What are the main features of michenriksen/gitrob?

The main features of michenriksen/gitrob are: Historical Commit Scanning, Sensitive File Discovery, Findings Browsing Interfaces, Assessment Session Files, In-Memory Serving, Reconnaissance Tools, Cloud and Git Security, Reconnaissance and OSINT.

What are some open-source alternatives to michenriksen/gitrob?

Open-source alternatives to michenriksen/gitrob include: zricethezav/gitleaks — Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API… blacklanternsecurity/bbot — This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions… m4ll0k/secretfinder — SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript… awslabs/git-secrets — Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating… gwen001/github-subdomains. edoardottt/cariddi — Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more.

michenriksenGitrobArchived

Name: michenriksen/gitrob
Author: michenriksen

View on GitHub

6,184 stars844 forksGoMIT12 viewsmichenriksen.com/blog/gitrob-now-in-go

Gitrob

Gitrob is a tool that scans public GitHub repositories for potentially sensitive files. It clones repositories and walks through their full commit history to flag files matching signatures for sensitive content, including files that may have been deleted in later commits.

The tool presents its findings through a local web interface for interactive browsing and analysis. It serves results directly from memory without requiring a database, and allows users to save the full set of gathered findings to a JSON session file. Saved sessions can be loaded back into the web interface to continue analysis without re-scanning.

Features

Historical Commit Scanning - Scans full commit history to uncover sensitive files even if later deleted.
Sensitive File Discovery - Clones public GitHub repositories and flags files matching signatures for sensitive content.
Findings Browsing Interfaces - Provides a local web UI for interactive browsing and analysis of discovered sensitive files.
Assessment Session Files - Saves full security scan findings as JSON files for persistence and sharing.
In-Memory Serving - Serves analysis results directly from RAM without requiring a database.
Assessment Session Files - Saves and loads full security scan findings as JSON files for persistence and sharing.
Reconnaissance Tools - Reconnaissance tool for GitHub organizations.
Cloud and Git Security - Scan GitHub organizations for sensitive files.
Reconnaissance and OSINT - Reconnaissance tool for identifying sensitive data in GitHub organizations.
Secret Detection - Finds sensitive files in public GitHub repositories.
Secret Scanning - Identifies sensitive files pushed to public GitHub repositories.
Source Code Discovery - Reconnaissance tool for identifying sensitive data in GitHub organizations.

Star history

michenriksenGitrobArchived

View on GitHub

6,184 stars844 forksGoMIT12 viewsmichenriksen.com/blog/gitrob-now-in-go

Gitrob

Features

Historical Commit Scanning - Scans full commit history to uncover sensitive files even if later deleted.
Sensitive File Discovery - Clones public GitHub repositories and flags files matching signatures for sensitive content.
Findings Browsing Interfaces - Provides a local web UI for interactive browsing and analysis of discovered sensitive files.
Assessment Session Files - Saves full security scan findings as JSON files for persistence and sharing.
In-Memory Serving - Serves analysis results directly from RAM without requiring a database.
Assessment Session Files - Saves and loads full security scan findings as JSON files for persistence and sharing.
Reconnaissance Tools - Reconnaissance tool for GitHub organizations.
Cloud and Git Security - Scan GitHub organizations for sensitive files.
Reconnaissance and OSINT - Reconnaissance tool for identifying sensitive data in GitHub organizations.
Secret Detection - Finds sensitive files in public GitHub repositories.
Secret Scanning - Identifies sensitive files pushed to public GitHub repositories.
Source Code Discovery - Reconnaissance tool for identifying sensitive data in GitHub organizations.

Open-source alternatives to Gitrob

Similar open-source projects, ranked by how many features they share with Gitrob.

zricethezav/gitleaks
zricethezav/gitleaks
27,739View on GitHub
Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API keys, and authentication tokens. It functions as a Git secret scanner that analyzes both local file systems and Git commit history to prevent credential leaks. The tool distinguishes itself through a decoding pipeline that transforms base64 and hex strings into plaintext to find obfuscated secrets. It further reduces false positives using proximity-based validation and fingerprint-based suppression to filter out known or baseline findings. The system covers a broad range of detec
Go
View on GitHub27,739
blacklanternsecurity/bbot
blacklanternsecurity/bbot
9,929View on GitHub
This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte
Python
View on GitHub9,929
edoardottt/cariddi
edoardottt/cariddi
3,427View on GitHub
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Go
View on GitHub3,427
awslabs/git-secrets
awslabs/git-secrets
13,177View on GitHub
Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for
Shell
View on GitHub13,177

See all 30 alternatives to Gitrob

Frequently asked questions

What does michenriksen/gitrob do?

Star history

Open-source alternatives to Gitrob

Similar open-source projects, ranked by how many features they share with Gitrob.

zricethezav/gitleaks
zricethezav/gitleaks
27,739View on GitHub
Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API keys, and authentication tokens. It functions as a Git secret scanner that analyzes both local file systems and Git commit history to prevent credential leaks. The tool distinguishes itself through a decoding pipeline that transforms base64 and hex strings into plaintext to find obfuscated secrets. It further reduces false positives using proximity-based validation and fingerprint-based suppression to filter out known or baseline findings. The system covers a broad range of detec
Go
View on GitHub27,739
blacklanternsecurity/bbot
blacklanternsecurity/bbot
9,929View on GitHub
This project is an open-source intelligence reconnaissance framework and recursive attack surface mapper. It functions as a containerized security scanner designed to map public-facing infrastructure, perform subdomain enumeration, and automate the gathering of open-source intelligence. The system employs a recursive discovery engine to iteratively explore target infrastructure, utilizing a plugin-based module architecture to extend scanning capabilities. It integrates third-party APIs for data enrichment and applies YARA rules across discovered assets to identify specific vulnerability patte
Python
View on GitHub9,929
edoardottt/cariddi
edoardottt/cariddi
3,427View on GitHub
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Go
View on GitHub3,427
awslabs/git-secrets
awslabs/git-secrets
13,177View on GitHub
Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for
Shell
View on GitHub13,177

See all 30 alternatives to Gitrob