# Golddigger | Search Files For Gold

**URL:** <https://onehack.st/t/golddigger-search-files-for-gold/250951>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [July 4, 2023, 9:51pm UTC](https://onehack.st/t/golddigger-search-files-for-gold/250951 "2023-07-04T21:51:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Astrid](https://onehack.st/user_avatar/onehack.st/astrid/32/174869_2.png) [@Astrid](https://onehack.st/u/Astrid)\
**Post date:** [July 4, 2023, 9:51pm UTC](https://onehack.st/t/golddigger-search-files-for-gold/250951/1 "2023-07-04T21:51:11Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/b/0/b0cca4d28dd8349ba4726fe5f4ebf0cd27546e74.png)

**Gold Digger**

**Search files for gold**  
Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test.

**Installation**  
Gold Digger requires Python3.

```auto
virtualenv -p python3 .
source bin/activate
python dig.py --help

```

**Usage**

```auto
usage: dig.py [-h] [-e EXCLUDE] [-g GOLD] -d DIRECTORY [-r RECURSIVE] [-l LOG]

optional arguments:
  -h, --help show this help message and exit
  -e EXCLUDE, --exclude EXCLUDE
                        JSON file containing extension exclusions
  -g GOLD, --gold GOLD JSON file containing the gold to search for
  -d DIRECTORY, --directory DIRECTORY
                        Directory to search for gold
  -r RECURSIVE, --recursive RECURSIVE
                        Search directory recursively?
  -l LOG, --log LOG Log file to save output

```

**Example Usage**  
Gold Digger will recursively go through all folders and files in search of content matching items listed in the gold.json file. Additionally, you can leverage an exclusion file called exclusions.json for skipping files matching specific extensions. Provide the root folder as the --directory flag.

An example structure could be:

```auto
~/Engagements/CustomerName/data/randomfiles/
~/Engagements/CustomerName/data/randomfiles2/
~/Engagements/CustomerName/data/code/

```

You would provide the following command to parse all 3 account reports:

```auto
python dig.py --gold gold.json --exclude exclusions.json --directory ~/Engagements/CustomerName/data/ --log Customer_2022-123_gold.log

```

**Results**  
The tool will create a log file containg the scanning results. Due to the nature of using regular expressions, there may be numerous false positives. Despite this, the tool has been proven to increase productivity when processing thousands of files.

**Shout-outs**  
Shout out to @d1vious for releasing git-wild-hunt [https://github.com/d1vious/git-wild-hunt](https://github.com/d1vious/git-wild-hunt)! Most of the regex in GoldDigger was used from this amazing project.

## GitHub:

> **[GitHub - ustayready/golddigger](https://github.com/ustayready/golddigger)**
>
> Contribute to ustayready/golddigger development by creating an account on GitHub.