github-dorks.txt

# Generated by scripts/build-dorks.py. Edit github_dorks/dorks/*.txt.

# Category: ai
# AI model providers, inference platforms, and vector services
"GROQ_API_KEY" path:.env
"MISTRAL_API_KEY" path:.env
"COHERE_API_KEY" path:.env
"GEMINI_API_KEY" path:.env
"REPLICATE_API_TOKEN" path:.env
"TOGETHER_API_KEY" path:.env
"OPENROUTER_API_KEY" path:.env
"PPLX_API_KEY" path:.env
"PINECONE_API_KEY" path:.env
"WEAVIATE_API_KEY" path:.env
"QDRANT_API_KEY" path:.env
"LANGCHAIN_API_KEY" path:.env
"MODAL_TOKEN_SECRET" path:.env
"FAL_KEY" path:.env

# Category: cloud
# Cloud provider, infrastructure, observability, and deployment credentials
filename:credentials aws_access_key_id
filename:.s3cfg
filename:.bash_profile aws
rds.amazonaws.com password
extension:json googleusercontent client_secret
extension:yaml cloud.redislabs.com
extension:json cloud.redislabs.com
DATADOG_API_KEY language:shell
"CLOUDFLARE_API_TOKEN" path:.env
"DIGITALOCEAN_ACCESS_TOKEN" path:.env
"dop_v1_"
"PULUMI_ACCESS_TOKEN" path:.env
"TFE_TOKEN" path:.env
"atlasv1" filename:credentials.tfrc.json
"VERCEL_TOKEN" path:.env
"SUPABASE_SERVICE_ROLE_KEY" path:.env
"SENTRY_AUTH_TOKEN" path:.env
"sntrys_"
filename:service-account.json "private_key_id" "private_key"
"GOOGLE_PRIVATE_KEY" path:.env
"NETLIFY_AUTH_TOKEN" path:.env
"RAILWAY_TOKEN" path:.env
"RENDER_API_KEY" path:.env
"FLY_API_TOKEN" path:.env
"FIREBASE_TOKEN" path:.env

# Category: databases
# Database dumps, configuration, credentials, and connection strings
extension:sql mysql dump
extension:sql mysql dump password
extension:json mongolab.com
extension:yaml mongolab.com
filename:robomongo.json
filename:connections.xml
filename:.pgpass
filename:configuration.php JConfig password
filename:config.php dbpasswd
filename:config.php pass
path:sites databases password
filename:dbeaver-data-sources.xml
.mlab.com password
"mongodb+srv://" password
"postgres://" password
"NEON_API_KEY" path:.env
"PLANETSCALE_SERVICE_TOKEN" path:.env
"UPSTASH_REDIS_REST_TOKEN" path:.env
"UPSTASH_VECTOR_REST_TOKEN" path:.env
"COCKROACH_API_KEY" path:.env
"MONGODB_ATLAS_PRIVATE_KEY" path:.env
"CLICKHOUSE_PASSWORD" path:.env
"DATABRICKS_TOKEN" path:.env

# Category: devops
# Source control, CI/CD, and package registry credentials
filename:.npmrc _auth
filename:.dockercfg auth
filename:.git-credentials
filename:.tugboat NOT _tugboat
HEROKU_API_KEY language:shell
HEROKU_API_KEY language:json
filename:hub oauth_token
filename:config.json auths
filename:express.conf path:.openshift
JEKYLL_GITHUB_TOKEN
HOMEBREW_GITHUB_API_TOKEN language:shell
filename:deployment-config.json
"github_pat_"
"ghp_"
"gho_" OR "ghu_" OR "ghs_" OR "ghr_"
"glpat-"
"gloas-" OR "gldt-"
"glrt-" OR "glrtr-" OR "glcbt-" OR "glptt-"
filename:.npmrc "_authToken="
"pypi-" filename:.pypirc
"NUGET_API_KEY" path:.env
"GEM_HOST_API_KEY" path:.env
"CIRCLE_TOKEN" path:.env
"BUILDKITE_AGENT_TOKEN" path:.env
"AZURE_DEVOPS_EXT_PAT" path:.env
"BITBUCKET_APP_PASSWORD" path:.env
filename:config path:.kube "client-key-data"
filename:kubeconfig "client-key-data"
filename:credentials.tfrc.json "token"
filename:.terraformrc "credentials"

