DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more. What …
RepoReaper – An Automated Tool Crafted To Meticulously Scan And Identify Exposed .Git Repositories Within Specified Domains And Their Subdomains
RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and …
Argus – A Framework for Staged Static Taint Analysis of GitHub Workflows and Actions
This repo contains the code for our USENIX Security ’23 paper “ARGUS: A Framework for Staged Static Taint Analysis of …
Leaktopus – Keep Your Source Code Under Control
Keep your source code under control. Key Features Plug&Play – one line installation with Docker. Scan various sources containing a …
Gitbleed_Tools – For Extracting Data From Mirrorred Git Repositories
This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. …
Horusec – An Open Source Tool That Improves Identification Of Vulnerabilities In Your Project With Just One Command
Horusec is an open source tool that performs static code analysis to identify security flaws during the development process. Currently, …
Gitjacker – Leak Git Repositories From Misconfigured Websites
Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will …
RepoPeek – A Python Script To Get Details About A Repository Without Cloning It
RepoPeek is a Python script to get details about a repository without cloning it. All the information are retrieved using …