hisxo / gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
GNU General Public License v3.0
2k stars 328 forks source link

No url results ! #6

Closed arkxdns closed 4 years ago

arkxdns commented 4 years ago

Hello,

I put two tokens in config file.

I'v got no results from "yahoo" keyword (or anything else) like on your command line example :

python3 gitGraber.py -k wordlists/keywords.txt -q "yahoo" -s Only this output

[+] Github query : https://api.github.com/search/code?q=yahoo access_key&sort=indexed&o=desc
[i] Status code : 200

No any kind of urls.

Any ideas ?

hisxo commented 4 years ago

Hello,

How long have you used the tool? How long did you wait? All keywords have been executed and no results? How many Github tokens are you using?

Regards, Adrien

ghost commented 4 years ago

Great tool...

I have used the tool, yet to review the code but my simple logic is that it returns output if the query ie yahoo and a regrex of keywords ie AWS_key is found...

hisxo commented 4 years ago

Yes. On CLI you can see the URL request sended to GitHub and response statut code. If the conditions are met, that is :

You will see directly on the CLI (and on Slack with -s) the URL of the repo, the sensitive key found and the date of the commit.

Please @arkxdns open an issue if you find an issue which block to run gitGraber.

I close the discussion.

Regards, Adrien