Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/gwen001/github-endpoints

Find endpoints on GitHub.
https://github.com/gwen001/github-endpoints

bugbounty endpoints github go golang pentesting security-tools urls

Last synced: 3 months ago
JSON representation

Find endpoints on GitHub.

Awesome Lists containing this project

README

        

github-endpoints

Find endpoints on GitHub.


go badge
MIT license badge
twitter badge

---

## Description

This Go tool performs searches on GitHub and parses the results to find endpoints of a given domain.

## Install

```
go install github.com/gwen001/github-endpoints@latest
```

or

```
git clone https://github.com/gwen001/github-endpoints
cd github-endpoints
go install
```

## Usage

```
$ github-endpoints -h

Usage of github-endpoints:
-all
displays urls of all other domains, default=false
-d string
domain you are looking for (required)
-e extended mode, also look for example.com
-k exit the program when all tokens have been disabled
-o string
output file, default: .txt
-r display relative urls, default=false
-raw
raw output
-t string
github token (required), can be:
• a single token
• a list of tokens separated by comma
• a file (.tokens) containing 1 token per line
if the options is not provided, the environment variable GITHUB_TOKEN is readed, it can be:
• a single token
• a list of tokens separated by comma
```

If you want to use multiple tokens, you better create a `.tokens` file in the executable directory with 1 token per line
```
token1
token2
...
```
or use an environment variable with tokens separated by comma:
```
export GITHUB_TOKEN=token1,token2...
```

Tokens are disabled when GitHub raises a rate limit alert, however they are re-enable 1mn later.
You can disable that feature by using the option `-k`.

## Todo

- change the order of the extra searches ?
- ?

## Changelog

**20/09/2022**
- fix regexp for subdomains

**25/09/2020**
- quick mode added
- tokens can be read from any file

**23/09/2020**
- fixed an issue in the api call (params name)
- added binary

**10/08/2020**
- creation

---

Feel free to [open an issue](/../../issues/) if you have any problem with the script.