Hacker News new | ask | show | jobs
by wybiral 3415 days ago
A while ago I discovered similarly that there are several searches which lead you to active database logins.

https://github.com/search?&q=mysqli_connect+http&type=Code

https://github.com/search?q="rds.amazonaws.com"&type=Code

etc...
1 comments
Keverw 3415 days ago
Wow. People would really store production passwords on GitHub for everyone to see?

I wonder if GitHub blocked those searches "We could not perform this search Must include at least one user, organization, or repository"

Edit: If I click on PHP for the language in the sidebar they show up. But hmm, I wonder if maybe GitHub tries to block leaks like that from being searched.

link
wybiral 3415 days ago
Yeah, I just started getting those too. But adding "&p=2" to the URL shows results for the next page...

shrug

link
problems 3415 days ago
You could probably also just use Google to find them with site:github.com.
link
wybiral 3415 days ago
When I was a teenager I liked to use search engines to find PHP upload tests. People almost always served uploaded files from a directory and made no distinction between .jpg or .php files.

(No, I didn't exploit this, I just enjoyed finding them)

link