Leaks Private API keys extracted from 55GB Leak

mightydawn
1,061
Posts
8,822
Likes

mightydawn


Staff member
Administrator
Moderator
Level ( I )



A few thousand API keys extracted from my 55GB leak and organized by API key type.

Tokens/keys for AWS, Stripe, Shopify, Facebook, Google, Linkedin, and other services are included.

Pass: leakeddatabases.com

amazon_sns_topic
aws_access_key
aws_secret_key
bitly_secret_key
discord_webhook
facebook_client_id
facebook_secret_key
github_access_token
google_api_key
google_cloud_platfor_API_key
google_fcm_server_key
google_oath_id
linkedin_client_id
linkedin_private_key
mailchimp_api_key
mailgun_api_key
mongodb_cloud_connection_string
output.doc
sendgrid_token
shopify_private_app_access_token
slack_api_token
slack_webhook
stripe_standard_api_token
twitter_client_id
zapier_webhook
​
[+] Google OAuth ID
| ./odwin/odwen_warehouse_invoicing--CG--899e0c01169b13251d02c8d04e8b780ce4985d56--CG--2095/app/app/db/odwen_23_oct.sql
| 7652:(41, 'googleAppId', 'Google App Id', '176072272130-oop5fsnc62do45b1eare7sdf8pn73hfb.apps.googleusercontent.com', 'input'),
|
| ./odwin/odwen_master--CG--e5ce1c017bcf11e263b15b7ed7d69ffbde282fe9--CG--2095/app/app/db/odwen_28_nov.sql
| 7982:(41, 'googleAppId', 'Google App Id', '176072272130-oop5fsnc62do45b1eare7sdf8pn73hfb.apps.googleusercontent.com', 'input'),
|
| ./odwin/odwen_master--CG--e5ce1c017bcf11e263b15b7ed7d69ffbde282fe9--CG--2095/app/app/db/odwen_23_oct.sql
| 7652:(41, 'googleAppId', 'Google App Id', '176072272130-oop5fsnc62do45b1eare7sdf8pn73hfb.apps.googleusercontent.com', 'input'),
|
| ./odwin/odwen_master--CG--e5ce1c017bcf11e263b15b7ed7d69ffbde282fe9--CG--2095/app/app/db/odwen_22_feb_22.sql
| 143144:(41, 'googleAppId', 'Google App Id', '176072272130-oop5fsnc62do45b1eare7sdf8pn73hfb.apps.googleusercontent.com', 'input'),​
Click to expand...
​
[+] Facebook Client ID
| ./odwin/odwen_warehouse_invoicing--CG--899e0c01169b13251d02c8d04e8b780ce4985d56--CG--2095/app/app/db/odwen_23_oct.sql
| 7634:(23, 'facebookAppId', 'Facebook Application Id', '445048658985201', 'input'),
|
| ./odwin/odwen_master--CG--e5ce1c017bcf11e263b15b7ed7d69ffbde282fe9--CG--2095/app/app/db/odwen.sql
| 50398:(23, 'facebookAppId', 'Facebook Application Id', '445048658985201', 'input'),
|
| ./odwin/odwen_master--CG--e5ce1c017bcf11e263b15b7ed7d69ffbde282fe9--CG--2095/app/app/db/odwen_28_nov.sql
| 7964:(23, 'facebookAppId', 'Facebook Application Id', '445048658985201', 'input'),​
Click to expand...
​
[+] AWS Access Key
| ./odwin/odwen_warehouse_invoicing--CG--899e0c01169b13251d02c8d04e8b780ce4985d56--CG--2095/app/app/Config/Constant.php
| 420:define('IAM_KEY', 'AKIAZDRCJO4XVJHAAH32');
|
| ./odwin/odwen_master--CG--da2a6b38c800cbb770f0a4099fb7cfc5876877d2--CG--2095/app/app/Config/Constant.php
| 430:define('IAM_KEY', 'AKIAZDRCJO4XVJHAAH32');
|
| ./odwin/odwen_master--CG--e5ce1c017bcf11e263b15b7ed7d69ffbde282fe9--CG--2095/app/app/Config/Constant.php
| 439:define('IAM_KEY', 'AKIAZDRCJO4XVJHAAH32');​
Click to expand...
​
[+] GitHub Access Token
| ./65_0_97_133-9000/com.example.maven-project_maven-project/pom.xml
| 216: <connection>scm:git:git@github.com:jleetutorial/maven-project.git</connection>
| 217: <developerConnection>scm:git:git@github.com:jleetutorial/maven-project.git</developerConnection>
|
| ./140_112_90_150-9000/AC-Fix-Build-679/serenity-jira-requirements-provider/pom.xml
| 24: <connection>scm:git:git@github.com:thucydides-webtests/thucydides-jira-requirements-provider.git</connection>
| 25: <developerConnection>scm:git:git@github.com:thucydides-webtests/thucydides-jira-requirements-provider.git
| 27: <url>scm:git:git@github.com:thucydides-webtests/thucydides-jira-requirements-provider.git</url>
|
| ./140_112_90_150-9000/AC-Fix-Build-679/serenity-jira-plugin/pom.xml
| 16: <connection>scm:git:git@github.com:thucydides-webtests/thucydides-jira-plugin.git</connection>
| 17: <developerConnection>scm:git:git@github.com:thucydides-webtests/thucydides-jira-plugin.git</developerConnection>
| 18: <url>scm:git:git@github.com:thucydides-webtests/thucydides.git</url>​
Click to expand...
​
[+] LinkedIn Secret Key
