look for these values:

pass
pw
pwd
passwd
key
user
username
secret

Once we have analyzed a number of files we can go back and see which terms are actually finding vulnerabilities.

[Eddog53]

so the scanner is going to just check for variables of these names initially and see if they are hard coded or accepting user input. If hard coded then vulnerable??