Jorge Barata jorgebg

GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.

Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.

$ python githubcloner.py --org organization -o /tmp/output

Kinesis Freestyle (Terrible key switches. Mushy and un-lovable)
Kinesis Freestyle Edge (Traditional layout with too many keys, mech switches, proably too big to be tented easily/properly)
Matias Ergo Pro (Looks pretty great. Have not tried.)
ErgoDox Kit (Currently, my everyday keyboard. Can buy pre-assembled on eBay.)
ErgoDox EZ (Prolly the best option for most people.)

	# Put this function to your .bashrc file.
	# Usage: mv oldfilename
	# If you call mv without the second parameter it will prompt you to edit the filename on command line.
	# Original mv is called when it's called with more than one argument.
	# It's useful when you want to change just a few letters in a long name.
	#
	# Also see:
	# - imv from renameutils
	# - Ctrl-W Ctrl-Y Ctrl-Y (cut last word, paste, paste)

	# place in /etc/systemd/system/whatever.service and install with `systemd install whatever.service`
	# note that if you change this file you will need to run `systemctl daemon-reload` to get systemd to notice
	[Unit]
	Description=A good service description

	# After networking because we need that
	After=network.target

	[Service]

	# This allows you to route all email from a Linux WHM server using exim through the Mailgun service
	# or other email service. This is very powerful because email from a server is typically untrusted
	# and hard to get good email delivery.

	# This is not tested on servers that host multiple domains, because Mailgun's service is specific
	# to one domain. If you figure out multiple domains with Mailgun, write it in the comments or fork this!
	# Log in to WHM, go to Exim Configuration Manager -> Advanced Editor tab then edit the following.

	### NOTE!
	# If setting hosts_require_auth and hosts_require_tls = smtp.mailgun.org,

	/*
	You know how Twitter never loads all the followers but you have to keep scrolling? Well,
	this script automatically keeps scrolling to the end of the follower list.
	30-05-2017
	(c) 2017 - Loran Kloeze - loran@ralon.nl

	Usage
	- Go to https://www.twitter.com/twitter_handle/followers (change twitter_handle in i.e. realdonaldtrump)
	- Open up the console (F12) (Firefox users: type 'allow pasting' if you haven't done so yet)
	- Select the contents of this complete file and copy/paste it to the console and hit enter

	"""
	MIT License

	Copyright (c) 2017 Michał Bultrowicz

	Permission is hereby granted, free of charge, to any person obtaining a copy
	of this software and associated documentation files (the "Software"), to deal
	in the Software without restriction, including without limitation the rights
	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	copies of the Software, and to permit persons to whom the Software is

	#!/usr/bin/env python
	from bs4 import BeautifulSoup
	from twilio.rest import TwilioRestClient
	import json
	import os
	import re
	import requests


	url = 'https://postmates.com/los-angeles'

	#!/usr/bin/env python

	from collections import defaultdict
	from pprint import pprint
	import random

	from pulp import *


	def generate_trips(route_names, start_hour, end_hour):

	# UPDATED 17 February 2019
	# Redirect all HTTP traffic to HTTPS
	server {
	listen 80;
	listen [::]:80;
	server_name www.domain.com domain.com;
	return 301 https://$host$request_uri;
	}

	# SSL configuration