Gitrob

Gitrob: Open Source Reconnaissance Tool

Gitrob is an open source reconnaissance tool used to find potentially sensitive files and information exposed in GitHub repositories. It helps security researchers and pentesters identify misconfigured GitHub repos that leak API keys, passwords, PII, and other sensitive data.

What is Gitrob?

Gitrob is an open source command line application used to scan GitHub repositories for sensitive information. It was created by security researcher Michael Henriksen as a way to automate the process of finding misconfigured GitHub repos that leak API keys, authentication credentials, personally identifiable information (PII), and other sensitive data.

Here's how Gitrob works: It takes a scope input like an organization name or user account, and uses the GitHub API to iterate through all public repositories searching file contents and Git metadata for strings that match known secrets like API tokens or private keys. Any matches are output to the user for further investigation.

Gitrob has become popular in the cybersecurity community as more development teams use GitHub to host code, but sometimes accidentally check in credentials or other sensitive data that gets exposed publicly. Companies often have hundreds of GitHub repos making it time consuming to manually review them all for proper security controls.

Some key features and capabilities of Gitrob include:

• Pattern matching and regex to identify common secrets like Slack tokens, AWS keys, social security numbers, etc.
• Recursive searching through an entire GitHub organization or user account
• Custom signature creation for proprietary access tokens
• Output to CSV file for additional analysis

Gitrob helps security teams automate the discovery of exposed credentials and sensitive data in public GitHub repos before malicious actors are able to find and abuse them. It's free to use and modify making it a popular open source program for online reconnaissance and data exposure audits.

Gitrob Features

Official Links