Gitrob – Reconnaissance Tool for GitHub Organizations

Gitrob is a command line device which will help organizations and security professionals discover delicate data lingering in publicly accessible recordsdata on GitHub.

.1 PostgreSQL person and database
You must arrange a person and a database in PostgreSQL for Gitrob. Execute the next instructions in a terminal:

sudo su postgres # Not needed on Mac OS X createuser -s gitrob –pwprompt createdb -O gitrob gitrob

You now have a brand new PostgreSQL person with the title

gitrob

and with the password you typed into the immediate. You additionally created a database with the title

gitrob

which is owned by the

gitrob

person.

four. GitHub entry tokens
Gitrob works by querying the GitHub API for fascinating data, so that you want at the least one entry token to stand up and operating. The easiest method is to create a Personal Access Token. Press the

Generate new token

button and provides the token an outline. If you plan on utilizing Gitrob in opposition to organizations you are not a member of you need not give the token any scopes, as we are going to solely be accessing public information. If you plan to run Gitrob in opposition to your individual group, you may must verify the

learn:org

scope to get full protection.
If you intend on utilizing Gitrob extensively or in opposition to a really giant group, it may be essential to have a number of entry tokens to keep away from operating into price limiting. These entry tokens should be from totally different person accounts.

5. Gitrob
With all of the earlier steps accomplished, now you can lastly set up Gitrob itself with the next command in a terminal:

gem set up gitrob

This will set up the Gitrob Ruby gem together with all its dependencies. Congratulations!

6. Configuring Gitrob
Gitrob must know methods to discuss to the PostgreSQL database in addition to what entry token to make use of to entry the GitHub API. Gitrob comes with a handy configuration wizard which could be invoked with the next command in a terminal:

gitrob configure

The configuration wizard will ask you for the data wanted to arrange Gitrob. All the data is saved to

~/.gitrobrc

and sure, Gitrob will likely be trying for this file too, so be careful!

Usage

Analyzing organizations and customers
Analyzing organizations and customers is the principle function of Gitrob. The

analyze

command accepts an arbitrary quantity of group and person logins, which will likely be bundled into an assessment:

gitrob analyze acme,johndoe,janedoe

Mixing organizations and customers is handy if you realize sure person is a part of a company however they don’t have their membership public.
When the assessment is completed, the

analyze

command will routinely begin up the online server to current the outcomes. This could be prevented by including the

–no-server

choice to the command.
See

gitrob assist analyze

for extra choices.

Running Gitrob in opposition to customized GitHub Enterprise installations
Gitrob can analyze organizations and customers on customized GitHub Enterprise installations as an alternative of the official GitHub site. The

analyze

command takes a number of choices to manage this:

gitrob analyze johndoe –site=https://github.acme.com –endpoint=https://github.acme.com/api/v3 –access-tokens=token1,token2

See

gitrob assist analyze

for extra choices.

Starting the Gitrob net server
The Gitrob net server could be began with the

server

command:

gitrob server

By default, the server will hear on localhost:9393. This can, in fact, all be managed:

gitrob server –bind-deal with=zero.zero.zero.zero –port=8000

See for

gitrob assist server

extra choices.

Adding customized signatures
If you need to look for recordsdata which are particular to your organisation or initiatives, it’s straightforward so as to add customized signatures.
When Gitrob begins it appears to be like for a file at

~/.gitrobsignatures

which it expects to be a JSON doc with signatures that comply with the identical construction as the principle signatures.json file. Here is an instance:

[ ]

This signature instructs Gitrob to flag recordsdata the place the filename precisely matches

otr.private_key

. The caption and outline are used within the net interface when displaying the findings.

Signature keys

• half

  : Can be one in all:

  • path

    : The full file path

  • filename

    : Only the filename

  • extension

    : Only the file extension

• kind

  : Can be one in all:

  • match

    : Simple match of half and sample

  • regex

    : Regular expression matching of half and sample

• sample

  : The worth or common expression to match with

• caption

  : A brief description of the discovering

• description

  : More detailed description if wanted (set to

  null

  if not).

Have a take a look at the principle signatures.json file for extra examples of signatures.