商旅 abt · 明文凭据位置清单

> 值只显示前 3 位 + 长度，完整值不落文档。扫描了 7 个仓的配置类文件。

OSS CDN 鉴权密钥

仓库文件行字段值（掩码）
abt-server`abjt-admin/src/main/resources/application-dev.yml`172`cdn-secret-key`Li4***(64字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`98`cdn-secret-key`Li4***(64字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`114`cdn-secret-key`Li4***(64字符)

Webhook/事件总线 token

仓库文件行字段值（掩码）
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`162`token`bfc***(128字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`183`token`bfc***(128字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`184`scoreToken`da7***(128字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`185`historyToken`28b***(128字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`186`inviteToken`689***(128字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`190`token`989***(128字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`188`token`8e0***(128字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`189`scoreToken`1f2***(128字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`190`historyToken`28b***(128字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`191`inviteToken`689***(128字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`195`token`c17***(128字符)

数据库/服务口令

仓库文件行字段值（掩码）
abjt-identify-server`abjt-admin/src/main/resources/application-dev.yml`31`password`Kla***(16字符)
abjt-identify-server`abjt-admin/src/main/resources/application-dev.yml`67`login-password`123***(6字符)
abjt-identify-server`abjt-admin/src/main/resources/application-dev.yml`87`password`tY4***(20字符)
abjt-identify-server`abjt-admin/src/main/resources/application-prod.yml`32`password`Tyd***(23字符)
abjt-identify-server`abjt-admin/src/main/resources/application-prod.yml`68`login-password`123***(6字符)
abjt-identify-server`abjt-admin/src/main/resources/application-prod.yml`88`password`tY4***(20字符)
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`29`password`Kj_***(16字符)
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`66`login-password`123***(6字符)
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`116`password`tY4***(20字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`28`password`hM2***(30字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`42`password`g1i***(16字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`72`login-password`123***(6字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`122`password`tY4***(20字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`33`password`Tyd***(23字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`40`password`Hzs***(13字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`49`password`AQ3***(16字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`79`login-password`123***(6字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`130`password`tY4***(20字符)
abt-server`settings.xml`17`password`_vL***(12字符)
abt-server-user`abjt-admin/src/main/resources/application-dev.yml`30`password`Kla***(16字符)
abt-server-user`abjt-admin/src/main/resources/application-dev.yml`66`login-password`123***(6字符)
abt-server-user`abjt-admin/src/main/resources/application-dev.yml`86`password`tY4***(20字符)
abt-server-user`abjt-admin/src/main/resources/application-prod.yml`30`password`Tyd***(23字符)
abt-server-user`abjt-admin/src/main/resources/application-prod.yml`67`login-password`123***(6字符)
abt-server-user`abjt-admin/src/main/resources/application-prod.yml`88`password`tY4***(20字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`11`password`Kj_***(16字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`18`password`Kla***(16字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`24`password`DC@***(12字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`53`login-password`123***(6字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`11`password`Tyd***(23字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`19`password`Tyd***(23字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`26`password`Hzs***(13字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`55`login-password`123***(6字符)
abt-task-server`abjt-admin/src/main/resources/application.yml`65`password`tY4***(20字符)

短信/开放平台密钥

仓库文件行字段值（掩码）
abjt-identify-server`abjt-admin/src/main/resources/application-dev.yml`104`appKey`2b5***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application-prod.yml`106`appKey`41b***(24字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`174`appKey`204***(9字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`175`appSecret`eOe***(32字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`100`appKey`204***(9字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`101`appSecret`eOe***(32字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`117`appKey`204***(9字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`118`appSecret`eOe***(32字符)

第三方服务 secret

仓库文件行字段值（掩码）
abjt-identify-server`abjt-admin/src/main/resources/application-dev.yml`105`masterSecret`80f***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application-prod.yml`107`masterSecret`6a1***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`58`secret`abc***(26字符)
abt-server-user`abjt-admin/src/main/resources/application.yml`76`secret`abc***(26字符)

