Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-11-10 07:04:22 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #135 from nizam0906/patch-1

Browse source 
Fixed Broken Links in API Key Leaks
This commit is contained in:
Swissky 2019-12-17 17:39:55 +01:00 committed by GitHub
commit 4588cc2eee
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
API Key Leaks/README.md
View file

@ -7,14 +7,14 @@
- [Tools](#tools)
- [Exploit](#exploit)
- [Algolia](#algolia)
- [AWS Access Key ID & Secret](#aws-access-key-id-secret)
- [AWS Access Key ID & Secret](#aws-access-key-id--secret)
- [Slack API Token](#slack-api-token)
- [Facebook Access Token](#facebook-access-token)
- [Github client id and client secret](#github-client-id-and-client-secret)
- [Twilio Account_sid and Auth Token](#twilio-account_sid-and-auth-token)
- [Twitter API Secret](#twitter-api-secret)
- [Twitter Bearer Token](#twitter-bearer-token)
- [Gitlab Personal Access Token](#gitlab-personnal-access-token)
- [Gitlab Personal Access Token](#gitlab-personal-access-token)
## Tools
@ -90,4 +90,4 @@ curl "https://gitlab.example.com/api/v4/projects?private_token=<your_access_toke
## References
* [Finding Hidden API Keys & How to use them - Sumit Jain - August 24, 2019](https://medium.com/@sumitcfe/finding-hidden-api-keys-how-to-use-them-11b1e5d0f01d)
* [Private API key leakage due to lack of access control - yox - August 8, 2018](https://hackerone.com/reports/376060)
* [Private API key leakage due to lack of access control - yox - August 8, 2018](https://hackerone.com/reports/376060)