Navjeet zenosxx

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

	import requests,re,os,schedule,time,subprocess
	from bs4 import BeautifulSoup
	from urllib.parse import urlparse
	from sendgrid import SendGridAPIClient
	from sendgrid.helpers.mail import Mail


	url=str(input("Enter domain:\n"))

	import requests,re,os,schedule,time,subprocess
	from bs4 import BeautifulSoup
	from urllib.parse import urlparse
	from sendgrid import SendGridAPIClient
	from sendgrid.helpers.mail import Mail


	url=str(input("Enter domain:\n"))

	#!/usr/bin/env python3
	"""
	Script used to pull down the current video descriptions from ippsec's youtube channel.
	The raw output still has a few HTML tags that need to be manually removed and there
	also seem to be multiple duplicates of videos that have been removed in the output
	saved as ippsec-details.txt
	"""
	import re
	import sys

	#!/bin/bash

	echo "Recon $1"

	domain=$1
	path="~/Desktop/Asset-note/"
	folder=recon-$(date +"%Y-%m-%d")

	sub_path=$path/$domain/$folder/subdomain
	filemon_path=$path/$domain/Filemonitor

	import requests
	from bs4 import BeautifulSoup
	#id extractor
	url = input("Url: ")
	data = requests.get(url)
	html = BeautifulSoup(data.text,'html.parser')
	data = [""]

	# Ways to execute a shell script in Ruby
	# Example Script - Joseph Pecoraro

	cmd = "echo 'hi'" # Sample string that can be used

	# 1. Kernel#` - commonly called backticks - `cmd`
	# This is like many other languages, including bash, PHP, and Perl
	# Returns the result of the shell command
	# Docs: http://ruby-doc.org/core/classes/Kernel.html#M001111