{"id":21512667,"url":"https://github.com/p3gleg/pwndelorean","last_synced_at":"2025-12-15T21:21:43.400Z","repository":{"id":57597614,"uuid":"69780648","full_name":"P3GLEG/PwnDelorean","owner":"P3GLEG","description":"Git Repo and Filesystem credential scanner","archived":false,"fork":false,"pushed_at":"2017-09-08T04:08:34.000Z","size":3322,"stargazers_count":18,"open_issues_count":0,"forks_count":5,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-04-01T22:48:01.568Z","etag":null,"topics":["credentials","security-audit","security-tools"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/P3GLEG.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-10-02T05:25:19.000Z","updated_at":"2024-11-05T15:16:25.000Z","dependencies_parsed_at":"2022-08-28T10:22:08.124Z","dependency_job_id":null,"html_url":"https://github.com/P3GLEG/PwnDelorean","commit_stats":null,"previous_names":["k4ch0w/pwndelorean"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P3GLEG%2FPwnDelorean","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P3GLEG%2FPwnDelorean/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P3GLEG%2FPwnDelorean/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P3GLEG%2FPwnDelorean/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/P3GLEG","download_url":"https://codeload.github.com/P3GLEG/PwnDelorean/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248089701,"owners_count":21045951,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["credentials","security-audit","security-tools"],"created_at":"2024-11-23T22:42:47.162Z","updated_at":"2025-12-15T21:21:43.334Z","avatar_url":"https://github.com/P3GLEG.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# PwnDelorean\n\nPwnDelorean is a credential seeker. It allows users to search local and remote git repositories history for\nany developer secrets that were left over and in addition searches filesystems for the same secrets.\n\n### Prerequisities\nRequires Go runtime, currently using go version 1.8.3\n\n## Getting Started\n\n```bash\nbrew install libgit2\ngo get\ngo build . \n./PwnDelorean -url https://github.com/k4ch0w/PwnDelorean.git\n```\n\n### Scan filesystem\n```bash\n./PwnDelorean -directory ~/Workspace\n```\n\n### Scan Organization \n```bash\n./PwnDelorean -organization GitHub\n```\n\n### Scan repo with Creds\n#### Plaintext\n```bash\nexport GIT_USER=k4ch0w\nexport GIT_PASS=*********\n./PwnDelorean -url https://github.com/k4ch0w/PwnDeloreanRepo.git -creds=plaintext\n```\n#### SSH\n```bash\nexport GIT_USER=k4ch0w\nexport GIT_PRIV_KEY=~/.ssh/id_rsa\nexport GIT_PUB_KEY=~/.ssh/id_rsa.pub\n#If needed \nexport GIT_PASSPHRASE=******\n./PwnDelorean -url https://github.com/k4ch0w/PwnDeloreanRepo.git -creds=ssh\n```\n### Additional Flags\n* csv - The filename to output results in CSV format to I.E ~/results.csv\n* fileNamesOnly - Only look for interesting filenames instead of parsing each file\n* ignoreForkedRepos - When scanning an organization ignore repos they forked\n* ignoreHighFalsePositives - Ignore searching for patterns that generally cause false positives, be careful with this flag it will miss things like AWS keys and Azure keys\n    \t\n\n## Authors\n\n* **Paul Ganea** - *Initial work*\n\n\n## License\nThis project is licensed under the MIT License - see the [LICENSE.md](LICENSE.md) file for details\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fp3gleg%2Fpwndelorean","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fp3gleg%2Fpwndelorean","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fp3gleg%2Fpwndelorean/lists"}