Download
gitGraber is a Python-based security tool designed to monitor GitHub in real time to detect exposed sensitive information in publicly indexed repositories. It scans recently indexed files on GitHub and searches for patterns that may indicate leaked credentials, API keys, or other confidential data used by popular online services. Instead of analyzing the full history of repositories, the tool focuses on newly indexed content, allowing security researchers and bug bounty hunters to quickly identify fresh leaks as they appear. gitGraber uses carefully crafted regular expressions to detect tokens and secrets associated with platforms such as AWS, Google, PayPal, Twitter, Stripe, and many others. When a potential leak is discovered, the tool can notify users through messaging platforms or display results directly in the command line. This approach helps organizations and security professionals monitor potential exposures.
Features
- Real-time monitoring of GitHub to detect newly exposed sensitive data
- Regex-based detection for various tokens, API keys, and secret credentials
- Supports alerts through Slack, Discord, Telegram, or command-line output
- Keyword and query-based GitHub searches for targeted monitoring
- Option to generate dynamic wordlists from discovered filenames
- Monitoring mode that can run automatically using scheduled tasks or cron jobs
Project Samples
