Alex Fedukov sorrtory

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

Pixiv

pixiv

Pixiv Unofficial Mirror Sites

Pixivel
pixiv萌え (Login Required)

Image Search Engine

Yandex.Disk REST API How To (quick af)

This will be modified, don't worry

1. Register

Simply make standard account on disk.yandex.com

2. Register App Client

First thing to do is to register new App Client. This can be done in oauth.yandex.com.

Click on "Create new client" button

	#!/usr/bin/env bash

	# set -x

	if [[ $EUID -ne 0 ]]; then
	echo "You must be root to run this script"
	exit 1
	fi

	# Returns all available interfaces, except "lo" and "veth*".

	#!/bin/sh
	exec ip netns exec vpn su user -c "$*"