# Git Wild Hunt | A Tool To Hunt For Credentials In Github Wild AKA Git\*Hunt

**URL:** <https://onehack.st/t/git-wild-hunt-a-tool-to-hunt-for-credentials-in-github-wild-aka-git-hunt/177003>\
**Category:** Tools & Scripts\
**Tags:** piracy, ai\
**Created:** [March 30, 2021, 7:05am UTC](https://onehack.st/t/git-wild-hunt-a-tool-to-hunt-for-credentials-in-github-wild-aka-git-hunt/177003 "2021-03-30T07:05:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [March 30, 2021, 7:05am UTC](https://onehack.st/t/git-wild-hunt-a-tool-to-hunt-for-credentials-in-github-wild-aka-git-hunt/177003/1 "2021-03-30T07:05:50Z")

</div>

[![](https://raw.githubusercontent.com/josehelps/git-wild-hunt/master/static/wildhunt.jpg) ](https://raw.githubusercontent.com/josehelps/git-wild-hunt/master/static/wildhunt.jpg)

A tool to hunt for credentials in the GitHub wild AKA git\*hunt

**Getting started**

1. [Install](https://github.com/d1vious/git-wild-hunt#installation) the tool
2. [Configure](https://github.com/d1vious/git-wild-hunt#configuration) your GitHub token
3. [Search](https://github.com/d1vious/git-wild-hunt#github-search-examples) for credentials
4. See results `cat results.json | jq`

[https://github.com/d1vious/git-wild-hunt/raw/master/static/demo.gif](https://github.com/d1vious/git-wild-hunt/raw/master/static/demo.gif)

**Installation**

- requirements: `virtualenv, python3`

1. `git clone https://github.com/d1vious/git-wild-hunt && cd git-wild-hunt` clone project and cd into the project dir
2. `pip install virtualenv && virtualenv -p python3 venv && source venv/bin/activate && pip install -r requirements.txt` create virtualenv and install requirements

Continue to [configuring](https://github.com/d1vious/git-wild-hunt#configuration) a GitHub API key

**Configuration [`git-wild-hunt.conf`](https://github.com/d1vious/git-wild-hunt/blob/master/git-wild-hunt.conf)**

Make sure you set a GitHub token if you need to create one for your account follow [these](https://help.github.com/en/github/authenticating-to-github/creating-a-personal-access-token-for-the-command-line) instructions.

```auto
[global]github_token = ''# GitHub token for searchingoutput = results.json# stores matches in JSON herelog_path = git-wild-hunt.log# Sets the log_path for the logging filelog_level = INFO# Sets the log level for the logging# Possible values: INFO, ERRORregexes = regexes.json# regexes to check the git wild hunt search against

```

**GitHub search examples**

the **-s** flag accepts any GitHub [advance search](https://github.com/search/advanced) query, see some examples below

**Find GCP JWT token files**

`python git-wild-hunt.py -s "extension:json filename:creds language:JSON"`

**Find AWS API secrets**

`python git-wild-hunt.py -s "path:.aws/ filename:credentials"`

**Find Azure JWT Token**

`python git-wild-hunt.py -s "extension:json path:.azure filename:accessTokens language:JSON"`

**Find GSUtils configs**

`python git-wild-hunt.py -s "path:.gsutil filename:credstore2"`

**Find Kubernetes config files**

`python git-wild-hunt.py -s "path:.kube filename:config"`

**Searching for Jenkins credentials.xml file**

`python git-wild-hunt.py -s "extension:xml filename:credentials.xml language:XML"`

**Find secrets in .circleci**

`python git-wild-hunt.py -s "extension:yml path:.circleci filename:config language:YAML"`

**Generic credentials.yml search**

`python git-wild-hunt.py -s "extension:yml filename:credentials.yml language:YAML"`

**Usage**

```auto
usage: git-wild-hunt.py [-h] -s SEARCH [-c CONFIG] [-v]optional arguments: -h, --help show this help message and exit -s SEARCH, --search SEARCH search to execute -c CONFIG, --config CONFIG config file path -v, --version shows current git-wild-hunt version

```

**What checks get run [`regexes.json`](https://github.com/d1vious/git-wild-hunt/blob/master/regexes.json)**

This file contains all the regexes that will be used to check against the raw content filed returned for a [search](https://github.com/d1vious/git-wild-hunt#github-search-examples). Feel free to add/modify and include any specific ones that match the credential you are trying to find. This was graciously borrowed from [truffleHog](https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json)

Currently verified credentials via regex:

- AWS API Key
- Amazon AWS Access Key ID
- Amazon MWS Auth Token
- Facebook Access Token
- Facebook OAuth
- Generic API Key
- Generic Secret
- GitHub
- Google (GCP) Service-account
- Google API Key
- Google Cloud Platform API Key
- Google Cloud Platform OAuth
- Google Drive API Key
- Google Drive OAuth
- Google Gmail API Key
- Google Gmail OAuth
- Google OAuth Access Token
- Google YouTube API Key
- Google YouTube OAuth
- Heroku API Key
- MailChimp API Key
- Mailgun API Key
- PGP private key block
- Password in URL
- PayPal Braintree Access Token
- Picatic API Key
- RSA private key
- SSH (DSA) private key
- SSH (EC) private key
- Slack Token
- Slack Webhook
- Square Access Token
- Square OAuth Secret
- Stripe API Key
- Stripe Restricted API Key
- Twilio API Key
- Twitter Access Token
- Twitter OAuth

**Author**

- Jose Hernandez [@d1vious](https://twitter.com/d1vious)

**Contributor**

- Rod Soto [@rodsoto](https://twitter.com/rodsoto)

**Credits & References**

Inspiration to write this tool came from the [shhgit](https://github.com/eth0izzle/shhgit/) project

**TO DO**

- better error handling

## GitHub:

[https://github.com/d1vious/git-wild-hunt](https://github.com/d1vious/git-wild-hunt)