Skip to content

Instantly share code, notes, and snippets.

View mughu94's full-sized avatar
๐ŸŽฏ
Focusing

Muhamad Ghufron mughu94

๐ŸŽฏ
Focusing
6 followers · 11 following
View GitHub Profile
@mughu94
mughu94 / GitHub-Leaked-API-Keys-and-Secrets.md
Created March 14, 2024 22:32 — forked from win3zz/GitHub-Leaked-API-Keys-and-Secrets.md

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

@mughu94
mughu94 / sources.list
Created August 6, 2022 00:40 — forked from ishad0w/sources.list
Ubuntu 20.04 LTS (Focal Fossa) -- Full sources.list
deb http://archive.ubuntu.com/ubuntu/ focal main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu/ focal main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ focal-updates main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu/ focal-updates main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu/ focal-security main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ focal-backports main restricted universe multiverse
@mughu94
mughu94 / rarreg.key
Created April 18, 2022 19:04 — forked from MuhammadSaim/rarreg.key
Step 1: Create a file called rarreg.key Step 2: Paste into the file the raw content of this gist Step 3: Go to Winrar install directory (by default => c:\ProgramFiles\WinRAR\ ) Step 4: Paste the rarreg.key into WinRAR directory Step 5: Enjoy
RAR registration data
WinRAR
Unlimited Company License
UID=4b914fb772c8376bf571
6412212250f5711ad072cf351cfa39e2851192daf8a362681bbb1d
cd48da1d14d995f0bbf960fce6cb5ffde62890079861be57638717
7131ced835ed65cc743d9777f2ea71a8e32c7e593cf66794343565
b41bcf56929486b8bcdac33d50ecf773996052598f1f556defffbd
982fbe71e93df6b6346c37a3890f3c7edc65d7f5455470d13d1190
6e6fb824bcf25f155547b5fc41901ad58c0992f570be1cf5608ba9
@mughu94
mughu94 / gist:c8a54bcc6dc16c577b625876941c32e6
Created July 4, 2021 19:01 — forked from reinink/gist:1467201
Example of how to parse HTML document with phpQuery
<?php
// Include the phpQuery library
// Download at http://code.google.com/p/phpquery/
include 'phpQuery.php';
// Load Mike Fisher's player page on thescore.com
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'http://www.thescore.com/nhl/player_profiles/859-mike-fisher');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
@mughu94
mughu94 / tubing
Created June 9, 2021 15:38 — forked from cirrusUK/tubing
#!/bin/bash
# free keys complements of pastebin, and wtf goofle why AIza
keylist=(
"AIzaSyAafvOlmpO-nhRMdTKhwcK2jVQ8XeZwBfg"
"AIzaSyAAW1uwHofZ7c1zxl75u0flELX5PMs2LvM"
"AIzaSyA8OmKcw2DMNkJicyCJ0vqvf90xgeH52zE"
"AIzaSyBSnh-sIjd97_FmQVzlyGbcaYXuSt_oh84"
"AIzaSyBBcXtLP34Evs2rrdvYyZ63qbY36bQ96wk"
"AIzaSyCQu8QRr-9H_qyWvbXpL6jseGthkd1VCtw"
@mughu94
mughu94 / jawaban_4.sql
Created May 12, 2019 03:48
SELECT name FROM employees
WHERE id NOT IN(SELECT managerId FROM employees WHERE managerId IS NOT NULL AND NOT '');
@mughu94
mughu94 / jawaban_3.sql
Created May 12, 2019 03:45
SELECT COUNT() FROM students WHERE firstName = 'John';
@mughu94
mughu94 / jawaban_2.php
Last active May 12, 2019 03:34
<?php
class Pipeline
{
public static function make_pipeline(...$funcs)
{
return function($arg) use ($funcs)
{
//print_r($funcs);
//die();
foreach ($funcs as $func)
@mughu94
mughu94 / jawaban_1.php
Last active May 12, 2019 03:34
<?php
class Palindrome
{
public static function isPalindrome($word)
{
$word = preg_replace('/[^a-zA-Z]/', '', $word);
$word = strtolower($word);
if($word)
$hasil_word = $word == strrev($word);
@mughu94
mughu94 / DNSCrypt
Created July 15, 2017 15:46 — forked from galpratama/4chan
Buka Blokir Internet Positif. Caranya: https://support.rackspace.com/how-to/modify-your-hosts-file/
Pasang ini untuk membuka akses blokir selain tiga dibawah ini. Pilih resolver yang paling deket (singapura)
https://dnscrypt.org