Christopher Powroznik Metroxe

Tails OS Tips

#tails #tailsos #tips #links

https://gist.github.com/search?q=u%3Achristophera+tails

Version Details

Current Tails: v 4.25 (2021-12-07)
Based on: Debian GNU/Linux 10.11 “Buster”

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

	/**
	* Converts an RGB color value to HSL. Conversion formula
	* adapted from http://en.wikipedia.org/wiki/HSL_color_space.
	* Assumes r, g, and b are contained in the set [0, 255] and
	* returns h, s, and l in the set [0, 1].
	*
	* @param Number r The red color value
	* @param Number g The green color value
	* @param Number b The blue color value
	* @return Array The HSL representation

	#### Jekyll Layout: /_layouts/.htaccess

	# Apache Configuration File

	{% if ((page.auth_dir.users != empty) or (page.auth_dir.groups != empty)) %}
	AuthName "Privater Bereich"
	AuthType Basic
	# => mehrere Require Blocks werden geodert: http://d43.me/blog/1157
	AuthzUserAuthoritative Off
	AuthUserFile {{ page.auth_remote_user_file }}

	// sending to sender-client only
	socket.emit('message', "this is a test");

	// sending to all clients, include sender
	io.emit('message', "this is a test");

	// sending to all clients except sender
	socket.broadcast.emit('message', "this is a test");

	// sending to all clients in 'game' room(channel) except sender

	const fs = require('fs');
	const _ = require('lodash');
	const path = require('path');
	const crypto = require('crypto');
	const moment = require('moment');
	const slp = require('@slippi/slippi-js');
	const SlippiGame = slp.SlippiGame; // npm install @slippi/slippi-js

	const basePath = path.join(__dirname, 'slp/'); // this var is "<directory your script is in>/slp"

	// ==UserScript==
	// @name noVNC Paste for Proxmox
	// @namespace http://tampermonkey.net/
	// @version 0.2a
	// @description Pastes text into a noVNC window (for use with Proxmox specifically)
	// @author Chester Enright
	// @match https://*
	// @include /^.novnc./
	// @require http://code.jquery.com/jquery-3.3.1.min.js
	// @grant none