postleaksNg
Project description
postleaksNg
Description
Postman is an awesome platform to build and use APIs, used by millions developers.
It proposes also public API assets built by them which can contains custom endpoints and data. Unfortunately, these items can leak sensitive data about private websites and companies.
This script is aimed to search for these pieces of information in Postman public library.
Installation
pip3 install postleaksNg
or
pip3 install .
Usage
❯ postleaksNg -h
usage: postleaksNg [-h] -k KEYWORD [--include INCLUDE] [--exclude EXCLUDE] [--raw] [--output OUTPUT]
postleaksNg 🚀💧 Search for sensitive data in Postman public library.
options:
-h, --help show this help message and exit
-k KEYWORD Keyword (Domain, company, etc.)
--include INCLUDE URL should match this string
--exclude EXCLUDE URL should not match this string
--raw Display raw filtered results as JSON
--output OUTPUT Store JSON in specific output folder (Default: results_<TIMESTAMP>)
The results are available in results_<TIMESTAMP>
subfolder. The filename is the request identifier in Postman.com
Example
Notes
Secret detection is done with whispers. Rules are stored in config.yml
file.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
postleaksNg-1.0.1.tar.gz
(17.6 kB
view hashes)
Built Distribution
Close
Hashes for postleaksNg-1.0.1-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 8fae2fda22306a35d99ee61a03428a2874047e88618c22f6f32efe2568b4ab0a |
|
MD5 | 76b5552ad4f9bd4e8525a7a3f90dcb6e |
|
BLAKE2b-256 | 1243686ce0a769cfd3804b1c57f40fd6eb13fee7f2fb7074ade31b4c8cd3e1e0 |