win3zz

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

sh9351

const todayYear = new Date().getFullYear()
mainLoop: for (let year = todayYear; year > todayYear - 100; year--) {
    for (let month = 1; month <= 12; month++) {
        for (let day = 1; day <= 31; day++) {
            const passphrase = `${year.toString().slice(-2)}${month.toString().padStart(2, '0')}${day.toString().padStart(2, '0')}`
            try {
                const isDecryptionSuccessful = decryptAndReplaceHtml(passphrase)
                if (!isDecryptionSuccessful) throw new Error('Decryption failed')
                console.log(`SUCC ${passphrase}`)
                break mainLoop