{"id":13842045,"url":"https://github.com/N0MoreSecr3ts/wraith","last_synced_at":"2025-07-11T13:33:39.615Z","repository":{"id":37671260,"uuid":"265881060","full_name":"N0MoreSecr3ts/wraith","owner":"N0MoreSecr3ts","description":"Uncover forgotten secrets and bring them back to life, haunting security and operations teams. ","archived":false,"fork":false,"pushed_at":"2023-05-05T02:41:03.000Z","size":2281,"stargazers_count":207,"open_issues_count":28,"forks_count":42,"subscribers_count":11,"default_branch":"develop","last_synced_at":"2024-08-05T17:30:19.436Z","etag":null,"topics":["gitrob","secrets-management","wraith"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/N0MoreSecr3ts.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"Contributing.md","funding":null,"license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"Security.txt","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-05-21T15:15:20.000Z","updated_at":"2024-08-01T03:40:10.000Z","dependencies_parsed_at":"2024-06-18T18:36:27.176Z","dependency_job_id":"05aff5bf-4d12-4a5b-a167-c3a222a427f4","html_url":"https://github.com/N0MoreSecr3ts/wraith","commit_stats":null,"previous_names":[],"tags_count":9,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/N0MoreSecr3ts%2Fwraith","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/N0MoreSecr3ts%2Fwraith/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/N0MoreSecr3ts%2Fwraith/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/N0MoreSecr3ts%2Fwraith/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/N0MoreSecr3ts","download_url":"https://codeload.github.com/N0MoreSecr3ts/wraith/tar.gz/refs/heads/develop","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225729819,"owners_count":17515171,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["gitrob","secrets-management","wraith"],"created_at":"2024-08-04T17:01:26.528Z","updated_at":"2024-11-21T12:30:48.779Z","avatar_url":"https://github.com/N0MoreSecr3ts.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"\u003ch1 align=\"center\"\u003e\n  \u003cbr\u003e\n    \u003cimg src=\"./static/images/gopher_full.png\" alt=\"wraith\" width=\"200\"/\u003e\n  \u003cbr\u003e\n  Wraith\n  \u003cbr\u003e\n\u003c/h1\u003e\n\n\u003ch4 align=\"center\"\u003eFinding digital secrets that were never meant to be found in all corners of the net.\u003c/h4\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"GitHub go.mod Go version (branch)\" src=\"https://img.shields.io/github/go-mod/go-version/n0moresecr3ts/wraith/master?style=for-the-badge\"\u003e\n  \u003cimg alt=\"GitHub go.mod Go version (branch)\" src=\"https://img.shields.io/github/go-mod/go-version/n0moresecr3ts/wraith/develop?style=for-the-badge\"\u003e\n  \u003cimg alt=\"GitHub release (latest SemVer)\" src=\"https://img.shields.io/github/v/release/n0moresecr3ts/wraith?style=for-the-badge\"\u003e\n  \u003cimg alt=\"GitHub commits since latest release (by SemVer)\" src=\"https://img.shields.io/github/commits-since/n0moresecr3ts/wraith/latest?style=for-the-badge\"\u003e\n\u003cbr\u003e\n  \u003cimg alt=\"GitHub issues by-label\" src=\"https://img.shields.io/github/issues-raw/n0moresecr3ts/wraith/Bug?color=RED\u0026label=BUGS\u0026style=for-the-badge\"\u003e\n  \u003cimg alt=\"GitHub issues by-label\" src=\"https://img.shields.io/github/issues-raw/n0moresecr3ts/wraith/Feature%20Request?color=38BED3\u0026label=FEATURE%20REQUESTS\u0026style=for-the-badge\"\u003e\n  \u003cimg alt=\"Travis (.org) branch\" src=\"https://img.shields.io/travis/n0moresecr3ts/wraith/master?label=BUILD%20MASTER\u0026style=for-the-badge\"\u003e\n  \u003cimg alt=\"Travis (.org) branch\" src=\"https://img.shields.io/travis/n0moresecr3ts/wraith/develop?label=BUILD%20DEVELOP\u0026style=for-the-badge\"\u003e\n\u003cbr\u003e\n  \u003cimg alt=\"Code Climate maintainability\" src=\"https://img.shields.io/codeclimate/maintainability/N0MoreSecr3ts/wraith?style=for-the-badge\"\u003e\n  \u003cimg alt=\"Code Climate technical debt\" src=\"https://img.shields.io/codeclimate/tech-debt/N0MoreSecr3ts/wraith?style=for-the-badge\"\u003e\n  \u003cimg alt=\"Code Climate issues\" src=\"https://img.shields.io/codeclimate/issues/N0MoreSecr3ts/wraith?style=for-the-badge\"\u003e\n\u003cbr\u003e\n  \u003cimg alt=\"GitHub\" src=\"https://img.shields.io/github/license/n0moresecr3ts/wraith?color=blue\u0026style=for-the-badge\"\u003e\n  \u003cimg alt=\"GitHub All Releases\" src=\"https://img.shields.io/github/downloads/n0moresecr3ts/wraith/total?style=for-the-badge\"\u003e\n\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"#capabilities\"\u003eCapabilities\u003c/a\u003e •\n  \u003ca href=\"#screenshots\"\u003eScreenshots\u003c/a\u003e •\n  \u003ca href=\"#quickstart\"\u003eQuickstart\u003c/a\u003e •\n  \u003ca href=\"#documentation\"\u003eDocumentation\u003c/a\u003e •\n  \u003ca href=\"#contributing\"\u003eContributing\u003c/a\u003e •\n  \u003ca href=\"#credits\"\u003eCredits\u003c/a\u003e •\n  \u003ca href=\"#faq\"\u003eFAQ\u003c/a\u003e •\n  \u003ca href=\"#related\"\u003eRelated\u003c/a\u003e\n\u003c/p\u003e\n\nWraith uncovers forgotten secrets and brings them back to life, haunting security and operations teams. It can be used to scan hosted and local git repos as well as local filesystems.\n\n## Capabilities\n\n### Targets\n- Gitlab.com repositories and projects\n- Github.com repositories and organizations\n- Local git repositories\n- Local filesystem\n\n### Major Features\n\n- Exclude files, paths, and extensions\n- Web and terminal interfaces for real-time results (very much alpha)\n- Configurable commit depth\n- Built with [Viper][1] to manage environment variables, config files, or flags\n- Uses [Cobra][2] sub-commands for easier, more modular, functionality\n\n## Screenshots\n\u003cp\u003e\n  \u003cimg width=\"537\" alt=\"Screen Shot 2020-08-16 at 11 23 25 PM\" src=\"https://user-images.githubusercontent.com/672940/90354541-9f515a80-e017-11ea-8669-97a2d7823cbb.png\"\u003e\n  \u003cimg width=\"365\" alt=\"Screen Shot 2020-08-16 at 11 23 43 PM\" src=\"https://user-images.githubusercontent.com/672940/90354550-a11b1e00-e017-11ea-9bb6-5f7c6209f7b0.png\"\u003e\n\u003c/p\u003e\n\u003cbr\u003e\n\n## Quickstart\n\n1. Download the latest [release][3] and either build it yourself with `make build` or you can use a prebuilt binary, currently they only exist for OSX. This project uses a branching git flow. Details can be found in the developer doc, suffice it to say **Master** is stable **develop** shoud be considered beta.\n2. Download or clone the latest set of [signatures][4] and either copy *signatures/default.yaml* to *~/.wraith/signatures/* or adjust the location in your configuration file. A sample is shown below\n3. Copy the below configuration to *~/.wraith/config.yaml*. This will allow you to get up and running for basic scans without having to figure out the flags. Any of these values can be overwritten on the commnd line as well. You will need to generate your own api tokens for github and gitlab if you are scanning against them.\n4. Once you have this done, just run a scan command.\n- `wraith scanGithub`\n- `wraith scanGitlab`\n- `wraith scanLocalGitRepo`\n- `wraith scanLocalPath`\n\n```yaml\n---\ncommit-depth: -1\ndebug: false\ngithub-api-token: \u003ctoken\u003e\ngithub-orgs:\n    - \u003corg 1\u003e\n    - \u003corg 2\u003e\ngithub-repos:\n    - \u003crepo 1\u003e\ngithub-users:\n    - \u003cuser 1\u003e\ngitlab-api-token: \u003ctoken\u003e\ngitlab-targets:\n    - \u003crepo 1\u003e\n    - \u003cproject 1\u003e\n    - \u003cuser 1\u003e\nscan-forks: false\nscan-tests: false\nignore-extension:\n    - .html\n    - .css\n    - .log\nignore-path:\n    - static/\n    - docs/\n    - .idea/\nin-mem-clone: false\nlocal-paths:\n    - ../relative/path/to/file.md\n    - $HOME/path/to/file.pl\n    - /absolute/path/to/file.rb\nconfidence-level: 3\nnum-threads: 1\nlocal-repos:\n    - ../wraith\n    - /home/bob/Go/src/foo\nsilent: false\nweb-server: false\njson: false\ncsv: false\ntest-signatures: false\nsignatures-path: \"~/.wraith/signatures\"\nsignature-file:\n    - ../wraith-signatures/signatures/default.yaml\nsignatures-url: \"https://github.com/N0MoreSecr3ts/wraith-signatures\"\nsignatures-version: \"0.2.0\"\n```\n\n## Documentation\n\n### Build from source\nAt this stage the best option is to build from source from this repository.