techgaun/github-dorks
Github Dorks
This project is a GitHub secret scanner and dorking tool designed to identify leaked credentials and private keys within repositories. It functions as an API reconnaissance utility that uses curated search queries and automated dorks to locate sensitive data across public and enterprise GitHub instances.
The tool enables security vulnerability research and enterprise auditing by targeting both public cloud instances and private enterprise installations via configurable base URLs. It utilizes token-based authentication to access private repository content and bypass API rate limits.
The system orchestrates parametric searches to automate leak detection and provides data export capabilities to save discovered findings into CSV files for offline analysis and reporting.
Features
- Credential Leak Detection - Systematically finds leaked credentials across multiple GitHub accounts using programmed search terms.
- GitHub Dorking Techniques - Uses advanced search queries and dorks to find exposed secrets and sensitive code in GitHub repositories.
- Reconnaissance and Dorking - Provides automated advanced search queries and dorks to discover sensitive data on GitHub.
- GitHub Reconnaissance Tools - Targets public and enterprise GitHub instances to identify exposed secrets using API authentication.
- Repository Content Scanning - Interfaces with the GitHub API to programmatically search codebase contents and organization metadata for leaked secrets.
- Git Secret Scanners - Detects hardcoded credentials and private keys within GitHub repositories using curated search queries.
- Automated Secret Discovery - Scans repositories and organization accounts using curated search queries to locate leaked credentials.
- Secret Pattern Matching - Uses a library of predefined regular expression patterns to identify leaked credentials and sensitive data.
- Parametric Secret Discovery - Combines user targets and curated query lists to automate the discovery of exposed secrets.
- Enterprise Instance Connectors - Provides specialized connectivity to self-hosted GitHub Enterprise server instances for internal secret scanning.
- GitHub Configuration Audits - Scans private enterprise installations to find exposed sensitive data within internal organization repositories.
- Private Repository Access - Uses access tokens to authenticate and retrieve data from non-public GitHub repositories.
- Vulnerability Research - Locates exposed secrets in public repositories to investigate and document potential security breaches.
- Token-Based Authentication - Uses personal access tokens to authenticate API requests and bypass rate limits.
- Sensitive Data Scanners - Automatically detects leaked credentials and sensitive data in source code for exfiltration into analysis files.
- Open Source Intelligence - CLI tool for finding sensitive information leaks in repositories.
- Open Source Intelligence - Scanner for identifying sensitive information leaks in public repositories.
- OSINT and Reconnaissance - CLI tool for scanning GitHub for sensitive information leaks.
- Search Engine Queries - Queries for finding sensitive information exposed in public repositories.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
