Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/mxrch/gitfive
🐙 Track down GitHub users.
https://github.com/mxrch/gitfive
github hideandsec malfrats osint python
Last synced: 1 day ago
JSON representation
🐙 Track down GitHub users.
- Host: GitHub
- URL: https://github.com/mxrch/gitfive
- Owner: mxrch
- License: mpl-2.0
- Created: 2022-10-05T23:47:48.000Z (about 2 years ago)
- Default Branch: master
- Last Pushed: 2024-10-02T02:27:34.000Z (2 months ago)
- Last Synced: 2024-10-14T15:04:47.309Z (about 2 months ago)
- Topics: github, hideandsec, malfrats, osint, python
- Language: Python
- Homepage:
- Size: 4.58 MB
- Stars: 827
- Watchers: 7
- Forks: 54
- Open Issues: 12
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
- awesome-cicd-attacks - GitFive - OSINT tool to investigate GitHub profiles. (Tools / Defense Evasion)
README
#### 🐍 Now Python 3.13 compatible !
# Description
GitFive is an OSINT tool to investigate GitHub profiles.
Main features :
- Usernames / names history
- Usernames / names variations
- Email address to GitHub account
- Find GitHub's accounts from a list of email addresses
- Lists identities used by the target
- Clones and analyze every target's repos
- Highlights emails tied to GitHub's target account
- Finds local identities (UPNs, ex : [email protected])
- Finds potential secondary GitHub accounts
- Don't need repos to work (but better)
- Generates every possible email address combinations and looks for matchs
- Dumps SSH public keys
- JSON export
Optimizations :
- Very low API consumption, stays under the rate-limit
- Multi-processing tasks (bypassing Python's GIL)
- Async scraping
# Workflow
**Click [here](https://raw.githubusercontent.com/mxrch/GitFive/master/assets/workflow.png) for a full view**
# Requirements
- Git
- Python >= 3.10
# Installation
```bash
$ pip3 install pipx
$ pipx ensurepath
$ pipx install gitfive
```
It will automatically use venvs to avoid dependency conflicts with other projects.
# Usage
First, login to GitHub *(preferably with a secondary account)* :
```bash
$ gitfive login
```
Then, profit :
```bash
usage: gitfive [-h] {login,user,email,emails,light} ...
positional arguments:
{login,user,email,emails,light}
login Let GitFive authenticate to GitHub.
user Track down a GitHub user by its username.
email Track down a GitHub user by its email address.
emails Find GitHub usernames of a given list of email addresses.
light Quickly find emails addresses from a GitHub username.
options:
-h, --help show this help message and exit
```
*PS : plz avoid testing on torvalds or other authors of repos with 1 million commits*
📄 You can also use --json with user and email modules to export in JSON ! Example :
```bash
$ gitfive user mxrch --json mxrch_data.json
```
**Have fun 🥰💞**
## Video demo
https://github.com/mxrch/GitFive/assets/17338428/28a22d30-f651-483f-84e8-7fc6e00b831f
## Obvious disclaimer
This tool is for educational purposes only, I am not responsible for its use.
### Less obvious disclaimer
The use of this tool in an automated paid service / software is strictly forbidden without my personal agreement.\
Please use it only in personal, criminal investigations, or open-source projects.
## Thanks
- [novitae](https://github.com/novitae) for being my Python colleague
- [rayanlecat](https://twitter.com/rayanlecat), [ABH](https://twitter.com/ABHsec), [22sh](https://twitter.com/0x22sh), [BlackWasp](https://twitter.com/BlWasp_), [Tartofraise](https://twitter.com/_Tartofraise), [mpgn](https://twitter.com/mpgn_x64), [M3SS](https://twitter.com/0x4D335353) and [n1nj4sec](https://twitter.com/n1nj4sec) for the beta test
- The HideAndSec team 💗 (blog : https://hideandsec.sh)
## Sponsors
Thanks to these awesome people for supporting me !
\
You like my work ?\
[Sponsor me](https://github.com/sponsors/mxrch) on GitHub ! 🤗