pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

ssh-audit

ssh-audit...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaks 功能已完整。我不会在 Gitleaks 中合并新功能。未来版本仅包含安全补丁。我的工作重点已转向 Betterleaks license: https://raw.githubusercontent.com/gitleaks/gitleaks/master/LICENSE badge-license: https://img.shields.io/github/license/gitleaks/gitleaks.svg...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

gitbleed_tools

GitBleed 工具 - 用于从镜像的 Git 仓库中提取数据 关于 此仓库包含可用于下载和分析克隆仓库与镜像 Git 仓库之间差异的 Shell 脚本。有关 Git 行为中底层特性的更多信息，请访问阅读我们的博文。 这些脚本的作用是什么？ 这些脚本将克隆给定的 Git 仓库，分别以常规克隆和镜像（"--mirror"）选项进行。然后，它会在两者之间创建差异，试图找出仅存在于镜像模式中的仓库部分。最后，将运行 gitleaks 检查差异部分是否存在任何秘密，并使用 "git log" 创建一个包含提交内容的单一文件，以便更轻松地进行分析。...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

GitLeaks

GitLeaks GitLab CI 组件 一个用于 Gitleaks 的 GitLab CI 组件 —— 一款用于检测和防止硬编码秘密（如密码、API 密钥和令牌）被提交到 git 仓库的 SAST 工具。 功能特性 秘密检测 ：扫描仓库中的硬编码秘密和敏感信息 全面规则集 ：包含大量内置规则，用于检测各类秘密 自定义配置 ：支持本地和远程配置文件 多种输出格式 ：支持 JSON、SARIF 及其他报告格式 灵活参数 ：可直接向 Gitleaks 传递附加标志 远程配置 ：从远程 URL 下载并使用配置文件 可配置作业设置 ：可自定义作业名称、阶段和容器镜像 使用方法 基本用法...

GitLeaks

GitLeaks 容器镜像 针对本地工作流和流水线中秘密扫描的定制化 gitleaks 构建。 特性 从标记的上游源码构建 gitleaks，并固定 Go 工具链以生成可复现的二进制文件。 GitLab CI 组件位于 niclas-zone/ci/gitleaks。 使用 拉取镜像 root@kitploit: podman pull registry.gitlab.com/niclas-zone/ctr/gitleaks:latest 运行扫描 root@kitploit: podman run --rm \ -v $pwd:/repo \ -w /repo ...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, vt-cli, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner, hey, gitleaks...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, k3d, vt-cli, grpcurl, dynamic-localpv-provisioner-fips, php-fpmexporter, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner, hey, kubeflow, kube-state-metrics, gitleaks, kubeflow-fips...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: undock, kots, mattermost-fips, grype-db, k9s-fips, chainctl, syft, nuclei, gitleaks, syft-fips, grype, chezmoi, trufflehog-fips, zarf, k9s, gotenberg, grype-fips, mattermost, trufflehog, filebrowser, cg, gptscript, kubescape, wolfictl...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: terragrunt, trufflehog, gptscript, k9s, kubescape-operator, zarf, grafana-alloy, trivy, xeol, filebrowser, guac, undock, zot, trivy-operator, rancher-fleet, gitleaks, steampipe, nuclei, opentofu, gitness, tflint, terraform, envoy-gateway, nsc, vcluster, podman...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: vt-cli, dynamic-localpv-provisioner, terraform-provider-sendgrid, hey, k3d, gitleaks...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: vt-cli, dynamic-localpv-provisioner, terraform-provider-sendgrid, hey, k3d, kubeflow, grpcurl, gitleaks, php-fpmexporter...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: filebrowser, chezmoi, undock, nuclei, grype, kots, syft, trufflehog, wolfictl, gptscript, k9s, zarf, gitleaks, kubescape...

CVE-2026-63728

A flaw was found in Gitleaks. This template injection vulnerability allows an attacker who can influence report templates to read arbitrary environment variables. By leveraging non-hermetic Sprig template functions, attackers can craft malicious report templates to extract sensitive data such as...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...