Merge pull request #71 from techgaun/feat/modern-service-dictionaries · techgaun/github-dorks@bb7b0ed · GitHub
Skip to content

Commit bb7b0ed

Browse files
techgauntechgaun
authored
Merge pull request #71 from techgaun/feat/modern-service-dictionaries
feat: expand modern service dictionaries
2 parents 70c5625 + 6acaa71 commit bb7b0ed

11 files changed

Lines changed: 181 additions & 7 deletions

File tree

‎README.md‎

Lines changed: 6 additions & 6 deletions

‎docs/dork-sources.md‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,38 @@ dictionary. They are not exhaustive, and a match still requires manual review.
2121
- [OpenAI API key setup](https://platform.openai.com/docs/quickstart)
2222
- [Claude API authentication](https://platform.claude.com/docs/en/api/overview#authentication)
2323
- [Hugging Face user access tokens](https://huggingface.co/docs/hub/security-tokens)
24+
- [Groq API keys](https://console.groq.com/docs/quickstart)
25+
- [Mistral API authentication](https://docs.mistral.ai/api/)
26+
- [Cohere API keys](https://docs.cohere.com/docs/rate-limits)
27+
- [Replicate API tokens](https://replicate.com/docs/topics/security/api-tokens)
28+
- [Pinecone API keys](https://docs.pinecone.io/guides/get-started/authentication)
29+
- [LangSmith environment variables](https://docs.langchain.com/langsmith/observability-quickstart)
30+
31+
## Identity and secrets management
32+
33+
- [1Password service account tokens](https://developer.1password.com/docs/service-accounts/use-with-1password-cli/)
34+
- [Vault token environment variable](https://developer.hashicorp.com/vault/docs/commands#environment-variables)
35+
- [Doppler service tokens](https://docs.doppler.com/docs/service-tokens)
36+
- [Infisical machine identities](https://infisical.com/docs/documentation/platform/identities/machine-identities)
37+
- [Auth0 application credentials](https://auth0.com/docs/get-started/applications/application-settings)
38+
- [Clerk environment variables](https://clerk.com/docs/guides/development/clerk-environment-variables)
39+
40+
## Databases and data platforms
41+
42+
- [Neon API authentication](https://api-docs.neon.tech/reference/authentication)
43+
- [PlanetScale service tokens](https://planetscale.com/docs/concepts/service-tokens)
44+
- [Upstash Redis REST API](https://upstash.com/docs/redis/features/restapi)
45+
- [Upstash Vector REST API](https://upstash.com/docs/vector/api/get-started)
46+
- [MongoDB Atlas API authentication](https://www.mongodb.com/docs/atlas/configure-api-access/)
47+
- [Databricks personal access tokens](https://docs.databricks.com/aws/en/dev-tools/auth/pat)
48+
49+
## Observability and developer security
50+
51+
- [New Relic API keys](https://docs.newrelic.com/docs/apis/intro-apis/new-relic-api-keys/)
52+
- [Grafana service account tokens](https://grafana.com/docs/grafana/latest/administration/service-accounts/)
53+
- [Honeycomb API keys](https://docs.honeycomb.io/configure/environments/manage-api-keys/)
54+
- [PagerDuty API access keys](https://developer.pagerduty.com/docs/rest-api-v2/authentication/)
55+
- [Snyk authentication](https://docs.snyk.io/snyk-cli/authenticate-to-use-the-cli)
2456

2557
## Cloud and infrastructure
2658

@@ -31,6 +63,9 @@ dictionary. They are not exhaustive, and a match still requires manual review.
3163
- [Vercel access tokens](https://vercel.com/docs/rest-api/reference/welcome#creating-an-access-token)
3264
- [Supabase environment variables](https://supabase.com/docs/guides/functions/secrets)
3365
- [Sentry authentication tokens](https://docs.sentry.io/api/auth/)
66+
- [Netlify access tokens](https://docs.netlify.com/api-and-cli-guides/api-guides/get-started-with-api/)
67+
- [Fly.io access tokens](https://fly.io/docs/security/tokens/)
68+
- [Firebase CLI authentication](https://firebase.google.com/docs/cli#cli-ci-systems)
3469

3570
## General secret formats
3671

‎github-dorks.txt‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,22 @@
11
# Generated by scripts/build-dorks.py. Edit github_dorks/dorks/*.txt.
22

