rewathkafley

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

Performance characteristics of Android emulators on GitHub Actions

Lots of projects need to test android apps, and use GitHub Actions infrastructure to do so.

This document intends to show current timings for a sample workload, to inform what emulators are a good match for testing.

Test Conditions

We use the AnkiDroid androidTests
they are long enough to execute that they form a nice balance between cold start emulator time so neither dominates

对于所有应用，不建议直接删除，使用adb shell pm disable-user package-name禁用即可，方便出问题时恢复。

DO NOT UNINSTALL:

com.miui.securitycenter
com.miui.securityadd
com.xiaomi.finddevice

(Don’t uninstall these three apps or services from your Xiaomi device. Otherwise, you may encounter device bricking or bootloop issues.)

I Don't Need Port Forwarding and Don't Care About CGNAT

This was rewritten 2022-11-30

This article is for users that want all these features:

To connect to home network from anywhere
Can connect without any port forwarding; either by choice or internet provider can't or won't provide access
No setup or configuration or installation on client machine
No enrolment / registration required

	# This is a little experiment in using Turbo Frames and Streams without Rails.
	# Built using just plain Sinatra as the web server.
	#
	# Make sure that you have sinatra and puma (or some other server) installed:
	# gem install sinatra
	# gem install puma
	#
	# You can then run the app with:
	# ruby app.rb
	require 'sinatra'

	import { riff, route, html, indexRoute } from "../riff/riff.mjs";
	import { serve } from "../riff/riff-express.mjs";
	import {
	deleteTask,
	getProjects,
	getTasks,
	getUser,
	sendEmail,
	updateTask,
	createTask,

	import {ReadableStream} from 'node:stream/web';

	/**
	* @param iterable an iterable (asynchronous or synchronous)
	*
	* @see https://streams.spec.whatwg.org/#example-rs-pull
	*/
	function iterableToReadableStream(iterable) {
	return new ReadableStream({
	async start() {

	import {Readable} from 'node:stream';
	import {TextDecoderStream} from 'node:stream/web';
	import {spawn} from 'node:child_process';

	const childProcess = spawn(
	'echo', ['hello world'],
	{
	stdio: ['ignore', 'pipe', 'inherit'],
	}
	);

	# to add to your ~/.bashrc or your ~/.zshrc file. Usage: $ go switch 1.18.1
	function go() {
	case $* in
	switch* )
	shift 1
	gobindir=$(go env GOBIN)
	# adapt to a valid directory at the beginning of your $PATH if you're not on systemd
	homebindir=$(systemd-path user-binaries)
	go install golang.org/dl/go"$@"@latest
	$gobindir/go"$@" download

	#!/bin/bash

	# Log and graph peformance metrics on a single process
	# Based on: http://brunogirin.blogspot.com.au/2010/09/memory-usage-graphs-with-ps-and-gnuplot.html
	#
	# Requires gnuplot to be installed and on your path.
	#
	# Run: ./process_graph [process name] [pid]

	DEFAULT_PROCNAME="Xorg"