Gitrob

Gitrob is a tool that scans public GitHub repositories for potentially sensitive files. It clones repositories and walks through their full commit history to flag files matching signatures for sensitive content, including files that may have been deleted in later commits.

The tool presents its findings through a local web interface for interactive browsing and analysis. It serves results directly from memory without requiring a database, and allows users to save the full set of gathered findings to a JSON session file. Saved sessions can be loaded back into the web interface to continue analysis without re-scanning.

Features

Historical Commit Scanning - Scans full commit history to uncover sensitive files even if later deleted.
Sensitive File Discovery - Clones public GitHub repositories and flags files matching signatures for sensitive content.
Findings Browsing Interfaces - Provides a local web UI for interactive browsing and analysis of discovered sensitive files.
Assessment Session Files - Saves full security scan findings as JSON files for persistence and sharing.
In-Memory Serving - Serves analysis results directly from RAM without requiring a database.
Assessment Session Files - Saves and loads full security scan findings as JSON files for persistence and sharing.
Reconnaissance Tools - Reconnaissance tool for GitHub organizations.
Cloud and Git Security - Scan GitHub organizations for sensitive files.
Reconnaissance and OSINT - Reconnaissance tool for identifying sensitive data in GitHub organizations.
Secret Detection - Finds sensitive files in public GitHub repositories.
Secret Scanning - Identifies sensitive files pushed to public GitHub repositories.
Source Code Discovery - Reconnaissance tool for identifying sensitive data in GitHub organizations.

Historial de estrellas

michenriksenGitrobArchived

Name: michenriksen/gitrob
Author: michenriksen

View on GitHub

6,184 estrellas844 forksGoMIT12 vistasmichenriksen.com/blog/gitrob-now-in-go

Gitrob

Features

Historical Commit Scanning - Scans full commit history to uncover sensitive files even if later deleted.
Sensitive File Discovery - Clones public GitHub repositories and flags files matching signatures for sensitive content.
Findings Browsing Interfaces - Provides a local web UI for interactive browsing and analysis of discovered sensitive files.
Assessment Session Files - Saves full security scan findings as JSON files for persistence and sharing.
In-Memory Serving - Serves analysis results directly from RAM without requiring a database.
Assessment Session Files - Saves and loads full security scan findings as JSON files for persistence and sharing.
Reconnaissance Tools - Reconnaissance tool for GitHub organizations.
Cloud and Git Security - Scan GitHub organizations for sensitive files.
Reconnaissance and OSINT - Reconnaissance tool for identifying sensitive data in GitHub organizations.
Secret Detection - Finds sensitive files in public GitHub repositories.
Secret Scanning - Identifies sensitive files pushed to public GitHub repositories.
Source Code Discovery - Reconnaissance tool for identifying sensitive data in GitHub organizations.

Alternativas open-source a Gitrob

Proyectos open-source similares, clasificados según cuántas características comparten con Gitrob.

zricethezav/gitleaks
zricethezav/gitleaks
27,739Ver en GitHub
Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API keys, and authentication tokens. It functions as a Git secret scanner that analyzes both local file systems and Git commit history to prevent credential leaks. The tool distinguishes itself through a decoding pipeline that transforms base64 and hex strings into plaintext to find obfuscated secrets. It further reduces false positives using proximity-based validation and fingerprint-based suppression to filter out known or baseline findings. The system covers a broad range of detec
Go
Ver en GitHub27,739
blacklanternsecurity/bbot
blacklanternsecurity/bbot
9,929Ver en GitHub
This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte
Python
Ver en GitHub9,929
edoardottt/cariddi
edoardottt/cariddi
3,427Ver en GitHub
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Go
Ver en GitHub3,427
awslabs/git-secrets
awslabs/git-secrets
13,177Ver en GitHub
Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for
Shell
Ver en GitHub13,177

Ver las 30 alternativas a Gitrob

Preguntas frecuentes

¿Qué hace michenriksen/gitrob?

¿Cuáles son las características principales de michenriksen/gitrob?

Las características principales de michenriksen/gitrob son: Historical Commit Scanning, Sensitive File Discovery, Findings Browsing Interfaces, Assessment Session Files, In-Memory Serving, Reconnaissance Tools, Cloud and Git Security, Reconnaissance and OSINT.

¿Qué alternativas de código abierto existen para michenriksen/gitrob?

Las alternativas de código abierto para michenriksen/gitrob incluyen: zricethezav/gitleaks — Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API… blacklanternsecurity/bbot — This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions… m4ll0k/secretfinder — SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript… awslabs/git-secrets — Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating… gwen001/github-subdomains. edoardottt/cariddi — Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.