TheBinitGhimire / Github Recon
GitHub Recon — and what you can achieve with it!
Stars: ✭ 47
Projects that are alternatives of or similar to Github Recon
Osint Tools
👀 Some of my favorite OSINT tools.
Stars: ✭ 155 (+229.79%)
Mutual labels: reconnaissance, recon, information-gathering
Theharvester
E-mails, subdomains and names Harvester - OSINT
Stars: ✭ 6,175 (+13038.3%)
Mutual labels: reconnaissance, recon, information-gathering
Scilla
🏴☠️ Information Gathering tool 🏴☠️ DNS / Subdomains / Ports / Directories enumeration
Stars: ✭ 116 (+146.81%)
Mutual labels: reconnaissance, recon, information-gathering
Discover
Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.
Stars: ✭ 2,548 (+5321.28%)
Mutual labels: reconnaissance, recon, information-gathering
Rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…
Stars: ✭ 3,439 (+7217.02%)
Mutual labels: reconnaissance, recon, information-gathering
querytool
Querytool is an OSINT framework based on Google Spreadsheets. With this tool you can perform complex search of terms, people, email addresses, files and many more.
Stars: ✭ 104 (+121.28%)
Mutual labels: recon, information-gathering, reconnaissance
tugarecon
Pentest: Subdomains enumeration tool for penetration testers.
Stars: ✭ 142 (+202.13%)
Mutual labels: recon, information-gathering, reconnaissance
Favfreak
Making Favicon.ico based Recon Great again !
Stars: ✭ 564 (+1100%)
Mutual labels: reconnaissance, recon, information-gathering
Social Analyzer
API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections are updated regularly by automated systems)
Stars: ✭ 8,449 (+17876.6%)
Mutual labels: reconnaissance, information-gathering
Gasmask
Information gathering tool - OSINT
Stars: ✭ 518 (+1002.13%)
Mutual labels: reconnaissance, information-gathering
Gitgot
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
Stars: ✭ 964 (+1951.06%)
Mutual labels: reconnaissance, recon
Odin
Automated network asset, email, and social media profile discovery and cataloguing.
Stars: ✭ 476 (+912.77%)
Mutual labels: reconnaissance, recon
Shotlooter
a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc
Stars: ✭ 451 (+859.57%)
Mutual labels: reconnaissance, recon
Bigbountyrecon
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
Stars: ✭ 541 (+1051.06%)
Mutual labels: reconnaissance, recon
Hosthunter
HostHunter a recon tool for discovering hostnames using OSINT techniques.
Stars: ✭ 427 (+808.51%)
Mutual labels: reconnaissance, recon
Phoneinfoga
PhoneInfoga is one of the most advanced tools to scan international phone numbers using only free resources. It allows you to first gather standard information such as country, area, carrier and line type on any international phone number. Then search for footprints on search engines to try to find the VoIP provider or identify the owner.
Stars: ✭ 5,927 (+12510.64%)
Mutual labels: reconnaissance, information-gathering
Sherlock
🔎 Hunt down social media accounts by username across social networks
Stars: ✭ 28,569 (+60685.11%)
Mutual labels: reconnaissance, information-gathering
Amass
In-depth Attack Surface Mapping and Asset Discovery
Stars: ✭ 6,284 (+13270.21%)
Mutual labels: recon, information-gathering
Sn0int
Semi-automatic OSINT framework and package manager
Stars: ✭ 814 (+1631.91%)
Mutual labels: reconnaissance, recon
Reconspider
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
Stars: ✭ 621 (+1221.28%)
Mutual labels: recon, information-gathering
GitHub Recon
GitHub Recon — and what you can achieve with it!
This repository is about my talk at Hacktoberfest Chitwan 2020 on "GitHub Recon — and what you can achieve with it!".
The original presentation given at the talk is available here: https://drive.google.com/file/d/1EwYmulb-NVAkRAn6-IQx5Hw9oiRTau-t/view?usp=sharing
I am providing the resources featured during the session here: https://docs.google.com/document/d/1S6TIDOZ4dlwdMwDdvqKPKKl9tPBzjtYFrMyr-RaeM3c/edit?usp=sharing
The Talk: "GitHub Recon — and what you can achieve with it!"
Watch on YouTube: https://youtu.be/_TeNVnbk7Xs
Slides
The slides are available in PDF format here: GitHub Recon — and what you can achieve with it!.pdf
Some Important Slides
GitHub Dorks for Recon
Sample Keywords to search for
Resources
- Some Amazing GitHub Dorks: https://github.com/techgaun/github-dorks
- Keywords to search for: https://github.com/random-robbie/keywords/blob/master/keywords.txt
- Amazing Guide to go through: https://securitytrails.com/blog/github-dorks
- GitHub Secrets Awareness: https://www.facebook.com/askbuddie/photos/a.342347749650563/742592126292788/
- Removing sensitive data from a repository: https://docs.github.com/en/[email protected]/github/authenticating-to-github/removing-sensitive-data-from-a-repository
Automated GitHub Recon
- GitRob: https://github.com/michenriksen/gitrob
- TruffleHog: https://github.com/dxa4481/truffleHog
- Git-Secrets: https://github.com/awslabs/git-secrets
Sample Target
- HighlySecureOrganization/SuperSecureWebApp: https://github.com/HighlySecureOrganization/SuperSecureWebApp
Thanks,
Binit Ghimire
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].