Recon : git all secrets : Github

ALL VIDOES OF BUG BOUNTY FORUM TOOLS DEDICATED TO ALL BUG BOUNTY HUNTERS
=========================================================================

TOPIC : Reconnaissance Github (Find hidden gems inside repositories)
==================================================================

TOOL : git-all-secrets it find all file related to bugcrowd on Github
======================================================================================

SUMMARY : git-all-secrets tools use for Clone multiple public/private github repositories of a user that belongs to an organization and scan them and Clone and scan Github Enterprise repositories and gists as well..

Scanning is done by multiple open source tools such as:

- truffleHog - scans commits for high entropy strings and user provided regular expressions,
- repo-supervisor - scans for high entropy strings in .js and .json files

...........................................................

HOW TO USE :
======================
- Want to scan :
- sudo docker run -it abhartiya/tools_gitallsecrets -token= -org=

- Want to run truffleHog with the default regex AND the high entropy settings
- sudo docker run -it abhartiya/tools_gitallsecrets -token= -org= -toolName=repo-supervisor


find hidden gems inside repositories like API keys and many more

you can get more info when you test in real time on bounty sites


THANKS YOU : HackerOne / BugCrowd
THANKS YOU FOUNDER OF git-all-secrets
=============================================================