TLDR InfoSec · MISCELLANEOUS

HOW I MADE $64K FROM DELETED FILES — A BUG BOUNTY STORY

medium.com13 min read

Summary from the TLDR InfoSec newsletter

The author found and reported leaked secrets by scanning thousands of public GitHub repos for deleted files containing sensitive information. Using automation, they restored deleted files, searched for exposed credentials, and analyzed the Git history to recover secrets. This approach uncovered common causes of secret leaks, such as a lack of Git knowledge and accidental commits of binary files containing sensitive data.