Issomane

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

-/**
- * Run this in your browser console and it will delete all of your facebook photos
- * one after another.
- *
- * You will most likely need to fiddle with the css selectors but its basically:
- * 1. Click edit of first photo
- * 2. Click delete in dropdown menu
- * 3. Click confirm in dialog
- */
-setInterval(() => {

	/* - woo cat toggling elements, injected via jQuery - */

	/* make list item be relative, to be able to position toggle within this item, if desired */
	#sidebar .widget_product_categories ul.product-categories > li.cat-parent {
	position: relative;
	}
	/* the new toggle element wrapper, which is added via jQuery */
	#sidebar .widget_product_categories ul.product-categories > li.cat-parent .woo-cat-toggle {
	cursor: pointer;
	display: inline-block;