GitRecon is a lightweight and portable github reconnaissance tool, it searches for sensitive information like Secret Keys, Private Keys, AD credentials etc. commited/pushed to the Github public repositories.
It accepts Target Company Domain, Github Access Token and Prefilled Sensitive Info from dropdown box but it can also conduct repository scan optionally by accepting "Custom Keyword" making it powerfull tool having wider search coverage. The output contains the Repository path, URL and highlighted search keywords.
It can be easily deployable with minimal dependency i.e webserver like Python-SimpleHTTPServer.
Follow the below steps to deploy the GitRecon:
- Clone the GitRecon repository.
- Place the repository's files in the webserver.
- Open the index.html to access the tool.
Search results can be exported in CSV file, downloaded with Company Domain & search keyword mentioned in report's file name for future references.
