{"id":13292268,"url":"https://github.com/bassammaged/lazyGitleaks","last_synced_at":"2025-03-10T07:32:54.192Z","repository":{"id":50376180,"uuid":"518908087","full_name":"bassammaged/lazyGitleaks","owner":"bassammaged","description":"Do you interested in finding secrets? Are you depending on gitleaks tool? Do you usually perform large scan scales against different repositories? No worries. lazyGitleaks comes to automate the scan and use a custom .toml template to find the juicy secrets living in repositories","archived":false,"fork":false,"pushed_at":"2022-07-30T22:34:50.000Z","size":234,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"master","last_synced_at":"2023-03-04T22:58:30.156Z","etag":null,"topics":["bug-hunting","bugbounty","penetration-testing-tools","secrets-scan","security-tools","version-control"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bassammaged.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-07-28T15:53:35.000Z","updated_at":"2022-10-12T09:09:35.000Z","dependencies_parsed_at":"2022-09-16T23:40:37.338Z","dependency_job_id":null,"html_url":"https://github.com/bassammaged/lazyGitleaks","commit_stats":null,"previous_names":[],"tags_count":null,"template":null,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bassammaged%2FlazyGitleaks","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bassammaged%2FlazyGitleaks/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bassammaged%2FlazyGitleaks/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bassammaged%2FlazyGitleaks/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bassammaged","download_url":"https://codeload.github.com/bassammaged/lazyGitleaks/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":242811863,"owners_count":20189142,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bug-hunting","bugbounty","penetration-testing-tools","secrets-scan","security-tools","version-control"],"created_at":"2024-07-29T17:07:40.498Z","updated_at":"2025-03-10T07:32:54.186Z","avatar_url":"https://github.com/bassammaged.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ch1 align=\"center\"\u003elazyGitleaks\u003c/h1\u003e\n\u003cp align=\"center\"\u003eFind juicy secrets in the repositories\u003c/p\u003e\n\u003cp align=\"center\"\u003elazyGitleaks is a python script clone and scans the repositories to find hard-coded secrets\u003c/p\u003e\n\n\u003cdetails open=\"open\"\u003e\n\u003csummary\u003eTable of Contents\u003c/summary\u003e\n  \u003col\u003e\n    \u003cli\u003e\u003ca href=\"#screen\"\u003eScreenshot\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#Disclaimer\"\u003eDisclaimer\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#Features\"\u003eFeatures\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#prerequisites\"\u003ePrerequisites\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#results-and-discussion\"\u003eResults and FQAs\u003c/a\u003e\u003c/li\u003e\n    \u003cli\u003e\u003ca href=\"#to-do\"\u003eTo-Do\u003c/a\u003e\u003c/li\u003e\n  \u003c/ol\u003e\n\u003c/details\u003e\n\n\u003ch2 id=\"screen\"\u003e :clapper: Screenshot\u003c/h2\u003e\n\u003cp