账号名

仓库文件行字段值（掩码）
abjt-identify-server`abjt-admin/src/main/resources/application-prod.yml`31`username`abj***(9字符)
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`28`username`abt***(20字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`27`username`hqi***(24字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`41`username`abt***(8字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`32`username`abj***(9字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`39`username`dat***(21字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`48`username`abt***(8字符)
abt-server`settings.xml`16`username`63f***(24字符)
abt-server-user`abjt-admin/src/main/resources/application-prod.yml`29`username`abj***(9字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`10`username`abt***(20字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`23`username`dat***(17字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`10`username`abj***(9字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`18`username`abj***(9字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`25`username`dat***(21字符)

阿里云 OSS AccessKey

仓库文件行字段值（掩码）
abjt-identify-server`abjt-admin/src/main/resources/application.yml`96`accessKeyID`LTA***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`97`accessKeySecret`haI***(30字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`105`accessKeyID`LTA***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`106`accessKeySecret`KAM***(30字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`111`accessKeyID`LTA***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`112`accessKeySecret`Gcd***(30字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`116`accessKeyID`LTA***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`117`accessKeySecret`haI***(30字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`121`accessKeyID`LTA***(24字符)
abjt-identify-server`abjt-admin/src/main/resources/application.yml`122`accessKeySecret`Gcd***(30字符)
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`149`accessKeyID`LTA***(24字符)
abt-mall-server`abjt-admin/src/main/resources/application-dev.yml`150`accessKeySecret`Gcd***(30字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`159`accessKeyID`LTA***(24字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`160`accessKeySecret`Gcd***(30字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`166`accessKeyID`LTA***(24字符)
abt-server`abjt-admin/src/main/resources/application-dev.yml`167`accessKeySecret`Gcd***(30字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`177`accessKeyID`LTA***(24字符)
abt-server`abjt-admin/src/main/resources/application-prod.yml`178`accessKeySecret`Gcd***(30字符)
abt-server-user`abjt-admin/src/main/resources/application.yml`117`accessKeyID`LTA***(24字符)
abt-server-user`abjt-admin/src/main/resources/application.yml`118`accessKeySecret`Gcd***(30字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`85`accessKeyID`LTA***(24字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`86`accessKeySecret`Gcd***(30字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`92`accessKeyID`LTA***(24字符)
abt-task-server`abjt-admin/src/main/resources/application-dev.yml`93`accessKeySecret`Gcd***(30字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`102`accessKeyID`LTA***(24字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`103`accessKeySecret`Gcd***(30字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`109`accessKeyID`LTA***(24字符)
abt-task-server`abjt-admin/src/main/resources/application-prod.yml`110`accessKeySecret`Gcd***(30字符)
abt-task-server`abjt-admin/src/main/resources/application.yml`122`accessKeyID`LTA***(24字符)
abt-task-server`abjt-admin/src/main/resources/application.yml`123`accessKeySecret`Gcd***(30字符)

仓库里直接提交的密钥文件（最严重）

仓库文件说明
abt-app`build-utils/Android/hzab_abt.jks`安卓签名证书
abt-app`build-utils/Android/hzab_abt_debug.jks`安卓签名证书
abt-app`build-utils/Android/ldkj_dbt.jks`安卓签名证书
abt-app`build-utils/Android/ldkj_dbt_test.jks`安卓签名证书
abt-app`build-utils/private/private.key`RSA 私钥
abt-app`build-utils/private/private.pem`RSA 私钥
abt-app`cordova/hzab_abt.jks`安卓签名证书
abt-app`cordova/hzab_abt_debug.jks`安卓签名证书
abt-app`cordova/ldkj_dbt.jks`安卓签名证书
abt-app`cordova/ldkj_dbt_test.jks`安卓签名证书

统计

由 generated/abt_secret_locations.py 扫 7 个仓的配置类文件生成（值只留前 3 位 + 长度）
hugo · 2026-10-29