\n\nTo install from source, make sure you have a correctly configured **Go \u003e= 1.14** environment and that `$GOPATH/bin` is in your `$PATH`.\n```shell\n    $ cd $GOPATH/src\n    $ git clone git@github.com:N0MoreSecr3ts/wraith.git\n    $ cd wraith\n    $ make build\n    $ ./bin/wraith-\u003cARCH\u003e \u003csub-command\u003e\n```\n\n### Signatures\nSignatures are the current method used to detect secrets within the a target source. They are broken out into the [wraith-signatures][4] repo for extensability purposes. This allows them to be independently versioned and developed without having to recompile the code. To makes changes just edit an existing signature or create a new one. Check the [README][5] in that repo for additional details.\n\n### Authencation\nWraith will need either a GitLab or Github access token in order to interact with their appropriate API's.  You can create a [GitLab personal access token][6], or [a Github personal access token][7] and save it in an environment variable in your **bashrc**, add it to a wraith config file, or pass it in on the command line. Passing it in on the commandline should be avoided if possible for security reasons. Of course if you want to eat your own dog food, go ahead and do it that way, then point wraith at your command history file. :smiling_imp:\n\n### Additional Documentation\nAdditional documentation is forthcoming\n\n## Contributing\n\n[Contributing.md][14]\n\nThere is a [roadmap][13] as well, but at this point it's little more than a glorified TODO list and personal braindump. I am using that instead of issues, due to my velocity and general laziness towards process at this point. When the project becomes stable, most likely after Milestone 1, the roadmap will probably fall away and be captured in [Issues][15].\n\n## Credits\n- [@michenriksen][8] for writing [gitrob][9] which serves as the foundation for wraith\n- [@codeemitter][11] for contributing several major features including in memory clones and gitlab support. His version is the immediate parent to wraith.\n- [@mattyjones][10] (Maintainer)\n\n## Related\nThere are several other projects that wraith owes some lineage to including:\n- [Trufflehog][12]\n- all the many recon and OSINT tools already existing\n\n\n[1]: https://github.com/spf13/viper\n[2]: https://github.com/spf13/cobra\n[3]: https://github.com/N0MoreSecr3ts/wraith/releases\n[4]: https://github.com/N0MoreSecr3ts/wraith-signatures\n[5]: https://github.com/N0MoreSecr3ts/wraith-signatures/blob/master/README.md\n[6]: https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html\n[7]: https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/\n[8]: https://github.com/michenriksen\n[9]: https://github.com/michenriksen/gitrob\n[10]: https://github.com/mattyjones\n[11]: https://github.com/codeEmitter/\n[12]: https://github.com/dxa4481/truffleHog\n[13]: https://github.com/N0MoreSecr3ts/wraith/blob/develop/docs/development/roadmap.md\n[14]: https://github.com/N0MoreSecr3ts/wraith/blob/master/Contributing.md\n[15]: https://github.com/N0MoreSecr3ts/wraith/issues\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FN0MoreSecr3ts%2Fwraith","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FN0MoreSecr3ts%2Fwraith","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FN0MoreSecr3ts%2Fwraith/lists"}