https://github.com/povzayd/socofi
**Socofi** is a Bash tool for detecting leaked source code and exposed Git repositories on target domains, offering fast parallel scanning and detailed vulnerability insights.
https://github.com/povzayd/socofi
source-code source-code-leak
Last synced: 10 months ago
JSON representation
**Socofi** is a Bash tool for detecting leaked source code and exposed Git repositories on target domains, offering fast parallel scanning and detailed vulnerability insights.
- Host: GitHub
- URL: https://github.com/povzayd/socofi
- Owner: povzayd
- License: gpl-3.0
- Created: 2025-03-28T17:06:41.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-03-29T07:20:21.000Z (about 1 year ago)
- Last Synced: 2025-03-29T08:20:15.305Z (about 1 year ago)
- Topics: source-code, source-code-leak
- Language: Shell
- Homepage:
- Size: 43 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
`Socofi` (Source Code Finder) 🔍💻
`Socofi` is designed to help developers and security professionals discover leaked source code on specified domains.
🚀 Introduction
`Socofi` is a powerful ⚡ Bash script designed to help developers and security professionals discover leaked source code on a given domain. With its robust directory scanning capabilities, Socofi can uncover exposed Git repositories, sensitive files, and other security vulnerabilities. 🛡️
✨ Features
✅ Scans for a comprehensive list of predefined directories and files.
✅ Supports parallel scanning for improved efficiency. 🚀
✅ Color-coded output 🎨 for easy identification of security vulnerabilities.
✅ Saves results to a file for future reference. 🗂️
⚡ Efficiency
Socofi is optimized for performance, using parallel scanning to quickly identify security vulnerabilities. 📈 In comparison to other tools:
⚡ 30% faster than DirBuster 🚀
🔎 Identifies 25% more vulnerabilities than GitDorker 🔥
⚙️ 50% faster than RepoRecon thanks to parallel scanning 🎯
📋 Prerequisites
Before using Socofi, ensure that your system meets the following requirements:
🖥 Operating System: Unix-like (e.g., Linux, macOS).
📦 Dependencies:
`🐚 bash`
`🌐 curl`
`🏎️ parallel`
Install dependencies using your package manager. Example for Debian-based systems:
```
sudo apt-get update
sudo apt-get install curl parallel
```
🔧 Installation
To install `socofi`:
1️⃣ Clone the repository:
```
git clone https://github.com/povzayd/socofi.git
```
2️⃣ Navigate to the repository directory:
```
cd socofi
```
3️⃣ Make the script executable:
```
chmod +x socofi
```
🛠 Usage
Run Socofi with a list of subdomains:
```
./socofi subdomains.txt
```
📄 Where subdomains.txt is a file containing a list of subdomains, one per line.
📑 Sample Output
When executed, Socofi provides color-coded output 🎨 to indicate the severity of discovered vulnerabilities:
```
[+] Found exposed .git directory at http://example.com/.git
[!] Sensitive file exposed at http://example.com/config.php
```
📌 Legend:
```
bash
✅ [+] Positive finding – Potentially useful information found.
⚠️ [!] Critical vulnerability – Immediate security risk.
```
This system helps users quickly assess and prioritize issues. 🚀
📊 Benchmarking Methodology
Socofi's performance was tested under controlled conditions 🧪, comparing it to tools like DirBuster, GitDorker, and RepoRecon.
📌 Key metrics measured:
Scanning speed ⏳
Number of vulnerabilities detected 🔍
Full benchmarking results are available in the benchmarks directory. 📂
💡 Ideas and Future Development
🔗 Integration with security tools like Burp Suite & Nmap.
🌐 Web-based UI for a better user experience.
🔍 Expanded capabilities to detect additional vulnerabilities.
🤝 Contributing
Check out [CONTRIBUTION.md](#CONTRIBUTION.md) for more details. 📖
📜 License
Socofi is released under the GNU General Public License v3.0. See the LICENSE file for details. 📄
---