├── lib ├── __init__.py ├── utils │ ├── __init__.py │ ├── banner.py │ └── utils.py ├── gitlab.py ├── check_gitsint_version.py ├── avatar.py ├── hunterio.py ├── Requests.py ├── friends.py ├── organizations.py ├── cli.py ├── names_resembling.py ├── commits.py ├── profile.py ├── user.py └── hunt_mail.py ├── requirements.txt ├── config.json ├── assets ├── logo.jpg ├── gitsint.png └── protection.png ├── gitsint.py ├── main.py ├── .gitignore ├── README.md └── LICENSE /lib/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /lib/utils/__init__.py: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | httpx 2 | bs4 3 | argparse -------------------------------------------------------------------------------- /config.json: -------------------------------------------------------------------------------- 1 | { 2 | "version": "2.2.6" 3 | } 4 | -------------------------------------------------------------------------------- /assets/logo.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/N0rz3/GitSint/HEAD/assets/logo.jpg -------------------------------------------------------------------------------- /assets/gitsint.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/N0rz3/GitSint/HEAD/assets/gitsint.png -------------------------------------------------------------------------------- /assets/protection.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/N0rz3/GitSint/HEAD/assets/protection.png -------------------------------------------------------------------------------- /gitsint.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python3 2 | 3 | __author__ = "N0rz3" 4 | 5 | if __name__ == "__main__": 6 | import os; os.system("title GitSint") 7 | import sys; sys.dont_write_bytecode = True 8 | from lib.utils.banner import banner; print(banner) 9 | from main import check_python_version; check_python_version() 10 | -------------------------------------------------------------------------------- /main.py: -------------------------------------------------------------------------------- 1 | import sys, asyncio 2 | 3 | def check_python_version(): 4 | version = sys.version_info 5 | 6 | if (version < (3, 10)): 7 | print("[-] GitSint only works with Python 3.10+.") 8 | exit("-> Go install the most recent version of python -> https://www.python.org/downloads/") 9 | 10 | else: 11 | from lib.cli import parser; asyncio.run(parser()) -------------------------------------------------------------------------------- /lib/gitlab.py: -------------------------------------------------------------------------------- 1 | from .Requests import Requests 2 | from bs4 import BeautifulSoup 3 | 4 | async def user_test_in_gitlab(user): 5 | url = "https://gitlab.com/{}".format(user) 6 | 7 | r = await Requests(url).get() 8 | 9 | if r.status_code == 200: 10 | soup = BeautifulSoup(r.text, "html.parser") 11 | name = soup.find("h1", class_="gl-heading-1 gl-leading-1 gl-mr-2 gl-my-0!") 12 | 13 | return { 14 | 'name': name.text.strip() 15 | } 16 | 17 | else: 18 | return { 19 | 'name': None 20 | } 21 | -------------------------------------------------------------------------------- /lib/utils/banner.py: -------------------------------------------------------------------------------- 1 | from .utils import Text_Manager 2 | import json 3 | 4 | RED = Text_Manager.RED 5 | PURPLE = Text_Manager.PURPLE 6 | WHITE = Text_Manager.WHITE 7 | 8 | with open('config.json') as file: 9 | version = json.load(file)['version'] 10 | 11 | banner = f"""{RED} 12 | |\__/,| (`\\ 13 | _.|o o |_ ) ) 14 | -(((---(((---------------------- 15 | / _] |_ _/' _/| | \| |_ _| 16 | | [/\ | | | `._`.| | | ' | | | 17 | \__/_| |_| |___/|_|_|\__| |_| {PURPLE}{Text_Manager(text=f"GitSint v{version} 🐙").italic()}{RED} 18 | 19 | {WHITE}BY Norze 20 | GitHub {RED}OSINT{WHITE} tool made with 💖 21 | """ 22 | -------------------------------------------------------------------------------- /lib/check_gitsint_version.py: -------------------------------------------------------------------------------- 1 | from .utils.utils import Text_Manager 2 | from .Requests import Requests 3 | import json 4 | 5 | class Version: 6 | def version(): 7 | with open('config.json', 'r') as json_file: 8 | j = json.load(json_file) 9 | 10 | v = j['version'] 11 | 12 | print(f"[+] Your version is: " + v) 13 | 14 | return v 15 | 16 | async def check_update(): 17 | v = Version.version() 18 | 19 | r = await Requests("https://raw.githubusercontent.com/N0rz3/GitSint/master/config.json").get() 20 | 21 | file = json.load(r) 22 | v_ = file['version'] 23 | 24 | if v != v_: 25 | print(f"\n[-] Your version isn't up to date") 26 | print(f"[~] You are advised to reinstall the tool\n=> https://github.com/N0rz3/GitSint") 27 | 28 | else: 29 | print(f"\n[+] Your version is up to date") 30 | -------------------------------------------------------------------------------- /lib/avatar.py: -------------------------------------------------------------------------------- 1 | from .utils.utils import Text_Manager 2 | from .Requests import Requests 3 | import os 4 | 5 | BLACK = Text_Manager.BLACK 6 | 7 | class Avatar_Scraper: 8 | def __init__(self, name: str) -> None: 9 | self.name = name 10 | 