pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

ssh-audit

ssh-audit...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaksは機能完成しています。新機能のマージは行いません。今後のリリースはセキュリティパッチのみとなります。私はBetterleaksに注力しています。 license: https://raw.githubusercontent.com/gitleaks/gitleaks/master/LICENSE badge-license:...

gitbleed_tools

GitBleed Tools - ミラーリングされたGitリポジトリからデータを抽出するためのツール 概要 このリポジトリには、クローンとミラーリングされたGitリポジトリ間の差分をダウンロードして分析するためのシェルスクリプトが含まれています。Gitの動作に関する根本的な癖の詳細については、ブログ記事をご覧ください。 これらのスクリプトの機能...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

GitLeaks

GitLeaks GitLab CI Component A GitLab CI component for Gitleaks - a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Features Secret Detection : Scans repositories for hardcoded secrets and sensitive information Comprehensive Rules :...

GitLeaks

GitLeaks Container Image Opinionated gitleaks build for secret scanning in local workflows and pipelines. Features Builds gitleaks from the tagged upstream source with pinned Go toolchains for reproducible binaries. GitLab CI Component at niclas-zone/ci/gitleaks. Usage Pull the image root@kitploi...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, k3d, vt-cli, hey, terraform-provider-sendgrid, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, gitleaks...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, k3d, grpcurl, hey, vt-cli, php-fpmexporter, terraform-provider-sendgrid, dynamic-localpv-provisioner, kubeflow, kube-state-metrics, terraform-provider-sendgrid-fips, kubeflow-fips, gitleaks...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: trufflehog, gotenberg, kubescape, syft-fips, grype-db, grype, k9s-fips, undock, chainctl, mattermost, cg, zarf, mattermost-fips, wolfictl, kots, k9s, gptscript, nuclei, chezmoi, grype-fips, trufflehog-fips, syft, filebrowser, gitleaks...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: opentofu, zot, trivy-operator, gitness, tflint, k9s, guac, rancher-fleet, zarf, steampipe, terraform, xeol, podman, undock, nsc, gitleaks, gptscript, trivy, terragrunt, envoy-gateway, trufflehog, filebrowser, nuclei, vcluster, kubescape-operator, grafana-alloy...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: vt-cli, terraform-provider-sendgrid, gitleaks, hey, dynamic-localpv-provisioner, k3d...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: grpcurl, vt-cli, terraform-provider-sendgrid, gitleaks, hey, dynamic-localpv-provisioner, php-fpmexporter, k3d, kubeflow...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: undock, wolfictl, gitleaks, grype, gptscript, k9s, chezmoi, trufflehog, zarf, filebrowser, nuclei, syft, kubescape, kots...

CVE-2026-63728

A flaw was found in Gitleaks. This template injection vulnerability allows an attacker who can influence report templates to read arbitrary environment variables. By leveraging non-hermetic Sprig template functions, attackers can craft malicious report templates to extract sensitive data such as...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...