gitrob

Gitrob: OSINT에 오픈소스를 담다 Gitrob은 GitLab 또는 Github의 리포지토리에 푸시된 잠재적으로 민감한 정보를 찾는 데 도움이 되는 도구입니다. Gitrob은 사용자 또는 그룹/조직의 리포지토리를 지정된 깊이까지 클론하고, 커밋 히스토리를 순회하며 잠재적으로 민감한 정보의 시그니처와 일치하는 파일 및/또는 커밋 내용을 플래그합니다. 발견된 결과는 웹 인터페이스를 통해 쉽게 탐색하고 분석할 수 있습니다. 사용법 root@kitploit: gitrob options target target2...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

gitrob

Gitrob: Использование открытого исходного кода в OSINT Gitrob — это инструмент для поиска потенциально конфиденциальных файлов, отправленных в публичные репозитории на Github. Gitrob клонирует репозитории, принадлежащие пользователю или организации, на заданную глубину, проходит по истории коммит...

GitDorker - A Tool To Scrape Secrets From GitHub Through Usage Of A Large Repository Of Dorks

GitDorker is a tool that utilizes the GitHub Search API and an extensive list of GitHub dorks that I've compiled from various sources to provide an overview of sensitive information stored on github given a search query. The Primary purpose of GitDorker is to provide the user with a clean and...

HOWTO: Prevent your AWS credentials and other secrets from being exposed in code repositories

Uber had AWS credentials exposed on GitHub. As thousands of other companies do. It has been known for a while that nuggets such as private keys and credentials can be found with the GitHub search functionality or with Google dorks so looking for sensitive information in GitHub repositories is not...

Algolia: RCE on facebooksearch.algolia.com

While doing recon on Algolia, I found that the session secret for facebooksearch.algolia.com has been committed to a public GitHub repository. Since the Rails app running at facebooksearch.algolia.com is using CookieStore as the session storage, this means an attacker knowing the session secret c...

Gitrob Combs Github Repositories for Secret Company Data

Free online code repositories such as GitHub provide a valuable collaboration service for enterprise developers. But it’s also a trove of potentially sensitive company and project information that’s likely to warrant attention from hackers. An application security specialist from Berlin has...