| ./odwin/odwen_stock_audit--CG--e1f9e0cdaa727b65bc173a6bedb5901a328e219d--CG--2095/app/app/Plugin/app/Plugin/Usermgmt/app/Plugin/Usermgmt/Controller/app/Plugin/Usermgmt/Controller/Component/UserConnectComponent.php
| 192: $response = $OBJ_linkedin->retrieveTokenRequest();
| 205: $response = $OBJ_linkedin->retrieveTokenAccess($_SESSION['oauth']['linkedin']['request']['oauth_token'], $_SESSION['oauth']['linkedin']['request']['oauth_token_secret'], $_GET['oauth_verifier']);
|
| ./odwin/odwen_warehouse_invoicing--CG--899e0c01169b13251d02c8d04e8b780ce4985d56--CG--2095/app/app/Plugin/app/Plugin/Usermgmt/app/Plugin/Usermgmt/Controller/app/Plugin/Usermgmt/Controller/Component/UserConnectComponent.php
| 192: $response = $OBJ_linkedin->retrieveTokenRequest();
| 205: $response = $OBJ_linkedin->retrieveTokenAccess($_SESSION['oauth']['linkedin']['request']['oauth_token'], $_SESSION['oauth']['linkedin']['request']['oauth_token_secret'], $_GET['oauth_verifier']);​
Click to expand...
​
[+] Facebook Secret Key
| ./3_94_2_67-9000/mb-infosolution-assginment_master--CG--1606146205138/manager/settings.py
| 202:SOCIAL_AUTH_FACEBOOK_SECRET = 'c3a36a9fc279ce0d0ac77a975f1d47f7' # App Secret
|
| ./3_94_2_67-9000/Foto-Dino-Refactor_main--CG--1630976150322/Foto_Dino/Foto_Dino/Foto_Dino/settings.py
| 185:SOCIAL_AUTH_FACEBOOK_SECRET = "02bea459e68a8af476a1feed4398bffa"
|
| ./3_94_2_67-9000/foto-dino_admin-views-update--CG--1630976149280/FotoDino/settings.py
| 187:SOCIAL_AUTH_FACEBOOK_SECRET = "02bea459e68a8af476a1feed4398bffa"
|
| ./3_94_2_67-9000/edunaa-backend_devops-docker-fix--CG--670dbce6f267cb12b389a31fc1a9974d944de9e6--CG--636/edunaa/edunaa/edunaa/edunaa/edunaa/settings/settings.py
| 115:SOCIAL_AUTH_FACEBOOK_SECRET = 'eb71dc783b0e0eb72810e79353290c88'​
Click to expand...
​
[+] Twitter Client ID
| ./82_116_121_46-9000/Activiti/activiti-engine/src/test/resources/org/activiti/engine/test/api/repository/diagram/testProcessFromActivitiDesigner.bpmn20.xml
| 3: <process id="TwitterDemoProcess" name="TwitterDemoProcess">
|
| ./140_112_90_150-9000/AC-Fix-Build-2575/support/support/cas-server-support-pac4j-core-clients/src/support/cas-server-support-pac4j-core-clients/src/test/java/org/apereo/cas/support/cas-server-support-pac4j-core-clients/src/test/java/org/apereo/cas/support/pac4j/support/cas-server-support-pac4j-core-clients/src/test/java/org/apereo/cas/support/pac4j/web/flow/DelegatedClientAuthenticationActionTests.java
| 84: final TwitterClient twitterClient = new TwitterClient("3nJPbVTVRZWAyUgoUKQ8UA", "h6LZyZJmcW46Vu8R47MYfeXTSYGI30EqnWaSwVhFkbA");
|
| ./3_94_2_67-9000/Php_locked-exception-forward-existing-17--CG--a480feaf35dad690b6bec3a95cdab402b14d3c53--CG--912/settings/settings/templates/settings/templates/settings/settings/templates/settings/personal/personal.info.php
| 260: <?php if (!empty($_['twitter']) || $_['lookupServerUploadEnabled']) { ?>
|
| ./3_94_2_67-9000/Php_locked-exception-forward-existing-17--CG--a480feaf35dad690b6bec3a95cdab402b14d3c53--CG--912/apps/apps/federatedfilesharing/apps/federatedfilesharing/css/settings-personal.scss
| 35: @include icon-color('social-twitter', 'federatedfilesharing', $color-black);
|
| ./3_94_2_67-9000/Php_open-file-editor--CG--d6e431a2211e96248e8d61a33d21896fe0678c89--CG--912/settings/settings/templates/settings/templates/settings/settings/templates/settings/personal/personal.info.php
| 255: <?php if (!empty($_['twitter']) || $_['lookupServerUploadEnabled']) { ?>​
Click to expand...
​
[+] Shopify Private App Access Token
| ./3_94_2_67-9000/hemsa-ms-seller_development--CG--1646633990914/test.js
| 7: password: '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',
|
| ./3_94_2_67-9000/hemsa-ms-seller_development--CG--1646633990914/src/src/services/module.srv.ts
| 25: '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',
|
| ./3_94_2_67-9000/hemsa-ms-seller_development--CG--1646633990914/test/test/specs/test/specs/seller-test/seller-test.spec.ts
| 24: password: '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',
|
| ./3_94_2_67-9000/gemist-server_feature_.API-166-upload-image-to-s3--CG--f84ec2966cfd40a6a0565882cf89476d7709b19e--CG--1322/api/config.js
| 13: password: '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'​
Click to expand...
 
