Update Github Dorks file to include the jupyter_notebook_config.json … #44

davidmckennirey · Jan 10, 2021

Please include all of the following fields when adding dorks/patterns

Search URL: https://github.com/search?q=filename:jupyter_notebook_config.json
Number of search results at time of PR: 422
Impact of data disclosed (see table below): High
Description of data disclosed: This file includes the hashed password to access the jupyter notebook server that it is a config file for, see the documentation here (https://jupyter-notebook.readthedocs.io/en/stable/public_server.html\#automatic-password-setup). Some of these files don't include the hashed password, but that means that they are still using the default password for jupyter notebook server, which is publicly available (foobarbaz).

Icon/Name	Description	Examples
❓ Unknown	The impact of this data is highly variable or unknown)	N/A
➖ Low	This data will provide minimal access or mostly public information)	Non-stored XSS, Limited scope + read-only API access
➕ Moderate	This data will provide some access or information	Stored XSS in some cases, read-only or limited write API access
⚠️ High	This data will provide single-user access or secret information)	Usernames/passwords, OAuth tokens
❗️ Critical	This data will provide complete control, access to several users, or confidential/personal information	Credential database dumps, AWS keys

…file, which saves the hashed password of a jupyter notebook server. (https://jupyter-notebook.readthedocs.io/en/stable/public_server.html\#automatic-password-setup)

techgaun

thanks so much
👌 💜 🔥 💯 🚀 LGTM 🚀 💯 🔥 💜 👌

Update Github Dorks file to include the jupyter_notebook_config.json …

1a37c43

…file, which saves the hashed password of a jupyter notebook server. (https://jupyter-notebook.readthedocs.io/en/stable/public_server.html\#automatic-password-setup)

techgaun approved these changes Jan 18, 2021

View reviewed changes

techgaun merged commit e40ad3b into techgaun:master Jan 18, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Update Github Dorks file to include the jupyter_notebook_config.json … #44

Update Github Dorks file to include the jupyter_notebook_config.json … #44

Uh oh!

davidmckennirey commented Jan 10, 2021

Uh oh!

techgaun left a comment

Uh oh!

Uh oh!

Search code, repositories, users, issues, pull requests...

Uh oh!

Update Github Dorks file to include the jupyter_notebook_config.json … #44

Update Github Dorks file to include the jupyter_notebook_config.json … #44

Uh oh!

Conversation

davidmckennirey commented Jan 10, 2021

Please include all of the following fields when adding dorks/patterns

Uh oh!

techgaun left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!