Vexaloom Labs

Use Paste Site Keyword Leak Finder (Pastebin, Gist & More) with Python

Search Pastebin, GitHub Gist, Ideone, Paste.org, and Textbin for keywords such as leaked credentials, API keys, or company names, and get back the matching paste's URL, title, and text snippet.

1. Choose the data you need

Review the published README for supported collection modes, examples, and limits. The recipe below uses the current published input definition.

2. Prepare a source-based input

This JSON contains published prefills and required-field defaults. Review every value for your task before running it; it is not a promise of successful collection.

{
  "extractPatterns": [],
  "includeContent": false,
  "maxContentChars": 1000,
  "maxItems": 3,
  "maxItemsPerSource": 3,
  "maxPastesToScan": 10,
  "mode": "searchKeywords",
  "searchKeywords": [
    "test"
  ],
  "sources": [
    "gist"
  ],
  "startUrls": [],
  "syntaxes": []
}

Download input.example.json and save your reviewed copy as input.json.

FieldTypeRequiredDescription
modestringrequiredChoose how to find public pastes.
searchKeywordsarrayoptionalWords or phrases to look for in public paste content (mode=searchKeywords). Each keyword is searched independently.
startUrlsarrayoptionalDirect links to public Pastebin, Gist, Ideone, Paste.org, or paste.gg pastes (mode=byUrls).
sourcesarrayoptionalWhich public paste sites to include: pastebin, gist, ideone, paste_org, paste_gg. The default is all five.
maxItemsintegeroptionalHard limit on the total number of paste records returned.
maxItemsPerSourceintegeroptionalLimit on how many matching pastes or recent pastes are returned from each site.
maxPastesToScanintegeroptionalHow many recent public pastes to inspect per site. Pastebin archive scans are capped at 250 keys per run.
syntaxesarrayoptionalOptional Pastebin syntax archives to scan in addition to the main archive. Leave empty for the main archive only.
includeContentbooleanoptionalReturn the paste text (up to the character limit) in addition to the metadata. Leave off for a smaller dataset.
maxContentCharsintegeroptionalCharacter limit for the returned paste text when full text is enabled.
extractPatternsarrayoptionalOptional regular expressions to run over paste text. Matches are returned in `regexMatches`; this does not filter results.

3. Start an Actor run

Set APIFY_TOKEN in your environment. Python 3.10 or newer is sufficient; this recipe uses no third-party packages.

Execution may incur charges. Review current pricing on Apify. The request asks for a 120-second timeout and a charge limit; these settings are subject to Apify’s pricing and do not guarantee an all-inclusive spending cap.

import json
import os
import urllib.request

# Save the schema-derived example as input.json; review and edit it first.
with open("input.json", encoding="utf-8") as stream:
    actor_input = json.load(stream)

token = os.environ["APIFY_TOKEN"]
request = urllib.request.Request(
    "https://api.apify.com/v2/acts/0OfQa0Uu4ZA0rhzyL/runs?timeout=120&maxTotalChargeUsd=0.50",
    data=json.dumps(actor_input).encode("utf-8"),
    headers={"Authorization": "Bearer " + token, "Content-Type": "application/json"},
    method="POST",
)
# This starts a potentially billable run. Do not automatically retry this POST.
with urllib.request.urlopen(request, timeout=40) as response:
    run = json.load(response)["data"]
print("Run ID:", run["id"])
print("Status:", run["status"])
# Inspect and download results in Apify Console once the run succeeds.

4. Inspect the actual results

Open the run in Apify Console and wait for a successful completion. Use the published output schema to locate results and the dataset schema to understand declared views. Missing or optional record fields must not be treated as guaranteed values.

Public paste records from Pastebin, GitHub Gist, Ideone, Paste.org and paste.gg, including URLs, authors, dates, syntax, views, raw links and optional paste text.

Questions before you run

Which inputs are required?

The published required fields are mode

What does this guide verify?

The fields, prefills, and schema links are rendered from the published build. This is a usage recipe, not a paid live extraction test. Source availability and collection results can vary.

What if the run request times out?

Check Apify Console before retrying. The first request may already have created a run. Do not automatically repeat a run-creation POST.

Generated from source build hHsrORXkditdhC9p6 and its README and schemas. Source changes regenerate this guide; no third-party editorial claims are inferred.