0x90 / dvcs-arsenal

DVCS ripping arsenal (.git/.hg/.csv/...)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

dvcs-arsenal

DVCS ripping arsenal (.git/.hg/.csv/...)

Tools

jcesarstef/ghhdb-Github-Hacking-Database: Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks) https://github.com/jcesarstef/ghhdb-Github-Hacking-Database

GitHub - AlexAkulov/hungryfox: Monitoring for leaks of sensitive information in git repositories https://github.com/AlexAkulov/hungryfox

GitHub - khast3x/h8mail: Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email https://github.com/khast3x/h8mail

GitGuardian/ggshield: Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations. https://github.com/GitGuardian/ggshield?tab=readme-ov-file

GitHub - ail-project/ail-framework: AIL framework - Analysis Information Leak framework https://github.com/ail-project/ail-framework

GitHub - GONZOsint/gitrecon: OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits. https://github.com/GONZOsint/gitrecon

GitHub - JoelGMSec/LeakSearch: Search & Parse Password Leaks https://github.com/JoelGMSec/LeakSearch

nsonaniya2010/SubDomainizer: A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github. https://github.com/nsonaniya2010/SubDomainizer

praetorian-inc/noseyparker: Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history. https://github.com/praetorian-inc/noseyparker

gwen001/github-search: A collection of tools to perform searches on GitHub. https://github.com/gwen001/github-search

tillson/git-hound: Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs. https://github.com/tillson/git-hound

GitHub - deepfence/SecretScanner: πŸ”“ Find secrets and passwords in container images and file systems πŸ”“ https://github.com/deepfence/SecretScanner

GitHub - trufflesecurity/trufflehog: Find and verify credentials https://github.com/trufflesecurity/trufflehog

GitHub - eth0izzle/shhgit: Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories. https://github.com/eth0izzle/shhgit

GitHub - deepfence/SecretScanner: πŸ”“ Find secrets and passwords in container images and file systems πŸ”“ https://github.com/deepfence/SecretScanner

boringtools/git-alerts: Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files https://github.com/boringtools/git-alerts

GitHub - gitleaks/gitleaks: Protect and discover secrets using Gitleaks πŸ”‘ https://github.com/gitleaks/gitleaks

GitHub - trufflesecurity/trufflehog: Find and verify credentials https://github.com/trufflesecurity/trufflehog

hisxo/gitGraber: gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe... https://github.com/hisxo/gitGraber

praetorian-inc/noseyparker: Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history. https://github.com/praetorian-inc/noseyparker

Links

https://en.internetwache.org/dont-publicly-expose-git-or-how-we-downloaded-your-websites-sourcecode-an-analysis-of-alexas-1m-28-07-2015/

https://www.hazzel.cn/2019/04/20/a-new-githack-script/

About

DVCS ripping arsenal (.git/.hg/.csv/...)