win3zz

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

SoraAzure

property destinationFolder : "Path:to:AirDrop:Folder:in:Alias:format"      -- Please change this
property quarantineTypes : { "59" }

on run {input, parameters}
	tell application "Finder"
		set filesToMove to {}
		repeat with iInput from 1 to count input
			set filePath to item iInput of input
			set shouldProcess to false
			if (count quarantineTypes) > 0 then

menushka

property AIRDROP_FOLDER : "Path:to:AirDrop:Folder:in:Alias:format"
property QUARANTINE_KEY : "59"

property GET_QUARANTINE_COMMAND_START : "ls -l -@ '"
property GET_QUARANTINE_COMMAND_END : "' | tr '\\n' ' ' | sed 's/.*com\\.apple\\.quarantine\\s*\\(\\d*\\)/ \\1/' | awk '{$1=$1};1'"

on adding folder items to this_folder after receiving added_items
	repeat with i from 1 to length of added_items
		set current_item to item i of added_items
		set quarantine_type to getQuarantineType(POSIX path of current_item)

ytakano

#!/usr/bin/env sh

if [ $# -ne 1 ]; then
  echo "need epub file!" 1>&2
  echo "example:" 1>&2
  echo "    $ $0 ebook.epub" 1>&2
  exit 1
fi

FILE=`basename "$1" .epub`

gruber

#!/usr/bin/perl

# 	This filter changes all words to Title Caps, and attempts to be clever
#	about *un*capitalizing small words like a/an/the in the input.
#
#	The list of "small words" which are not capped comes from
#	the New York Times Manual of Style, plus 'vs' and 'v'. 
#
#	10 May 2008
#	Original version by John Gruber:

lotem

#!/bin/bash
#
# put this script in ~/Library/Rime, then deploy Rime for Squirrel:
# ./rime_deployer --build . "/Library/Input Methods/Squirrel.app/SharedSupport/"
# see other supported options:
# ./rime_deployer

DYLD_LIBRARY_PATH="/Library/Input Methods/Squirrel.app/Contents/Frameworks" "/Library/Input Methods/Squirrel.app/Contents/MacOS/rime_deployer" $@

nozma

'' define EmacsMode key bindings
Sub EmacsMode()
    With Application
        .OnKey "^{f}", "ForwardCell"
        .OnKey "^{b}", "BackwardCell"
        .OnKey "^{p}", "PreviousLine"
        .OnKey "^{n}", "NextLine"
        .OnKey "^{a}", "BeginningOfUsedRangeLine"
        .OnKey "^{e}", "EndOfUsedRangeLine"
        .OnKey "%{<}", "BeginningOfUsedRangeRow"

lotem

# 適用於【鼠鬚管】0.9.13+
# 位置：~/Library/Rime/squirrel.custom.yaml
# 用法：想要哪項生效，就刪去該行行首的#字符，但注意保留用於縮進的空格

patch:
#  us_keyboard_layout: true      # 鍵盤選項：應用美式鍵盤佈局
#  show_notifications_when: growl_is_running  # 狀態通知，默認裝有Growl時顯示，也可設爲全開（always）全關（never）
#  style/horizontal: true        # 候選窗横向顯示
#  style/inline_preedit: false   # 非內嵌編碼行
#  style/font_face: "儷黑 Pro"    # 我喜歡的字體名稱