Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/michenriksen/gitrob
Reconnaissance tool for GitHub organizations
https://github.com/michenriksen/gitrob
github-api golang osint security
Last synced: 22 days ago
JSON representation
Reconnaissance tool for GitHub organizations
- Host: GitHub
- URL: https://github.com/michenriksen/gitrob
- Owner: michenriksen
- License: mit
- Archived: true
- Created: 2015-01-07T13:58:58.000Z (almost 10 years ago)
- Default Branch: master
- Last Pushed: 2022-09-20T18:09:09.000Z (about 2 years ago)
- Last Synced: 2024-04-24T14:58:50.256Z (7 months ago)
- Topics: github-api, golang, osint, security
- Language: Go
- Homepage: https://michenriksen.com/blog/gitrob-now-in-go/
- Size: 1.16 MB
- Stars: 5,832
- Watchers: 155
- Forks: 823
- Open Issues: 74
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE.txt
Awesome Lists containing this project
- awesome-go - michenriksen/gitrob
- awesome-hacking-tools - Gitrob - Reconnaissance tool for GitHub organizations (Asset Discovery / Source Code Aggregators / Search - Information Discovery)
- DevSecOps - https://github.com/michenriksen/gitrob - the-badge)| (Secrets management)
- project-awesome - michenriksen/gitrob - Reconnaissance tool for GitHub organizations (Go)
- awesome-bugbounty-tools - gitrob - Reconnaissance tool for GitHub organizations (Miscellaneous / Secrets)
- awesome-git - Gitrob - a command line tool to find sensitive information lingering in publicly available files on GitHub (Tools / Comparing workflows)
- WebHackersWeapons - gitrob
- awesome-java-security - Gitrob - Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. (Static Code Analysis)
- Awesome-Asset-Discovery - Gitrob
- awesome-devsecops-russia - Gitrob
- awesome-hacking-lists - michenriksen/gitrob - Reconnaissance tool for GitHub organizations (Go)
- starred-awesome - gitrob - Reconnaissance tool for GitHub organizations (Ruby)
- stars - michenriksen/gitrob - Reconnaissance tool for GitHub organizations (Go)
- stars - michenriksen/gitrob - Reconnaissance tool for GitHub organizations (Go)
README
# Gitrob: Putting the Open Source in OSINT
Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that match signatures for potentially sensitive files. The findings will be presented through a web interface for easy browsing and analysis.
## Usage
gitrob [options] target [target2] ... [targetN]
### Options
```
-bind-address string
Address to bind web server to (default "127.0.0.1")
-commit-depth int
Number of repository commits to process (default 500)
-debug
Print debugging information
-github-access-token string
GitHub access token to use for API requests
-load string
Load session file
-no-expand-orgs
Don't add members to targets when processing organizations
-port int
Port to run web server on (default 9393)
-save string
Save session to file
-silent
Suppress all output except for errors
-threads int
Number of concurrent threads (default number of logical CPUs)
```
### Saving session to a file
By default, gitrob will store its state for an assessment in memory. This means that the results of an assessment is lost when Gitrob is closed. You can save the session to a file by using the `-save` option:
gitrob -save ~/gitrob-session.json acmecorp
Gitrob will save all the gathered information to the specified file path as a special JSON document. The file can be loaded again for browsing at another point in time, shared with other analysts or parsed for custom integrations with other tools and systems.
### Loading session from a file
A session stored in a file can be loaded with the `-load` option:
gitrob -load ~/gitrob-session.json
Gitrob will start its web interface and serve the results for analysis.
## Installation
A [precompiled version is available](https://github.com/michenriksen/gitrob/releases) for each release, alternatively you can use the latest version of the source code from this repository in order to build your own binary.
Make sure you have a correctly configured **Go >= 1.8** environment and that `$GOPATH/bin` is in your `$PATH`
$ go get github.com/michenriksen/gitrob
This command will download gitrob, install its dependencies, compile it and move the `gitrob` executable to `$GOPATH/bin`.
### Github access token
Gitrob will need a Github access token in order to interact with the Github API. [Create a personal access token](https://help.github.com/articles/creating-a-personal-access-token-for-the-command-line/) and save it in an environment variable in your `.bashrc` or similar shell configuration file:
export GITROB_ACCESS_TOKEN=deadbeefdeadbeefdeadbeefdeadbeefdeadbeef
Alternatively you can specify the access token with the `-github-access-token` option, but watch out for your command history!