一个用于在GitHub荒野中搜寻凭证的工具，又名 git*hunt
📺 演示
virtualenv, python3git clone https://github.com/d1vious/git-wild-hunt && cd git-wild-hunt 克隆项目并进入项目目录pip install virtualenv && virtualenv -p python3 venv && source venv/bin/activate && pip install -r requirements.txt 创建虚拟环境并安装依赖继续 配置 GitHub API 密钥
git-wild-hunt.conf确保你设置了 GitHub token。如果需要为你的账户创建一个，请按照这些说明操作。
[global]
github_token = ''
# GitHub token for searching
output = results.json
# stores matches in JSON here
log_path = git-wild-hunt.log
# Sets the log_path for the logging file
log_level = INFO
# Sets the log level for the logging
# Possible values: INFO, ERROR
regexes = regexes.json
# regexes to check the git wild hunt search against
-s 标志接受任何 GitHub 高级搜索 查询，下面是一些示例
python git-wild-hunt.py -s "extension:json filename:creds language:JSON"
python git-wild-hunt.py -s "path:.aws/ filename:credentials"
python git-wild-hunt.py -s "extension:json path:.azure filename:accessTokens language:JSON"
python git-wild-hunt.py -s "path:.gsutil filename:credstore2"
python git-wild-hunt.py -s "path:.kube filename:config"
python git-wild-hunt.py -s "extension:xml filename:credentials.xml language:XML"
python git-wild-hunt.py -s "extension:yml path:.circleci filename:config language:YAML"
python git-wild-hunt.py -s "extension:yml filename:credentials.yml language:YAML"
usage: git-wild-hunt.py [-h] -s SEARCH [-c CONFIG] [-v]
optional arguments:
-h, --help show this help message and exit
-s SEARCH, --search SEARCH
search to execute
-c CONFIG, --config CONFIG
config file path
-v, --version shows current git-wild-hunt version
regexes.json此文件包含所有用于针对搜索返回的原始内容进行匹配的正则表达式。欢迎添加/修改并包含与你试图查找的凭证相匹配的任何特定表达式。该文件从 truffleHog 慷慨借用而来。
当前通过正则验证的凭证：
编写此工具的灵感来自 shhgit 项目