Download
Gitrob is an open source reconnaissance tool designed to identify potentially sensitive files that have been committed to public GitHub repositories. It helps security professionals, researchers, and organizations detect accidental data exposure by scanning repositories associated with specific GitHub users or organizations. The tool works by cloning repositories and analyzing their commit history to search for files that match predefined signatures of sensitive data. These signatures are used to flag items such as credentials, private keys, configuration files, and other materials that may expose confidential information. By automatically inspecting repository histories, Gitrob simplifies the process of identifying security risks that might otherwise remain unnoticed in publicly accessible codebases. The results of the scan are presented through a built-in web interface that allows users to browse findings, review flagged files, and analyze potential leaks more efficiently.
Features
- Scans GitHub repositories belonging to users or organizations
- Clones repositories and analyzes commit history for sensitive files
- Uses signature-based detection to identify risky filenames and patterns
- Displays results through a built-in web interface for easier analysis
- Supports configurable commit depth to control how much history is scanned
- Allows saving and loading scan sessions for later review or sharing
Project Samples
