Gitrob

Tool and Usage

Gitrob is a security tool to find sensitive information on GitHub. During the audit, it may detect passwords, API keys, or other secrets.

Why this tool?

Especially open source developers may share their code in a public repository like GitHub. This is a great way to collaborate between the developer(s) and the community. The risk of sharing code is that sensitive data is part of the repository and uploaded by accident. GitRob helps to detect this kind of accidental leaks.

How it works

Gitrob starts with collectings all public repositories of the organization. Then it moves on to the discovery of organization members and pulls in their public repositories. This way it can compile a list of repositories that are related, or have a close relation to the organization.

Usage and audience

Gitrob is commonly used for information gathering, penetration test, or security assessment. Target users for this tool are pentesters, security professionals, and system administrators.