Pepito

Searches through git repositories for specific strings, digging deep into commit history and branches. This is effective at finding secrets accidentally committed. This project is highly inspired from TruffleHog which does exactly the same thing on high entropy strings.

Usage

pepito https://github.com/dxa4481/truffleHog.git --search 'password'

or

python pepito.py file:///user/dxa4481/codeprojects/truffleHog/ --search 'password'

Install

git clone https://github.com/PaulSec/pepito
cd pepito && python pepito.py -h 

How it works

This module will go through the entire commit history of each branch, and check each diff from each commit. There, it will go through all the changes and check for the existence of the string you're looking for. If present, it will print the content to the screen.

License

This has been released under MIT License. Shout out to @PaulWebSec for any questions.