3+
# Category: ai
4+
# AI model providers, inference platforms, and vector services
5+
"GROQ_API_KEY" path:.env
6+
"MISTRAL_API_KEY" path:.env
7+
"COHERE_API_KEY" path:.env
8+
"GEMINI_API_KEY" path:.env
9+
"REPLICATE_API_TOKEN" path:.env
10+
"TOGETHER_API_KEY" path:.env
11+
"OPENROUTER_API_KEY" path:.env
12+
"PPLX_API_KEY" path:.env
13+
"PINECONE_API_KEY" path:.env
14+
"WEAVIATE_API_KEY" path:.env
15+
"QDRANT_API_KEY" path:.env
16+
"LANGCHAIN_API_KEY" path:.env
17+
"MODAL_TOKEN_SECRET" path:.env
18+
"FAL_KEY" path:.env
19+
320
# Category: cloud
421
# Cloud provider, infrastructure, observability, and deployment credentials
522
filename:credentials aws_access_key_id
@@ -22,6 +39,11 @@ DATADOG_API_KEY language:shell
2239
"sntrys_"
2340
filename:service-account.json "private_key_id" "private_key"
2441
"GOOGLE_PRIVATE_KEY" path:.env
42+
"NETLIFY_AUTH_TOKEN" path:.env
43+
"RAILWAY_TOKEN" path:.env
44+
"RENDER_API_KEY" path:.env
45+
"FLY_API_TOKEN" path:.env
46+
"FIREBASE_TOKEN" path:.env
2547

2648
# Category: databases
2749
# Database dumps, configuration, credentials, and connection strings
@@ -40,6 +62,14 @@ filename:dbeaver-data-sources.xml
4062
.mlab.com password
4163
"mongodb+srv://" password
4264
"postgres://" password
65+
"NEON_API_KEY" path:.env
66+
"PLANETSCALE_SERVICE_TOKEN" path:.env
67+
"UPSTASH_REDIS_REST_TOKEN" path:.env
68+
"UPSTASH_VECTOR_REST_TOKEN" path:.env
69+
"COCKROACH_API_KEY" path:.env
70+
"MONGODB_ATLAS_PRIVATE_KEY" path:.env
71+
"CLICKHOUSE_PASSWORD" path:.env
72+
"DATABRICKS_TOKEN" path:.env
4373

4474
# Category: devops
4575
# Source control, CI/CD, and package registry credentials
@@ -65,6 +95,14 @@ filename:.npmrc "_authToken="
6595
"pypi-" filename:.pypirc
6696
"NUGET_API_KEY" path:.env
6797
"GEM_HOST_API_KEY" path:.env
98+
"CIRCLE_TOKEN" path:.env
99+
"BUILDKITE_AGENT_TOKEN" path:.env
100+
"AZURE_DEVOPS_EXT_PAT" path:.env
101+
"BITBUCKET_APP_PASSWORD" path:.env
102+
filename:config path:.kube "client-key-data"
103+
filename:kubeconfig "client-key-data"
104+
filename:credentials.tfrc.json "token"
105+
filename:.terraformrc "credentials"
68106

69107
# Category: frameworks
70108
# Web framework and application configuration secrets
@@ -76,6 +114,33 @@ filename:prod.secret.exs
76114
filename:settings.py SECRET_KEY
77115
filename:secrets.yml password
78116

117+
# Category: identity
118+
# Authentication, identity, and secrets-management credentials
119+
"AUTH0_CLIENT_SECRET" path:.env
120+
"CLERK_SECRET_KEY" path:.env
121+
"WORKOS_API_KEY" path:.env
122+
"OKTA_API_TOKEN" path:.env
123+
"STYTCH_SECRET" path:.env
124+
"OP_SERVICE_ACCOUNT_TOKEN" path:.env
125+
"OP_CONNECT_TOKEN" path:.env
126+
"VAULT_TOKEN" path:.env
127+
"DOPPLER_TOKEN" path:.env
128+
"INFISICAL_TOKEN" path:.env
129+
130+
# Category: observability
131+
# Monitoring, telemetry, incident-response, and code-quality credentials
132+
"NEW_RELIC_LICENSE_KEY" path:.env
133+
"NEW_RELIC_API_KEY" path:.env
134+
"GRAFANA_API_KEY" path:.env
135+
"HONEYCOMB_API_KEY" path:.env
136+
"SPLUNK_HEC_TOKEN" path:.env
137+
"DT_API_TOKEN" path:.env
138+
"PAGERDUTY_API_TOKEN" path:.env
139+
"OPSGENIE_API_KEY" path:.env
140+
"SNYK_TOKEN" path:.env
141+
"SONAR_TOKEN" path:.env
142+
"CODECOV_TOKEN" path:.env
143+
79144
# Category: private-keys
80145
# Cryptographic private keys and decryption keys
81146
extension:pem private
@@ -84,6 +149,9 @@ filename:id_rsa or filename:id_dsa
84149
filename:master.key path:config
85150
"-----BEGIN OPENSSH PRIVATE KEY-----"
86151
"-----BEGIN PRIVATE KEY-----"
152+
"-----BEGIN RSA PRIVATE KEY-----"
153+
"-----BEGIN EC PRIVATE KEY-----"
154+
"-----BEGIN PGP PRIVATE KEY BLOCK-----"
87155
"AGE-SECRET-KEY-1"
88156

