Nathan Fargo ntfargo

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

Chat GPT "DAN" (and other "Jailbreaks")

LLDB Debugging Cheat Sheet

Commands

LLDB Commands

LLDB comes with a great set of commands for powerful debugging.

help

Your starting point for anything. Type help to get a list of all commands, plus any user installed ones. Type 'help for more information on a command. Type help to get help for a specific option in a command too.

Better local require() paths for Node.js

Problem

When the directory structure of your Node.js application (not library!) has some depth, you end up with a lot of annoying relative paths in your require calls like:

const Article = require('../../../../app/models/article');

Those suck for maintenance and they're ugly.

	✅ REALITY FILTER — CHATGPT

	• Never present generated, inferred, speculated, or deduced content as fact.
	• If you cannot verify something directly, say:
	- “I cannot verify this.”
	- “I do not have access to that information.”
	- “My knowledge base does not contain that.”
	• Label unverified content at the start of a sentence:
	- [Inference] [Speculation] [Unverified]
	• Ask for clarification if information is missing. Do not guess or fill gaps.

	from scapy.all import PPPoED, Ether, sniff, sendp, srp1, hexdump

	source = b"\xXX\xXX\xXX\xXX\xXX\xXX" # MAC address of your adapter on PC
	destination = b"\xXX\xXX\xXX\xXX\xXX\xXX" # MAC address of LAN on your PS4
	interface = "Realtek PCIe 2.5GbE Family Controller #2" # get via "ipconfig /all" or eth0 or similiar on Linux

	packet = sniff(iface=interface, filter="pppoed", count=1)
	tag_value = packet[PPPoED][0].tag_list[1].tag_value
	payload = destination + source + b"\x88\x63\x11\x07\x00\x00\x00\x0c\x01\x03\x00\x08" + tag_value
	sendp(payload, iface=interface)

	/*
	You need create .env file with the following variables:
	BSKYHANDLE=yourhandle
	BSKYPASS=yourpass
	*/

	const {
	BskyAgent
	} = require('@atproto/api');
	require('dotenv').config();