Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New Mailchimp keys #223

Merged
merged 2 commits into from
Nov 1, 2021
Merged

New Mailchimp keys #223

merged 2 commits into from
Nov 1, 2021

Conversation

spicyyboi
Copy link
Contributor

@spicyyboi spicyyboi commented Oct 25, 2021 •
edited
Loading

⚠ Pull Requests not made with this template will be automatically closed 🔥

Prerequisites

What GitHub issues does this fix?

  • This adds some example tokens to the mailchimp API keys mentioned in Find / add tests for API keys! #150
  • Unfortunately, the URL to check that the API key is valid depends partly on the datacenter the key itself is assigned to. This means that if the key ends with us-5, for example, the requested url is https://us5.api.mailchimp.com/3.0/. Maybe that would be a useful feature to add to the exploit key to support multiple capture groups. I've added a comment to the Mailchimp exploit string (see the output below) but there might be other examples where this could be a useful feature.

Copy / paste of output

> what a80122b2565c3e26a61cbf58d1d1aad7-us5
Matched on: a80122b2565c3e26a61cbf58d1d1aad7
Name: Datadog API Key
Exploit: Use the command below to verify that the API key is valid:
  $ curl -X GET https://api.datadoghq.com/api/v1/validate -H "Content-Type: application/json" -H "DD-API-KEY: 
a80122b2565c3e26a61cbf58d1d1aad7"


Matched on: a80122b2565c3e26a61cbf58d1d1aad7-us5
Name: Mailchimp API Key
Exploit: Use the command below to verify that the API key is valid (substitute <dc> for your datacenter, i. e. us5):
  $ curl --request GET --url 'https://<dc>.api.mailchimp.com/3.0/' --user 
'anystring:a80122b2565c3e26a61cbf58d1d1aad7-us5' --include


Matched on: 122b2565c3e26a61cbf58d1d1aad7
Name: Bitcoin (₿) Wallet Address
Link:  https://www.blockchain.com/btc/address/122b2565c3e26a61cbf58d1d1aad7

Matched on: e26
Name: Latitude & Longitude Coordinates
Link:  https://www.google.com/maps/place/e26

@codecov-commenter
Copy link

Codecov Report

Merging #223 (1e340f2) into main (1bdab9e) will increase coverage by 0.03%.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #223      +/-   ##
==========================================
+ Coverage   92.57%   92.60%   +0.03%     
==========================================
  Files          15       15              
  Lines        1212     1217       +5     
==========================================
+ Hits         1122     1127       +5     
  Misses         90       90
Impacted Files Coverage Δ
tests/test_click.py 98.36% <100.00%> (+0.01%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1bdab9e...1e340f2. Read the comment docs.

@bee-san bee-san merged commit 6162ace into bee-san:main Nov 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bee-san bee-san bee-san approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@spicyyboi @codecov-commenter @bee-san