89157
# Category: saas

‎github_dorks/dorks/ai.txt‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
# AI model providers, inference platforms, and vector services
2+
"GROQ_API_KEY" path:.env
3+
"MISTRAL_API_KEY" path:.env
4+
"COHERE_API_KEY" path:.env
5+
"GEMINI_API_KEY" path:.env
6+
"REPLICATE_API_TOKEN" path:.env
7+
"TOGETHER_API_KEY" path:.env
8+
"OPENROUTER_API_KEY" path:.env
9+
"PPLX_API_KEY" path:.env
10+
"PINECONE_API_KEY" path:.env
11+
"WEAVIATE_API_KEY" path:.env
12+
"QDRANT_API_KEY" path:.env
13+
"LANGCHAIN_API_KEY" path:.env
14+
"MODAL_TOKEN_SECRET" path:.env
15+
"FAL_KEY" path:.env

‎github_dorks/dorks/cloud.txt‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,3 +19,8 @@ DATADOG_API_KEY language:shell
1919
"sntrys_"
2020
filename:service-account.json "private_key_id" "private_key"
2121
"GOOGLE_PRIVATE_KEY" path:.env
22+
"NETLIFY_AUTH_TOKEN" path:.env
23+
"RAILWAY_TOKEN" path:.env
24+
"RENDER_API_KEY" path:.env
25+
"FLY_API_TOKEN" path:.env
26+
"FIREBASE_TOKEN" path:.env

‎github_dorks/dorks/databases.txt‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,3 +14,11 @@ filename:dbeaver-data-sources.xml
1414
.mlab.com password
1515
"mongodb+srv://" password
1616
"postgres://" password
17+
"NEON_API_KEY" path:.env
18+
"PLANETSCALE_SERVICE_TOKEN" path:.env
19+
"UPSTASH_REDIS_REST_TOKEN" path:.env
20+
"UPSTASH_VECTOR_REST_TOKEN" path:.env
21+
"COCKROACH_API_KEY" path:.env
22+
"MONGODB_ATLAS_PRIVATE_KEY" path:.env
23+
"CLICKHOUSE_PASSWORD" path:.env
24+
"DATABRICKS_TOKEN" path:.env

‎github_dorks/dorks/devops.txt‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,3 +21,11 @@ filename:.npmrc "_authToken="
2121
"pypi-" filename:.pypirc
2222
"NUGET_API_KEY" path:.env
2323
"GEM_HOST_API_KEY" path:.env
24+
"CIRCLE_TOKEN" path:.env
25+
"BUILDKITE_AGENT_TOKEN" path:.env
26+
"AZURE_DEVOPS_EXT_PAT" path:.env
27+
"BITBUCKET_APP_PASSWORD" path:.env
28+
filename:config path:.kube "client-key-data"
29+
filename:kubeconfig "client-key-data"
30+
filename:credentials.tfrc.json "token"
31+
filename:.terraformrc "credentials"

‎github_dorks/dorks/identity.txt‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
# Authentication, identity, and secrets-management credentials
2+
"AUTH0_CLIENT_SECRET" path:.env
3+
"CLERK_SECRET_KEY" path:.env
4+
"WORKOS_API_KEY" path:.env
5+
"OKTA_API_TOKEN" path:.env
6+
"STYTCH_SECRET" path:.env
7+
"OP_SERVICE_ACCOUNT_TOKEN" path:.env
8+
"OP_CONNECT_TOKEN" path:.env
9+
"VAULT_TOKEN" path:.env
10+
"DOPPLER_TOKEN" path:.env
11+
"INFISICAL_TOKEN" path:.env

‎github_dorks/dorks/observability.txt‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
# Monitoring, telemetry, incident-response, and code-quality credentials
2+
"NEW_RELIC_LICENSE_KEY" path:.env
3+
"NEW_RELIC_API_KEY" path:.env
4+
"GRAFANA_API_KEY" path:.env
5+
"HONEYCOMB_API_KEY" path:.env
6+
"SPLUNK_HEC_TOKEN" path:.env
7+
"DT_API_TOKEN" path:.env
8+
"PAGERDUTY_API_TOKEN" path:.env
9+
"OPSGENIE_API_KEY" path:.env
10+
"SNYK_TOKEN" path:.env
11+
"SONAR_TOKEN" path:.env
12+
"CODECOV_TOKEN" path:.env

‎github_dorks/dorks/private-keys.txt‎

Lines changed: 3 additions & 0 deletions

0 commit comments

Comments
 (0)