new github tokens format

Gwen · Gwen · commit 72a7c41ba6cb · 2023-02-09T15:16:44.000+01:00
diff --git a/class.GitHubSearch.php b/class.GitHubSearch.php
@@ -49,7 +49,7 @@ public function __construct()
 		$f_tokens = dirname(__FILE__).'/.tokens';
 		if( file_exists($f_tokens) ) {
 			$content = file_get_contents( $f_tokens );
-			$m = preg_match_all( '([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})', $content, $matches );
+			$m = preg_match_all( '([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})', $content, $matches );
             // var_dump($m);
 			if( $m ) {
 				$this->auth_token = $matches[0];
diff --git a/github-contributors.py b/github-contributors.py
@@ -35,7 +35,7 @@
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-dorks.php b/github-dorks.php
@@ -213,7 +213,7 @@ function usage( $err=null ) {
     $f_tokens = dirname(__FILE__).'/.tokens';
     if( file_exists($f_tokens) ) {
         $content = file_get_contents( $f_tokens );
-        $m = preg_match_all( '([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})', $content, $matches );
+        $m = preg_match_all( '([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})', $content, $matches );
         if( $m ) {
             $t_tokens = $matches[0];
         }
diff --git a/github-dorks.py b/github-dorks.py
@@ -38,7 +38,7 @@
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-employees.py b/github-employees.py
@@ -80,7 +80,7 @@
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-endpoints.py b/github-endpoints.py
@@ -212,7 +212,7 @@ def doGetCode( url ):
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-secrets.py b/github-secrets.py
@@ -116,7 +116,7 @@ def doGetCode( url ):
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-subdomains.py b/github-subdomains.py
@@ -104,7 +104,7 @@ def doGetCode( url ):
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-survey/index.php b/github-survey/index.php
@@ -14,7 +14,7 @@
     exit( 'Tokens file not found!' );
 }
 $content = file_get_contents( $f_tokens );
-$m = preg_match_all( '([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})', $content, $matches );
+$m = preg_match_all( '([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})', $content, $matches );
 if( $m ) {
         $t_tokens = $matches[0];
 }
diff --git a/github-survey2.py b/github-survey2.py
@@ -51,7 +51,7 @@
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/github-users.py b/github-users.py
@@ -33,7 +33,7 @@
         if os.path.isfile(TOKENS_FILE):
             fp = open(TOKENS_FILE,'r')
             for line in fp:
-                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36})$', line )
+                r = re.search( '^([a-f0-9]{40}|ghp_[a-zA-Z0-9]{36}|github_pat_[_a-zA-Z0-9]{82})$', line )
                 if r:
                     t_tokens.append( r.group(1) )
 
diff --git a/gsearch-reflog.sh b/gsearch-reflog.sh
@@ -23,6 +23,7 @@ t_keywords=(
 	"cloudfront.net"
 	"blob.core.windows.net"
     'ghp_'
+    'github_pat_'
     'AKIA[A-Z0-9]{16}'
 )
 

Original file line number	Diff line number	Diff line change
`@@ -213,7 +213,7 @@ function usage( $err=null ) {`
`213`	`213`	`$f_tokens = dirname(__FILE__).'/.tokens';`
`214`	`214`	`if( file_exists($f_tokens) ) {`
`215`	`215`	`$content = file_get_contents( $f_tokens );`
`216`		`- $m = preg_match_all( '([a-f0-9]{40}\|ghp_[a-zA-Z0-9]{36})', $content, $matches );`
	`216`	`+ $m = preg_match_all( '([a-f0-9]{40}\|ghp_[a-zA-Z0-9]{36}\|github_pat_[_a-zA-Z0-9]{82})', $content, $matches );`
`217`	`217`	`if( $m ) {`
`218`	`218`	`$t_tokens = $matches[0];`
`219`	`219`	`}`
Original file line number	Diff line number	Diff line change
`@@ -14,7 +14,7 @@`
`14`	`14`	`exit( 'Tokens file not found!' );`
`15`	`15`	`}`
`16`	`16`	`$content = file_get_contents( $f_tokens );`
`17`		`-$m = preg_match_all( '([a-f0-9]{40}\|ghp_[a-zA-Z0-9]{36})', $content, $matches );`
	`17`	`+$m = preg_match_all( '([a-f0-9]{40}\|ghp_[a-zA-Z0-9]{36}\|github_pat_[_a-zA-Z0-9]{82})', $content, $matches );`
`18`	`18`	`if( $m ) {`
`19`	`19`	`$t_tokens = $matches[0];`
`20`	`20`	`}`