TLDR InfoSec · MISCELLANEOUS
HOW I MADE $64K FROM DELETED FILES — A BUG BOUNTY STORY
Summary from the TLDR InfoSec newsletter
The author found and reported leaked secrets by scanning thousands of public GitHub repos for deleted files containing sensitive information. Using automation, they restored deleted files, searched for exposed credentials, and analyzed the Git history to recover secrets. This approach uncovered common causes of secret leaks, such as a lack of Git knowledge and accidental commits of binary files containing sensitive data.