¶ GitLeaks
LICENSE
Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for finding secrets, past or present, in your code.
Introduction Video
¶ Features:
¶ Flag:
FROM golang:1.12.5-alpine3.9
WORKDIR /wd
RUN apk add --no-cache git bash
RUN git clone --depth 1 https://github.com/cqr-cryeye-forks/gitleaks \
&& cd gitleaks \
&& go build \
&& ln -s /wd/gitleaks/gitleaks /usr/local/go/bin/gitleaks
ENTRYPOINT ["gitleaks"]
¶ Used fact:
AWS Key leaks detected
Facebook leaks detected
Github leaks detected
High-level leaks detected
Medium-level leaks detected
PGP data leaks detected
Public Key Cryptography Standards (PKCS) leaks detected
RSA leaks detected
Slack leaks detected
SSH leaks detected
Twitter leaks detected
¶ Screenshot of results:
¶ Category:
Single URL (Manual)/Git Analysis
¶ Audit Tags:
Leaks, Github, Enumerate, Crawling, Old, Single Page
¶ DISCLAIMER:
This program is used for educational and ethical purposes only. I take no responsibility for any damages caused from using this program. By downloading and using this software, you agree that you take full responsibility for any damages and liability.