The easiest P1/P2 afaik is Sensitive Information.
You can mostly find this on Github. Using the correct dorks would result in quick $$$$.
Here's a list of highly efficient Github dorks that I use on a regular basis.
🧵👇
#bugbounty #dorks #github #bugbountytips
You can mostly find this on Github. Using the correct dorks would result in quick $$$$.
Here's a list of highly efficient Github dorks that I use on a regular basis.
🧵👇
#bugbounty #dorks #github #bugbountytips
💬 Sensitive words
password, api_key, access_key, dbpassword, dbuser, pwd, pwds, aws_access, key, token, credentials, pass, pwd, passwd, private, preprod, appsecret
password, api_key, access_key, dbpassword, dbuser, pwd, pwds, aws_access, key, token, credentials, pass, pwd, passwd, private, preprod, appsecret
🗣️ Language
Combine the above sensitive words with some well known languages where they're seen usually.
language:json, bash, shell, java etc.
Example: HEROKU_API_KEY language:json
Combine the above sensitive words with some well known languages where they're seen usually.
language:json, bash, shell, java etc.
Example: HEROKU_API_KEY language:json
🧲 Extension
Language is one thing but files with some extensions also contain interesting information.
extension:bat,config,ini,env etc.
Language is one thing but files with some extensions also contain interesting information.
extension:bat,config,ini,env etc.
📁 Filename
filename:netrpc, .git-credentials, .history, .htpasswd, bash_history
filename:netrpc, .git-credentials, .history, .htpasswd, bash_history
🧬 Combined
Often it's better to combine multiple dorks together if you have too many code files.
Often it's better to combine multiple dorks together if you have too many code files.
🚀 These are the dorks I use the most.
Do you use anything else? Comment down below.
Do you use anything else? Comment down below.
That's a wrap!
If you enjoyed this thread:
1. Follow me @thebinarybot for more of these
2. RT the tweet below to share this thread with your audience
If you enjoyed this thread:
1. Follow me @thebinarybot for more of these
2. RT the tweet below to share this thread with your audience
https://twitter.com/973520902343180288/status/1568926898100502534
• • •
Missing some Tweet in this thread? You can try to
force a refresh
