gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

GitMiner

⚠️ Repository Deprecated — Project Replaced This repository is no longer maintained and has been officially deprecated. The project continues under active development at: https://github.com/unkl4b/Gitminer3 Please migrate to GitMiner3 to access the latest updates, improvements, and active support...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

confused

Confused A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python pypi requirements.txt, JavaScript npm package.json, PHP composer composer.json or MVN maven pom.xml. What is this all about? On 9th of February 2021, a security...

TheCl0n3r

TheCl0n3r TheCl0n3r will allow you to download and manage your git repositories. Preface About 90% of the penetration testing tools used in my experience can be found primarily on github. The aim of this was to make it easier to download, update and delete these git repositories. If moving to a n...

gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

AtomShields

AtomShields |Build| |Codacy| |Docs| |Version| .. |Docs| image:: https://readthedocs.org/projects/atomshields/badge/?version=latest :target: http://atomshields.readthedocs.io/en/latest/?badge=latest :alt: Read the Docs .. |Version| image:: http://img.shields.io/pypi/v/atomshields.svg?style=flat...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

cicd-goat

Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. 🚩 Created by Cider Security Acquired by Palo Alto Networks. Table of Contents...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

octosuite

Terminal-based toolkit for GitHub data analysis. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite Usage T...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaks는 기능이 완료된 상태입니다. 더 이상 새로운 기능을 Gitleaks에 병합하지 않습니다. 향후 릴리즈는 보안 패치만 제공됩니다. 저는 Betterleaks에 집중할 예정입니다. license: https://raw.githubusercontent.com/gitleaks/gitleaks/master/LICENSE badge-license:...

git-all-secrets

git-all-secrets 소개 git-all-secrets는 다음과 같은 작업을 수행할 수 있는 도구입니다: 조직의 여러 공개/비공개 GitHub 저장소를 복제하고 스캔합니다. 조직에 속한 사용자의 여러 공개/비공개 GitHub 저장소를 복제하고 스캔합니다. 조직의 단일 공개/비공개 저장소를 복제하고 스캔합니다. 사용자의 단일 공개/비공개 저장소를 복제하고 스캔합니다. 사용자의 단일 공개/비밀 Gist를 복제하고 스캔합니다. 조직 내 팀의 저장소를 복제하고 스캔합니다. 위의 모든 작업을 한 번에 수행합니다!! 오 예! 조직...

Vulnhalla

Vulnhalla LLM分類による自動CodeQL分析 詳細な研究背景やVulnhallaの動機については、公式CyberArk脅威研究ブログ記事をご覧ください： Vulnhalla: Picking the True Vulnerabilities from the CodeQL Haystack Vulnhallaはセキュリティ分析パイプライン全体を自動化します： 1. リポジトリの取得 ：特定のプログラミング言語のGitHubリポジトリを取得 2. CodeQLデータベースのダウンロード ：利用可能な場合、対応するCodeQLデータベースをダウンロード 3. CodeQLクエリの...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...