InfectLogs - Sensitive Data Warning

General Information

During analysis, various databases in .db format will be found, containing sensitive and important data. These databases typically store credentials, access tokens, session cookies, API keys, and other authentication data.

Common Database Credentials

• URLs and Access: url:user:pass, username, email, password, phone
• Authentication Tokens: token=, auth_token, access_token, refresh_token, id_token, user_token
• Authorization: Bearer, Authorization, bearer_token, jwt, sessionid=, sid=

Session and Authentication Cookies

• Cookie, Set-Cookie
• PHPSESSID, sessionid, csrftoken, sid
• remember_token, auth_cookie, secure_cookie
• tracking_id, ga=, gid=, fbp=

API Keys and Identifiers

• key=, X-API-Key, X-CSRF-Token
• secret_key, client_id, client_secret
• app_key, private_key, public_key, encryption_key

Relevant HTTP Headers

• Authorization, Content-Type, Accept, Accept-Encoding
• Referer, Host, Origin, X-Requested-With
• Cache-Control, Connection, Pragma
• Upgrade-Insecure-Requests, X-Forwarded-For, X-Real-IP
• Accept-Language, Content-Length

User Data and Metadata

• id, uuid
• created_at, updated_at, deleted_at
• email, username, password_hash
• auth_token, role, is_admin
• last_login, login_attempts
• profile_picture_url, recovery_token

Deep Links and Authentication URIs

• deep_link_uri, login_payload_uri, app_connection_string
• intent_uri, custom_scheme://auth, myapp://login
• callback_uri

Channels and Resources