G
1
Posts
0
Likes

Gigi


Level ( I )
mightydawn said:

*** Hidden text: cannot be quoted. ***


A few thousand API keys extracted from my 55GB leak and organized by API key type.

Tokens/keys for AWS, Stripe, Shopify, Facebook, Google, Linkedin, and other services are included.

amazon_sns_topic
aws_access_key
aws_secret_key
bitly_secret_key
discord_webhook
facebook_client_id
facebook_secret_key
github_access_token
google_api_key
google_cloud_platfor_API_key
google_fcm_server_key
google_oath_id
linkedin_client_id
linkedin_private_key
mailchimp_api_key
mailgun_api_key
mongodb_cloud_connection_string
output.doc
sendgrid_token
shopify_private_app_access_token
slack_api_token
slack_webhook
stripe_standard_api_token
twitter_client_id
zapier_webhook














​
Click to expand...
Thanks for this share!
 
S
6
Posts
2
Likes

sayebzebi


Level ( I )
mightydawn said:

*** Hidden text: cannot be quoted. ***


A few thousand API keys extracted from my 55GB leak and organized by API key type.

Tokens/keys for AWS, Stripe, Shopify, Facebook, Google, Linkedin, and other services are included.

amazon_sns_topic
aws_access_key
aws_secret_key
bitly_secret_key
discord_webhook
facebook_client_id
facebook_secret_key
github_access_token
google_api_key
google_cloud_platfor_API_key
google_fcm_server_key
google_oath_id
linkedin_client_id
linkedin_private_key
mailchimp_api_key
mailgun_api_key
mongodb_cloud_connection_string
output.doc
sendgrid_token
shopify_private_app_access_token
slack_api_token
slack_webhook
stripe_standard_api_token
twitter_client_id
zapier_webhook














​
Click to expand...
oh yes thanks
 
K
2
Posts
0
Likes

kruzira


Level ( I )
mightydawn said:

*** Hidden text: cannot be quoted. ***


A few thousand API keys extracted from my 55GB leak and organized by API key type.

Tokens/keys for AWS, Stripe, Shopify, Facebook, Google, Linkedin, and other services are included.

Pass: leakeddatabases.com

amazon_sns_topic
aws_access_key
aws_secret_key
bitly_secret_key
discord_webhook
facebook_client_id
facebook_secret_key
github_access_token
google_api_key
google_cloud_platfor_API_key
google_fcm_server_key
google_oath_id
linkedin_client_id
linkedin_private_key
mailchimp_api_key
mailgun_api_key
mongodb_cloud_connection_string
output.doc
sendgrid_token
shopify_private_app_access_token
slack_api_token
slack_webhook
stripe_standard_api_token
twitter_client_id
zapier_webhook














​
Click to expand...
thanks a lot bro
 
D
2
Posts
0
Likes

donapola


Level ( I )
mightydawn said:

*** Hidden text: cannot be quoted. ***


A few thousand API keys extracted from my 55GB leak and organized by API key type.

Tokens/keys for AWS, Stripe, Shopify, Facebook, Google, Linkedin, and other services are included.

Pass: leakeddatabases.com

amazon_sns_topic
aws_access_key
aws_secret_key
bitly_secret_key
discord_webhook
facebook_client_id
facebook_secret_key
github_access_token
google_api_key
google_cloud_platfor_API_key
google_fcm_server_key
google_oath_id
linkedin_client_id
linkedin_private_key
mailchimp_api_key
mailgun_api_key
mongodb_cloud_connection_string
output.doc
sendgrid_token
shopify_private_app_access_token
slack_api_token
slack_webhook
stripe_standard_api_token
twitter_client_id
zapier_webhook














​
Click to expand...
awesome, thanks bro.
 
You must log in or register to reply here.
Top