dwisiswant0 / gf-secrets

Secret and/or credential patterns used for gf.

🔑 gf-secrets

Secret and/or credential patterns used for gf.

Requirements ✨

• Have gf in your machine. Install now if not ready!

Getting started 💫

Clone this repository.

▶ git clone https://github.com/dwisiswant0/gf-secrets

Then copy all JSON pattern files into ~/.gf directory.

▶ cd gf-secrets/
▶ cp -a .gf/ $HOME

See also:

• secpat2gf: convert secret patterns to gf compatible.

Workaround ♻️

Finding for testing point with gau and fff.

▶ gau -subs [host] | cut -d"?" -f1 | grep -E "\.js(onp?)?$" | tee urls.txt
▶ sort -u urls.txt | fff -s 200 -o out/

After we save response from known URLs, it's time to digging for secrets.

Usage 💬

▶ ./gf-secrets.sh

You will see stdout results in your terminal if grep recursively turns match.

Contributing 👥

If you find a general pattern for secrets and/or credentials, feel free to open pull request. 💚

License 📄

The JSON files and documentation in this project are released under the MIT License.

Tools used with this project include third party materials.

gf-secrets's Issues

Need help

Hello, I have a little question.
I am trying to use the tool but I can't manage to get some output.
I am trying this, but maybe this approach is wrong because I don't get any output...
cat jsfiles | for i in gf -list; do [[ ${i} =~ "_secrets"* ]] && gf ${i}; done

need help 2:)

I can`t install fff. go install github.com/tomnomnom/fff@latest - doesnt work!
Then copy all JSON pattern files into ~/.gf directory. - which JSON patterns? where to get them? thx