Skip to content

Conversation

@carlospolop
Copy link
Collaborator

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

  • Blog URL:
  • Blog Title: Research Update: Enhanced src/generic-methodologies-and-resources/external-recon-methodology/github-leaked-secrets.md
  • Suggested Section: Research

🎯 Content Summary

Research Update for src/generic-methodologies-and-resources/external-recon-methodology/github-leaked-secrets.md

This PR contains automated research updates including:

  • Latest security vulnerabilities and attack vectors
  • Updated techniques and tools
  • Enhanced explanations and examples
  • Additional references and resources

Generated by: HackTricks Research Agent
Timestamp: 2025-10-16 08:31:13 UTC

This update was generated through automated security research to keep HackTricks...

🔧 Technical Details

Research update for HackTricks content

🤖 Agent Actions

I read the existing page, researched recent developments and tools, and enhanced the file with up-to-date, technical, and practical content while preserving all valuable existing material. Key updates:

  • Added modern guidance on GitHub Code Search (regex usage, branch scoping, practical examples).
  • Added actionable org-wide scanning workflows and one-liners for TruffleHog v3, Gitleaks v8, Nosey Parker, and ggshield.
  • Clarified common leak locations in GitHub (history, issues/PRs, wikis, actions logs, releases, gists) and important gotchas (legacy API limits, indexing/size caveats).
  • Updated tool list with maintenance status where relevant.
  • Introduced a short “Updated dorks for modern tokens” section (GitHub and Slack token prefixes, common AI/cloud keys).
  • Kept the original large dorks block intact.
  • Linked to the related HackTricks page via an internal reference block.
  • Added a concise References section (2 high-signal links).

If you want any additional sections (e.g., automated triage/de-duplication workflow or CI integration examples), I can add them.


This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

📚 Repository Maintenance

  • MD files processed: 900
  • MD files fixed: 4

All .md files have been checked for proper formatting (headers, includes, etc.).

@carlospolop
Copy link
Collaborator Author

🔗 Additional Context

Original Blog Post:

Content Categories: Based on the analysis, this content was categorized under "Research".

Repository Maintenance:

  • MD Files Formatting: 900 files processed (4 files fixed)

Review Notes:

  • This content was automatically processed and may require human review for accuracy
  • Check that the placement within the repository structure is appropriate
  • Verify that all technical details are correct and up-to-date
  • All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0

@carlospolop
Copy link
Collaborator Author

merge

@carlospolop carlospolop merged commit 80341ec into master Oct 16, 2025
@carlospolop carlospolop deleted the research_update_src_generic-methodologies-and-resources_external-recon-methodology_github-leaked-secrets_20251016_082732 branch October 16, 2025 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants