Skip to content

New Mailchimp keys#223

Merged
bee-san merged 2 commits intobee-san:mainfrom
spicyyboi:mailchimp
Nov 1, 2021
Merged

New Mailchimp keys#223
bee-san merged 2 commits intobee-san:mainfrom
spicyyboi:mailchimp

Conversation

@spicyyboi
Copy link
Copy Markdown
Contributor

@spicyyboi spicyyboi commented Oct 25, 2021 •
edited
Loading

⚠ Pull Requests not made with this template will be automatically closed 🔥

Prerequisites

What GitHub issues does this fix?

  • This adds some example tokens to the mailchimp API keys mentioned in Find / add tests for API keys! #150
  • Unfortunately, the URL to check that the API key is valid depends partly on the datacenter the key itself is assigned to. This means that if the key ends with us-5, for example, the requested url is https://us5.api.mailchimp.com/3.0/. Maybe that would be a useful feature to add to the exploit key to support multiple capture groups. I've added a comment to the Mailchimp exploit string (see the output below) but there might be other examples where this could be a useful feature.

Copy / paste of output

> what a80122b2565c3e26a61cbf58d1d1aad7-us5
Matched on: a80122b2565c3e26a61cbf58d1d1aad7
Name: Datadog API Key
Exploit: Use the command below to verify that the API key is valid:
  $ curl -X GET https://api.datadoghq.com/api/v1/validate -H "Content-Type: application/json" -H "DD-API-KEY: 
a80122b2565c3e26a61cbf58d1d1aad7"


Matched on: a80122b2565c3e26a61cbf58d1d1aad7-us5
Name: Mailchimp API Key
Exploit: Use the command below to verify that the API key is valid (substitute <dc> for your datacenter, i. e. us5):
  $ curl --request GET --url 'https://<dc>.api.mailchimp.com/3.0/' --user 
'anystring:a80122b2565c3e26a61cbf58d1d1aad7-us5' --include


Matched on: 122b2565c3e26a61cbf58d1d1aad7
Name: Bitcoin (₿) Wallet Address
Link:  https://www.blockchain.com/btc/address/122b2565c3e26a61cbf58d1d1aad7

Matched on: e26
Name: Latitude & Longitude Coordinates
Link:  https://www.google.com/maps/place/e26

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Oct 25, 2021

Codecov Report

Merging #223 (1e340f2) into main (1bdab9e) will increase coverage by 0.03%.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #223      +/-   ##
==========================================
+ Coverage   92.57%   92.60%   +0.03%     
==========================================
  Files          15       15              
  Lines        1212     1217       +5     
==========================================
+ Hits         1122     1127       +5     
  Misses         90       90
Impacted Files Coverage Δ
tests/test_click.py 98.36% <100.00%> (+0.01%) ⬆️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1bdab9e...1e340f2. Read the comment docs.

@bee-san bee-san merged commit 6162ace into bee-san:main Nov 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bee-san bee-san bee-san approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@spicyyboi @codecov-commenter @bee-san