# postleaksNg
## Description
[Postman](https://www.postman.com/home) is an awesome platform to build and use APIs, used by millions developers.
It proposes also public API assets built by them which can contains custom endpoints and data. Unfortunately, these items can leak sensitive data about private websites and companies.
This script is aimed to search for these pieces of information in Postman public library.
## Installation
```bash
pip3 install postleaksNg
```
or
```bash
pip3 install .
```
## Usage
```bash
❯ postleaksNg -h
usage: postleaksNg [-h] -k KEYWORD [--include INCLUDE] [--exclude EXCLUDE] [--raw] [--output OUTPUT]
postleaksNg 🚀💧 Search for sensitive data in Postman public library.
options:
-h, --help show this help message and exit
-k KEYWORD Keyword (Domain, company, etc.)
--include INCLUDE URL should match this string
--exclude EXCLUDE URL should not match this string
--raw Display raw filtered results as JSON
--output OUTPUT Store JSON in specific output folder (Default: results_<TIMESTAMP>)
```
*The results are available in `results_<TIMESTAMP>` subfolder. The filename is the request identifier in Postman.com*
## Example
![](assets/example.png)
## Notes
Secret detection is done with [whispers](https://github.com/adeptex/whispers). Rules are stored in `config.yml` file.
Raw data
{
"_id": null,
"home_page": "https://github.com/six2dez/postleaksNg",
"name": "postleaksNg",
"maintainer": "",
"docs_url": null,
"requires_python": "",
"maintainer_email": "",
"keywords": "leaks,postman,osint,bugbounty",
"author": "S\u00e9bastien Copin",
"author_email": "cosad3s@outlook.com",
"download_url": "https://files.pythonhosted.org/packages/ab/77/01381e21c07755a833acec534291ed502075d19b48b44f0a0d5060a25298/postleaksNg-1.0.1.tar.gz",
"platform": null,
"description": "# postleaksNg\n\n## Description\n\n[Postman](https://www.postman.com/home) is an awesome platform to build and use APIs, used by millions developers. \nIt proposes also public API assets built by them which can contains custom endpoints and data. Unfortunately, these items can leak sensitive data about private websites and companies. \nThis script is aimed to search for these pieces of information in Postman public library.\n\n## Installation\n\n```bash\npip3 install postleaksNg\n```\n\nor \n\n```bash\npip3 install .\n```\n\n## Usage\n\n```bash\n\u276f postleaksNg -h\nusage: postleaksNg [-h] -k KEYWORD [--include INCLUDE] [--exclude EXCLUDE] [--raw] [--output OUTPUT]\n\npostleaksNg \ud83d\ude80\ud83d\udca7 Search for sensitive data in Postman public library.\n\noptions:\n -h, --help show this help message and exit\n -k KEYWORD Keyword (Domain, company, etc.)\n --include INCLUDE URL should match this string\n --exclude EXCLUDE URL should not match this string\n --raw Display raw filtered results as JSON\n --output OUTPUT Store JSON in specific output folder (Default: results_<TIMESTAMP>)\n```\n\n*The results are available in `results_<TIMESTAMP>` subfolder. The filename is the request identifier in Postman.com*\n\n## Example\n\n![](assets/example.png)\n\n## Notes\n\nSecret detection is done with [whispers](https://github.com/adeptex/whispers). Rules are stored in `config.yml` file.\n",
"bugtrack_url": null,
"license": "GPL-3.0 License",
"summary": "postleaksNg",
"version": "1.0.1",
"project_urls": {
"Homepage": "https://github.com/six2dez/postleaksNg"
},
"split_keywords": [
"leaks",
"postman",
"osint",
"bugbounty"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "1243686ce0a769cfd3804b1c57f40fd6eb13fee7f2fb7074ade31b4c8cd3e1e0",
"md5": "76b5552ad4f9bd4e8525a7a3f90dcb6e",
"sha256": "8fae2fda22306a35d99ee61a03428a2874047e88618c22f6f32efe2568b4ab0a"
},
"downloads": -1,
"filename": "postleaksNg-1.0.1-py3-none-any.whl",
"has_sig": false,
"md5_digest": "76b5552ad4f9bd4e8525a7a3f90dcb6e",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": null,
"size": 18160,
"upload_time": "2023-10-11T22:16:34",
"upload_time_iso_8601": "2023-10-11T22:16:34.169715Z",
"url": "https://files.pythonhosted.org/packages/12/43/686ce0a769cfd3804b1c57f40fd6eb13fee7f2fb7074ade31b4c8cd3e1e0/postleaksNg-1.0.1-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "ab7701381e21c07755a833acec534291ed502075d19b48b44f0a0d5060a25298",
"md5": "47c043d438c8abddb4717336efd3f70e",
"sha256": "499e518bb5726edcf5db629fc26e569031b47ccf7ca6c539973cd43ee0c2a3b6"
},
"downloads": -1,
"filename": "postleaksNg-1.0.1.tar.gz",
"has_sig": false,
"md5_digest": "47c043d438c8abddb4717336efd3f70e",
"packagetype": "sdist",
"python_version": "source",
"requires_python": null,
"size": 17587,
"upload_time": "2023-10-11T22:16:36",
"upload_time_iso_8601": "2023-10-11T22:16:36.361371Z",
"url": "https://files.pythonhosted.org/packages/ab/77/01381e21c07755a833acec534291ed502075d19b48b44f0a0d5060a25298/postleaksNg-1.0.1.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2023-10-11 22:16:36",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "six2dez",
"github_project": "postleaksNg",
"travis_ci": false,
"coveralls": false,
"github_actions": false,
"lcname": "postleaksng"
}