# Category: frameworks
# Web framework and application configuration secrets
filename:wp-config.php
filename:.env DB_USERNAME NOT homestead
filename:.env MAIL_HOST=smtp.gmail.com
filename:prod.exs NOT prod.secret.exs
filename:prod.secret.exs
filename:settings.py SECRET_KEY
filename:secrets.yml password

# Category: identity
# Authentication, identity, and secrets-management credentials
"AUTH0_CLIENT_SECRET" path:.env
"CLERK_SECRET_KEY" path:.env
"WORKOS_API_KEY" path:.env
"OKTA_API_TOKEN" path:.env
"STYTCH_SECRET" path:.env
"OP_SERVICE_ACCOUNT_TOKEN" path:.env
"OP_CONNECT_TOKEN" path:.env
"VAULT_TOKEN" path:.env
"DOPPLER_TOKEN" path:.env
"INFISICAL_TOKEN" path:.env

# Category: observability
# Monitoring, telemetry, incident-response, and code-quality credentials
"NEW_RELIC_LICENSE_KEY" path:.env
"NEW_RELIC_API_KEY" path:.env
"GRAFANA_API_KEY" path:.env
"HONEYCOMB_API_KEY" path:.env
"SPLUNK_HEC_TOKEN" path:.env
"DT_API_TOKEN" path:.env
"PAGERDUTY_API_TOKEN" path:.env
"OPSGENIE_API_KEY" path:.env
"SNYK_TOKEN" path:.env
"SONAR_TOKEN" path:.env
"CODECOV_TOKEN" path:.env

# Category: private-keys
# Cryptographic private keys and decryption keys
extension:pem private
extension:ppk private
filename:id_rsa or filename:id_dsa
filename:master.key path:config
"-----BEGIN OPENSSH PRIVATE KEY-----"
"-----BEGIN PRIVATE KEY-----"
"-----BEGIN RSA PRIVATE KEY-----"
"-----BEGIN EC PRIVATE KEY-----"
"-----BEGIN PGP PRIVATE KEY BLOCK-----"
"AGE-SECRET-KEY-1"

# Category: saas
# SaaS, AI, payment, and communications credentials
PT_TOKEN language:bash
filename:.bashrc mailchimp
extension:json api.forecast.io
jsforce extension:js conn.login
SF_USERNAME salesforce
shodan_api_key language:python
shodan_api_key language:shell
shodan_api_key language:json
shodan_api_key language:ruby
extension:avastlic "support.avast.com"
xoxp OR xoxb
"api_hash" "api_id"
"https://hooks.slack.com/services/"
"OPENAI_API_KEY" path:.env
"ANTHROPIC_API_KEY" path:.env
"sk-ant-"
"HF_TOKEN" path:.env
"hf_" filename:token path:huggingface
"sk_live_" OR "rk_live_"
"SENDGRID_API_KEY" path:.env
"TWILIO_AUTH_TOKEN" path:.env
"SLACK_BOT_TOKEN" path:.env
"DISCORD_BOT_TOKEN" path:.env

# Category: system
# Operating system, shell, server, IDE, and client configuration secrets
filename:.htpasswd
filename:.bashrc password
filename:.netrc password
filename:_netrc password
filename:filezilla.xml Pass
filename:recentservers.xml Pass
filename:idea14.key
filename:config irc_pass
filename:proftpdpasswd
filename:ventrilo_srv.ini
[WFClient] Password= extension:ica
filename:server.cfg rcon password
filename:.bash_history
filename:.cshrc
filename:.history
filename:.sh_history
filename:sshd_config
filename:dhcpd.conf
filename:shadow path:etc
filename:passwd path:etc
filename:sftp-config.json
filename:.esmtprc password
filename:logins.json
filename:CCCam.cfg
msg nickserv identify filename:config
filename:.ftpconfig
filename:.remote-sync.json
filename:sftp.json path:.vscode
filename:WebServers.xml
filename:jupyter_notebook_config.json
filename:github-recovery-codes.txt
filename:gitlab-recovery-codes.txt
filename:discord_backup_codes.txt