git-user.rb
Patrick Hurd, Coalfire Federal
OSINT tool specifically for targetting developers.
What you get:
- Profile information
- Commit authorship information
- See options list for non-default output
Setup
sudo apt install rubysudo gem install httpartysudo apt install aha(Required for mine output)sudo apt install whois(Required for whois output)- Add your GitHub username/password/token to your gitconfig if you plan on mining private repos
Usage:
Usage: git-user.rb [options]
-h, --help Show this help banner
-u, --user USERNAME User to gather info from
-o, --organization ORGANIZATION Organization to scrape
-r, --repo REPO The repo whom's contributors to scrape
--local ABSOLUTE_PATH Perform scrape on a repo local to your filesystem
--name NAME Name to refer to a --local repo in report filenames
-a, --auth Authenticate with HTTP basic auth
-t, --token TOKEN Use specified GitHub personal access token
-s, --stackoverflow Try to find users' accounts on StackOverflow
-p, --pwned Search for relevant data breaches using haveibeenpwned
-e, --extra_checking Do extra checking on email addresses
-m, --mine Mine the repo or user/organization's repos for secrets
--whois Perform whois lookup on domains found in profile information
-l, --loud Perform active recon on users (scrape their personal site)
--html Output main report to an HTML document
-w, --wordlist Generate wordlist for use in password attacks
-c, --csv Export discovered accounts to a GoPhish-importable CSV file
Add the following line to your .bashrc or .zshrc if you're using zsh to enable argument autocompletion (optional):
complete -W "--help --user --organization --repo --auth --token --stackoverflow --pwned --extra_checking --mine --html --wordlist --whois --loud --csv --local --name" git-user.rbExample command:
./git-user.rb -t deadb33f... -o Coalfire-Research -r Git-Scrapers -s -p -e -m --html -c
If you have two-factor authentication enabled on your GitHub account, you will need to create and use an application token instead of your password (using -t TOKEN instead of -a).
Repo mining will skip forked repos.
How you can help:
Check out the issues