4 ms·
A while ago I discovered similarly that there are several searches which lead you to active database logins. https://github.com/search?&q=mysqli_connect+http&t
by wybiral 10y ago
A while ago I discovered similarly that there are several searches which lead you to active database logins.
https://github.com/search?&q=mysqli_connect+http&type=Code https://github.com/search?&q=mysqli_connect+http&type=Code
https://github.com/search?q="rds.amazonaws.com"&type=Code https://github.com/search?q="rds.amazonaws.com"&type=Code
etc...
- Keverw 10y agoWow. People would really store production passwords on GitHub for everyone to see? I wonder if GitHub blocked those searches "We could not perform this search Must include at least one user, organization, or repository" Edit: If I click on PHP for the language in the sidebar they show up. But hmm, I wonder if maybe GitHub tries to block leaks like that from being searched.
- wybiral 10y agoYeah, I just started getting those too. But adding "&p=2" to the URL shows results for the next page... shrug
- problems 10y agoYou could probably also just use Google to find them with site:github.com.
- wybiral 10y agoWhen I was a teenager I liked to use search engines to find PHP upload tests. People almost always served uploaded files from a directory and made no distinction between .jpg or .php files. (No, I didn't exploit this, I just enjoyed finding them)