align=\"center\"\u003e \n  \u003cimg src=\"assets/img/screenshot.png\"\u003e\n\u003c/p\u003e\n\n```sh\n\n ██▓    ▄▄▄      ▒███████▒▓██   ██▓     ▄████  ██▓▄▄▄█████▓ ██▓    ▓█████ ▄▄▄       ██ ▄█▀  ██████\n▓██▒   ▒████▄    ▒ ▒ ▒ ▄▀░ ▒██  ██▒    ██▒ ▀█▒▓██▒▓  ██▒ ▓▒▓██▒    ▓█   ▀▒████▄     ██▄█▒ ▒██    ▒\n▒██░   ▒██  ▀█▄  ░ ▒ ▄▀▒░   ▒██ ██░   ▒██░▄▄▄░▒██▒▒ ▓██░ ▒░▒██░    ▒███  ▒██  ▀█▄  ▓███▄░ ░ ▓██▄\n▒██░   ░██▄▄▄▄██   ▄▀▒   ░  ░ ▐██▓░   ░▓█  ██▓░██░░ ▓██▓ ░ ▒██░    ▒▓█  ▄░██▄▄▄▄██ ▓██ █▄   ▒   ██▒\n░██████▒▓█   ▓██▒▒███████▒  ░ ██▒▓░   ░▒▓███▀▒░██░  ▒██▒ ░ ░██████▒░▒████▒▓█   ▓██▒▒██▒ █▄▒██████▒▒\n░ ▒░▓  ░▒▒   ▓▒█░░▒▒ ▓░▒░▒   ██▒▒▒     ░▒   ▒ ░▓    ▒ ░░   ░ ▒░▓  ░░░ ▒░ ░▒▒   ▓▒█░▒ ▒▒ ▓▒▒ ▒▓▒ ▒ ░\n░ ░ ▒  ░ ▒   ▒▒ ░░░▒ ▒ ░ ▒ ▓██ ░▒░      ░   ░  ▒ ░    ░    ░ ░ ▒  ░ ░ ░  ░ ▒   ▒▒ ░░ ░▒ ▒░░ ░▒  ░ ░\n  ░ ░    ░   ▒   ░ ░ ░ ░ ░ ▒ ▒ ░░     ░ ░   ░  ▒ ░  ░        ░ ░      ░    ░   ▒   ░ ░░ ░ ░  ░  ░\n    ░  ░     ░  ░  ░ ░     ░ ░              ░  ░               ░  ░   ░  ░     ░  ░░  ░         ░\n                 ░         ░ ░\n\n                lazyGitleaks ver. 0.1 Beta | Developed by @bassammaged \u003ckemet\u003e\n\n  Do you interested in finding secrets? Are you depending on gitleaks tool? Do you usually preform\n  large scan scale against different repositories? No worries. lazyGitleaks comes to automate the scan\n  and use custom .toml template to find the juicy secrets are living in repositories.\n\nusage: lazyGitleaks.py [-h] -p PLATFORM -t TARGET [-a] [-o] [-v]\n\nrequired arguments:\n  -p PLATFORM, --platform PLATFORM\n                        Specify the version control platform [github, gitlab]\n  -t TARGET, --target TARGET\n                        Provide the targeted account name\n\noptional arguments:\n  -h, --help            show this help message and exit\n  -a, --auth            By providing the flag the scan will be run with authentication mechanism.\n  -o, --org             By providing the flag the target will classified as organization account.\n  -v, --verbose         Allows the script to print out the message level start with debug.\n```\n\n\u003ch2 id=\"Disclaimer\"\u003e :pencil: Disclaimer\u003c/h2\u003e\n\n`lazyGitleaks` is in beta version and is supposed to be free of issues but if any issues are encountered, please submit the ticket,lazyGitleaks is coded and published to be used in particular circumstances:\n\n1. Engaging in penetration testing activity.\n2. Carry on a Bug hunting activity.\n3. Source code review.\n4. Any other legal activity that is already approved by the owner of the asset.\n\n`lazyGitleaks` is created to work with all version control, which means there are many version control that will be supported soon.\n \n\u003ch2 id=\"Features\"\u003e :fuelpump: Features\u003c/h2\u003e\n\n- [x] `lazyGitleaks` supports GitHub.\n- [ ] `lazyGitleaks` supports GitLab.\n- [x] `lazyGitleaks` uses an environment variable for storing Credentials.\n- [x] `lazyGitleaks` perform GitHub API calls and clone all available repositories.\n- [x] `lazyGitleaks` supports authenticated [public \u0026 private repositories] and non-authenticated [public repositories].