GitHub Org Enum

Update

Trufflehog v3.0 now supports this feature, so this project will no longer be maintained, see: https://github.com/trufflesecurity/trufflehog#scanning-an-organization

Installation

pip3 install -r requirements.txt

Usage:

Purpose of this repo is to provide testers with the ability to enumerate an entire github organization and, optionally, it's members for secrets in source.

usage: github_org_enum.py [-h] [--access-token ACCESS_TOKEN] [--include-members] [--slack-webhook SLACK_WEBHOOK] [--threads THREADS] organization

Enumerate an entire github organization and, optionally, it's members for secrets in source.

positional arguments:
  organization          The organization to enumerate.

optional arguments:
  -h, --help            show this help message and exit
  --access-token ACCESS_TOKEN
                        A github access token to use (improved rate limiting).
  --include-members     Enumerate repositories of organization members.
  --slack-webhook SLACK_WEBHOOK
                        A slack webhook token for optionally emitting parsed results to slack.
  --threads THREADS     How many threads you want to run the application with (default 5).