keyhacks icon indicating copy to clipboard operation
keyhacks copied to clipboard

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Results 49 keyhacks issues
Sort by recently updated
recently updated
newest added

Any idea on how to use DocuSign private key?

tag: question
status: unanswered

I just found an Google recaptcha Secret key in a Site, but I do not know what is the impact and how to exploit more with this key Please help...

tag: question
status: unanswered

how to exploit it as we dont have app_id

tag: question
status: unanswered

Hello, I discovered the leakage of nuxtKey and nuxtKeySecret in the wild. I read the official document and found no way to use it. Do you have a way to...

tag: question
status: unanswered

Hi, Is it possible to add a way to verify the validity of Accengage leaked acc_partner_id, acc_private_key and acc_sender_id? I don't think there's another way to verify via a web...

tag: needs more info

a lot of times, bugsnag api keys are embedded in page source.

tag: needs more info

Hi, I think it could be useful to add this for HockeyApp key: https://www.allysonomalley.com/2020/01/06/saying-goodbye-to-my-favorite-5-minute-p1/

status: pr needed

Here is api doc: https://openapi.appcenter.ms/ https://docs.microsoft.com/en-us/appcenter/api-docs/

status: pr needed

here is more info on it https://mandrillapp.com/api/docs/users.JSON.html

status: pr needed

@streaak What I am missing? ![2021-05-24 20_43_26-root@kali_ ~](https://user-images.githubusercontent.com/7748482/119368831-1d424080-bcd1-11eb-8660-416985f0a709.png)

tag: question
status: solved