\n- [x] `lazyGitleaks` monitors the GitHub API limitation and the script detects the required time to postpone the job.\n- [x] `lazyGitleaks` has its unique `gitleaks.toml` that helps to find more secrets.\n- [ ] `lazyGitleaks` supports pause \u0026 continue.\n\n\n\u003e**Warning** \u003cbr\u003e\n\u003eAuthenticated scan it's run without issues when the target account is an organization that you are a member of or the provided github PAT is belong to the same target account.\n\n\n\u003ch2 id=\"prerequisites\"\u003e :cd: Prerequisites\u003c/h2\u003e\n\n1. Python3\n2. `pip` package manager\n3. `python3 -m pip install requirements.txt`\n4. Feel Free to use `lazyGitleaks` via `lazyGitleaks.py` script\n\n\u003e **Note** \u003cbr\u003e\n\u003e Github credendtial has to provided through enviornment variables as the following: \u003cbr\u003e\n\u003e `LG_GITHUB_TOKEN=\"\u003cgithub_username\u003e:\u003cgithub_pat\u003e\"`\n\n\u003ch2 id=\"results-and-discussion\"\u003e :paperclip: Results and FQAs\u003c/h2\u003e\n\n```json\n[\n {\n  \"Description\": \"AWS Manager ID\",\n  \"StartLine\": 139,\n  \"EndLine\": 139,\n  \"StartColumn\": 21,\n  \"EndColumn\": 40,\n  \"Match\": \"AIPAIK7LV6U6UXJXQQR3\",\n  \"Secret\": \"AIPA\",\n  \"File\": \"README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 1.5,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"access-key\",\n   \"aws\",\n   \"cloud\"\n  ],\n  \"RuleID\": \"aws-manager-id\"\n }\n]\n```\n\n```json\n[\n {\n  \"Description\": \"GitHub Personal Access Token\",\n  \"StartLine\": 50,\n  \"EndLine\": 50,\n  \"StartColumn\": 150,\n  \"EndColumn\": 189,\n  \"Match\": \"ghp_A5COGOVYUGnhYWILWawMfjpAAeeVeC5no94V\",\n  \"Secret\": \"ghp_A5COGOVYUGnhYWILWawMfjpAAeeVeC5no94V\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.5153117,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"pat-key\",\n   \"github\",\n   \"version-control\"\n  ],\n  \"RuleID\": \"github-pat\"\n },\n {\n  \"Description\": \"GitHub Personal Access Token\",\n  \"StartLine\": 59,\n  \"EndLine\": 59,\n  \"StartColumn\": 147,\n  \"EndColumn\": 186,\n  \"Match\": \"ghp_A5COGOVYUGnhYWILWawMfjpAAeeVeC5no94V\",\n  \"Secret\": \"ghp_A5COGOVYUGnhYWILWawMfjpAAeeVeC5no94V\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.5153117,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"pat-key\",\n   \"github\",\n   \"version-control\"\n  ],\n  \"RuleID\": \"github-pat\"\n },\n {\n  \"Description\": \"GitHub Personal Access Token\",\n  \"StartLine\": 59,\n  \"EndLine\": 59,\n  \"StartColumn\": 224,\n  \"EndColumn\": 263,\n  \"Match\": \"ghp_8zrErw6PvpPWaoPepQLN19sXLeAOSH06Zx1M\",\n  \"Secret\": \"ghp_8zrErw6PvpPWaoPepQLN19sXLeAOSH06Zx1M\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.8341837,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"pat-key\",\n   \"github\",\n   \"version-control\"\n  ],\n  \"RuleID\": \"github-pat\"\n },\n {\n  \"Description\": \"GitHub Personal Access Token\",\n  \"StartLine\": 63,\n  \"EndLine\": 63,\n  \"StartColumn\": 37,\n  \"EndColumn\": 76,\n  \"Match\": \"ghp_8zrErw6PvpPWaoPepQLN19sXLeAOSH06Zx1M\",\n  \"Secret\": \"ghp_8zrErw6PvpPWaoPepQLN19sXLeAOSH06Zx1M\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.8341837,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"pat-key\",\n   \"github\",\n   \"version-control\"\n  ],\n  \"RuleID\": \"github-pat\"\n },\n {\n  \"Description\": \"AirBrake API\",\n  \"StartLine\": 98,\n  \"EndLine\": 98,\n  \"StartColumn\": 13,\n  \"EndColumn\": 62,\n  \"Match\": \"\\\"AIRBRAKE_KEY: 'cae7f5949eaf243d0cccfa1329f092d8'\\\"\",\n  \"Secret\": \"\\\"AIRBRAKE_KEY: 'cae7f5949eaf243d0cccfa1329f092d8'\\\"\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.533661,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"api-key\",\n   \"airbrake\",\n   \"app monitor\"\n  ],\n  \"RuleID\": \"airbrake-api\"\n },\n {\n  \"Description\": \"AirBrake API\",\n  \"StartLine\": 99,\n  \"EndLine\": 99,\n  \"StartColumn\": 14,\n  \"EndColumn\": 63,\n  \"Match\": \"\\\"AIRBRAKE_KEY: 'cae7f5949eaf243d0cccfa1329f092d8'\\\"\",\n  \"Secret\": \"\\\"AIRBRAKE_KEY: 'cae7f5949eaf243d0cccfa1329f092d8'\\\"\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.533661,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"api-key\",\n   \"airbrake\",\n   \"app monitor\"\n  ],\n  \"RuleID\": \"airbrake-api\"\n },\n {\n  \"Description\": \"AirBrake project key\",\n  \"StartLine\": 120,\n  \"EndLine\": 120,\n  \"StartColumn\": 13,\n  \"EndColumn\": 33,\n  \"Match\": \"\\\"AIRBRAKE_ID: 179755\\\"\",\n  \"Secret\": \"\\\"AIRBRAKE_ID: 179755\\\"\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 3.8208888,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"project-id\",\n   \"airbrake\",\n   \"app monitor\"\n  ],\n  \"RuleID\": \"airbrake-project-key\"\n },\n {\n  \"Description\": \"AirBrake project key\",\n  \"StartLine\": 121,\n  \"EndLine\": 121,\n  \"StartColumn\": 14,\n  \"EndColumn\": 34,\n  \"Match\": \"\\\"AIRBRAKE_ID: 179755\\\"\",\n  \"Secret\": \"\\\"AIRBRAKE_ID: 179755\\\"\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/README.md\",\n  \"Commit\": \"\",\n  \"Entropy\": 3.8208888,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"project-id\",\n   \"airbrake\",\n   \"app monitor\"\n  ],\n  \"RuleID\": \"airbrake-project-key\"\n },\n {\n  \"Description\": \"GitHub Personal Access Token\",\n  \"StartLine\": 71,\n  \"EndLine\": 71,\n  \"StartColumn\": 171,\n  \"EndColumn\": 210,\n  \"Match\": \"ghp_A5COGOVYUGnhYWILWawMfjpAAeeVeC5no94V\",\n  \"Secret\": \"ghp_A5COGOVYUGnhYWILWawMfjpAAeeVeC5no94V\",\n  \"File\": \"apps/third_eye/lazy_gitleaks/run.py\",\n  \"Commit\": \"\",\n  \"Entropy\": 4.5153117,\n  \"Author\": \"\",\n  \"Email\": \"\",\n  \"Date\": \"\",\n  \"Message\": \"\",\n  \"Tags\": [\n   \"pat-key\",\n   \"github\",\n   \"version-control\"\n  ],\n  \"RuleID\": \"github-pat\"\n }\n]\n```\n\n\u003ch2 id=\"to-do\"\u003e :paperclip: To-Do\u003c/h2\u003e\n\n- [x] Support pause \u0026 continue. \n- [ ] Support gitlab. \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbassammaged%2FlazyGitleaks","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbassammaged%2FlazyGitleaks","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbassammaged%2FlazyGitleaks/lists"}