Download
GitGot is an open source security tool designed to help users quickly search large amounts of public data on GitHub to identify potentially exposed secrets. It operates as a semi-automated, feedback-driven system that combines automated search capabilities with human guidance to refine results during investigation. GitGot leverages the GitHub Search API to perform queries across repositories, files, and gists, allowing security researchers and penetration testers to discover sensitive information that may have been unintentionally exposed in public code. During a search session, users review results and provide feedback that allows GitGot to filter out irrelevant or repetitive findings. This feedback is used to build blacklists that eliminate results based on repository names, file names, user names, or fuzzy matches of file content. The approach helps reduce noise while guiding the search process toward more relevant results.
Features
- Searches public GitHub repositories and gists for sensitive information
- Feedback-driven workflow that allows users to prune irrelevant results
- Blacklisting system for filtering repositories, users, filenames, or content
- Fuzzy hashing support to detect similar files containing related data
- Ability to save and reuse session states and blacklist data
- Supports custom regex queries to search for tokens, secrets, or keywords
Project Samples
