2. null Ahmedabad Meet 18 April 2021 Monthly Meet

null Ahmedabad Meet 18 April 2021 Monthly Meet

Event Page: https://null.community/events/785-ahmedabad-monthly-meet

Event Date: April 18, 2021

Presentation

The slides can be viewed here.

Resources

• Some Amazing GitHub Dorks: https://github.com/techgaun/github-dorks
• Keywords to search for: https://github.com/random-robbie/keywords/blob/master/keywords.txt
• Amazing Guide to go through: https://securitytrails.com/blog/github-dorks
• GitHub Secrets Awareness: https://www.facebook.com/askbuddie/photos/a.342347749650563/742592126292788/
• Removing sensitive data from a repository: https://docs.github.com/en/free-pro-team@latest/github/authenticating-to-github/removing-sensitive-data-from-a-repository

Automated GitHub Recon

• Wraith: https://github.com/N0MoreSecr3ts/wraith
• GitRob: https://github.com/michenriksen/gitrob
• TruffleHog: https://github.com/dxa4481/truffleHog
• Git-Secrets: https://github.com/awslabs/git-secrets

Sample Target

HighlySecureOrganization/SuperSecureWebApp: https://github.com/HighlySecureOrganization/SuperSecureWebApp