techgaun / github-dorks

Find leaked secrets via github search
Apache License 2.0
2.82k stars 591 forks source link

Add support to cycle through multiple access tokens #15

Open techgaun opened 7 years ago

techgaun commented 7 years ago

Or maybe there's an alternative? But, if we can use tokens from multiple users, we can probably improve the time to wait.

Plazmaz commented 7 years ago

I'm working on a private project with similar functionality and we've had a lot of success with OAuth tokens.

techgaun commented 7 years ago

I think Search API has custom rate limit which is same regardless of token type. The other way I can think of would be to just have the repo(s) cloned on the local for an org/person/repo and then run a scan locally. this would require rewriting the tool though

Plazmaz commented 7 years ago

@techgaun yes, however each independent key has a separate ratelimit. So if you had 2 or 3 friends, then you can achieve 2 or 3 times the search speed.

techgaun commented 7 years ago

ahh yeah thats what this issue is for :) I understood your comment differently (sorry). If you want to take this issue, I would be more than happy. Otherwise, I will try getting it done over next weekend.

Plazmaz commented 7 years ago

Unfortunately I don't know that I'll have the time for this. Also, my Python is very rusty.

techgaun commented 7 years ago

cool no problem