Discover gists

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

ANSI Escape Sequences

Standard escape codes are prefixed with Escape:

Ctrl-Key: ^[
Octal: \033
Unicode: \u001b
Hexadecimal: \x1B
Decimal: 27

Calculate the phase of the moon in bash and get the appropriate icon. This can be used to put a picture of the phase of the moon in your bash prompt.

I used the "Simple" lunar phase calculator from here:

http://www.ben-daglish.net/moon.shtml

It seems to work well on OSX. The call to date that I use is not portable to linux or solaris since date is one of the most infuriatingly inconsistent utilities.

DSA Calendar 2026 | Plan of Action 🔥

DSA is no longer about solving random sheets or memorizing solutions. It’s about a clear, structured, and realistic approach from absolute beginner to interview-ready Candidate.

How to start DSA from zero (even if you don’t know coding)
When to focus on language basics vs DSA
A 3-phase preparation strategy used by serious engineers
Exact timelines for topics, patterns, and problem counts
Why 300–400 problems ≠ success (and what actually matters)

NOTE

These are NOT product / license keys that are valid for Windows activation.
These keys only select the edition of Windows to install during setup, but they do not activate or license the installation.

Index

Windows 11
RTM Generic Keys

	// ==UserScript==
	// @name Export Wealthsimple transactions to CSV for YNAB
	// @namespace https://shotasenga.com/
	// @version 2025080400
	// @description Export transactions from Wealthsimple to a CSV file for YNAB import
	// @author Shota Senga
	// @match https://my.wealthsimple.com/app/*
	// @icon https://www.google.com/s2/favicons?sz=64&domain=wealthsimple.com
	// @grant none
	// ==/UserScript==

	Privacy Policy for [Bot Name]

	This Privacy Policy governs the collection, use, and sharing of personal information by [Bot Name], a Discord bot developed by [Developer Name]. By using [Bot Name], you agree to the terms of this Privacy Policy.

	Information We Collect

	We collect information that you provide to us through your use of the bot, such as your Discord user ID and username, server and channel information, and message content. We may also collect usage data, such as the frequency and duration of your use of the bot.

	How We Use Your Information

	// Based on idea: https://twitter.com/pkhuong/status/1287510400372748290

	use hashbrown::raw::RawTable;

	pub struct ScopeMap<K, V> {
	last_scope_id: ScopeId,
	scopes: Vec<ScopeId>, // values are zeroed instead of popped to save a check in get() / is_fresh()
	current_scope: ScopeDepth, // index of innermost valid scope
	values: RawTable<Entry<K, V>>,
	shadowed: Vec<Shadowed<K, V>>,

	from datetime import datetime
	from math import log10
	import json
	import requests

	# Enter the glass node API_KEY here
	glass_node_api_key = ''

	birth_date = datetime(year=2009, month=1, day=3)
	today = datetime.now()