Skip to content

Instantly share code, notes, and snippets.

View Metroxe's full-sized avatar
🏴‍☠️
Quantum Pirate

Christopher Powroznik Metroxe

🏴‍☠️
Quantum Pirate
View GitHub Profile

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

@amunchet
amunchet / noVNCCopyPasteProxmox.user.js
Last active December 7, 2025 11:36
Copy/Paste for noVNC Proxmox
// ==UserScript==
// @name noVNC Paste for Proxmox
// @namespace http://tampermonkey.net/
// @version 0.2a
// @description Pastes text into a noVNC window (for use with Proxmox specifically)
// @author Chester Enright
// @match https://*
// @include /^.*novnc.*/
// @require http://code.jquery.com/jquery-3.3.1.min.js
// @grant none
@ChristopherA
ChristopherA / #Tails-OS-Tips.md
Last active September 22, 2025 19:56
Tails OS Tips #tails #tor #privacy
@Metroxe
Metroxe / seededColour.gif
Last active June 4, 2019 22:47
Seeded Colours
seededColour.gif
@NikhilNarayana
NikhilNarayana / getSlippiCombos.js
Last active November 5, 2022 18:22
This script is deprecated, go check out Project Clippi
const fs = require('fs');
const _ = require('lodash');
const path = require('path');
const crypto = require('crypto');
const moment = require('moment');
const slp = require('@slippi/slippi-js');
const SlippiGame = slp.SlippiGame; // npm install @slippi/slippi-js
const basePath = path.join(__dirname, 'slp/'); // this var is "<directory your script is in>/slp"
@alexpchin
alexpchin / socket-cheatsheet.js
Created December 15, 2015 16:58
A quick cheatsheet for socket.io
// sending to sender-client only
socket.emit('message', "this is a test");
// sending to all clients, include sender
io.emit('message', "this is a test");
// sending to all clients except sender
socket.broadcast.emit('message', "this is a test");
// sending to all clients in 'game' room(channel) except sender
@snrbrnjna
snrbrnjna / .htaccess
Last active May 20, 2025 17:00
Jekyll Auth Plugin - to manage http basic auth for jekyll generated pages and directories
#### Jekyll Layout: /_layouts/.htaccess
# Apache Configuration File
{% if ((page.auth_dir.users != empty) or (page.auth_dir.groups != empty)) %}
AuthName "Privater Bereich"
AuthType Basic
# => mehrere Require Blocks werden geodert: http://d43.me/blog/1157
AuthzUserAuthoritative Off
AuthUserFile {{ page.auth_remote_user_file }}
@mjackson
mjackson / color-conversion-algorithms.js
Last active December 9, 2025 12:36
RGB, HSV, and HSL color conversion algorithms in JavaScript
/**
* Converts an RGB color value to HSL. Conversion formula
* adapted from http://en.wikipedia.org/wiki/HSL_color_space.
* Assumes r, g, and b are contained in the set [0, 255] and
* returns h, s, and l in the set [0, 1].
*
* @param Number r The red color value
* @param Number g The green color value
* @param Number b The blue color value
* @return Array The HSL representation