streaak / keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
5.06k stars 1.05k forks source link

Restricted keys on Stripe live tokens #48

Open streaak opened 5 years ago

streaak commented 5 years ago

While it is true that this doesn't work currently, restricted keys can be restricted to certain endpoints. It would be really nice not to have to loop through their endpoints to tell if there is a valid key. I will investigate if this is possible.

Originally posted by @KevinHock in https://github.com/streaak/keyhacks/pull/47