11 | async def scraper(self): 12 | api = f"https://api.github.com/users/{self.name}" 13 | 14 | req = await Requests(url=api).get() 15 | 16 | self.avatar = req.json()['avatar_url'] 17 | 18 | async def downloader(self): 19 | await self.scraper() 20 | 21 | directory = "avatars" 22 | if not os.path.exists(directory): 23 | os.makedirs(directory) 24 | 25 | PATH = os.path.join(directory, f"{self.name}.jpg") 26 | 27 | avatar_response = await Requests(url=self.avatar).get() 28 | 29 | if avatar_response.status_code == 200: 30 | avatar_content = avatar_response.content 31 | 32 | with open(PATH, "wb") as file: 33 | file.write(avatar_content) 34 | PATH = os.path.abspath(PATH) 35 | 36 | print(f"[+] ✍️ Profile picture saved at: {Text_Manager(BLACK + PATH).italic()}") 37 | else: 38 | print(f"[-] Failed to download profile picture. Status Code: {avatar_response.status_code}") 39 | -------------------------------------------------------------------------------- /lib/hunterio.py: -------------------------------------------------------------------------------- 1 | from .Requests import Requests 2 | from .profile import user_infos 3 | 4 | class Hunter: 5 | async def find_domain(user): 6 | infos = await user_infos.profile_scraping(user=user) 7 | company = infos['profile']['company'] 8 | 9 | if company != None: 10 | params = { 11 | 'query': str(company).lower() 12 | } 13 | 14 | r = await Requests("https://hunter.io/v2/domains-suggestion", params=params).get() 15 | 16 | if '"data": []' in r.text: 17 | domain = None 18 | 19 | return { 20 | 'message': f'Company: {company}' 21 | } 22 | 23 | else: 24 | count = 0 25 | datas= r.json()['data'] 26 | 27 | for data in datas: 28 | name = data['name'] 29 | 30 | if str(name).lower() == str(company).lower(): 31 | count += 1 32 | domain = data['domain'] 33 | break 34 | 35 | else: 36 | continue 37 | 38 | if count > 0: 39 | return { 40 | 'message': f'Company: {company} - (🦊 Hunter.io) {company} => {domain}' 41 | } 42 | 43 | else: 44 | return { 45 | 'message': f'Company: {company}' 46 | } 47 | else: 48 | return { 49 | 'message': f'{user} is not connected to any company.' 50 | } 51 | -------------------------------------------------------------------------------- /lib/Requests.py: -------------------------------------------------------------------------------- 1 | import httpx 2 | 3 | class Requests: 4 | def __init__(self, 5 | url: str, 6 | headers=None, 7 | data=None, 8 | params=None, 9 | json=None): 10 | self.url = url 11 | self.head = headers 12 | self.data = data 13 | self.params = params 14 | self.json = json 15 | 16 | async def get(self): 17 | try: 18 | async with httpx.AsyncClient() as client: 19 | requests = await client.get(url=self.url, headers=self.head, params=self.params) 20 | 21 | return requests 22 | 23 | except httpx.HTTPError: 24 | return() 25 | 26 | async def post(self): 27 | try: 28 | async with httpx.AsyncClient() as client: 29 | requests = await client.post(url=self.url, headers=self.head, params=self.params, json=self.json) 30 | 31 | return requests 32 | 33 | except httpx.HTTPError: 34 | return() 35 | 36 | async def put(self): 37 | try: 38 | async with httpx.AsyncClient() as client: 39 | requests = await client.put(url=self.url, headers=self.head, params=self.params, json=self.json) 40 | 41 | return requests 42 | 43 | except httpx.HTTPError: 44 | return() 45 | 46 | async def delete(self): 47 | try: 48 | async with httpx.AsyncClient() as client: 49 | requests = await client.delete(url=self.url, headers=self.head, params=self.params) 50 | 51 | return requests 52 | 53 | except httpx.HTTPError: 54 | return() 55 | -------------------------------------------------------------------------------- /lib/friends.py: -------------------------------------------------------------------------------- 1 | from .Requests import Requests 2 | from .utils.utils import Text_Manager 3 | from bs4 import BeautifulSoup 4 | 5 | RED = Text_Manager.RED 6 | WHITE = Text_Manager.WHITE 7 | 8 | async def extract_usernames(url): 9 | usernames = [] 10 | response = await Requests(url).get() 11 | soup = BeautifulSoup(response.text, "html.parser") 12 | for user in soup.find_all("span", {"class": "Link--primary"}): 13 | usernames.append(user.text.strip()) 14 | return usernames 15 | 16 | async def track(user): 17 | followers_url = f"https://github.com/{user}?tab=followers" 18 | following_url = f"https://github.com/{user}?tab=following" 19 | 20 | followers_usernames = await extract_all_usernames(followers_url) 21 | following_usernames = await extract_all_usernames(following_url) 22 | 23 | common_usernames = list(set(followers_usernames) & set(following_usernames)) 24 | 25 | data = { 26 | 'message': f'Potential friends found ({len(common_usernames) - 1}).', 27 | 'friends': [{'name': username} for username in common_usernames if username.lower() != user.lower()] 28 | } 29 | 30 | return data 31 | 32 | async def extract_all_usernames(url): 33 | usernames = [] 34 | page_num = 1 35 | while True: 36 | page_url = f"{url}&page={page_num}" 37 | extracted_usernames = await extract_usernames(page_url) 38 | if len(extracted_usernames) == 0: 39 | break 40 | usernames.extend(extracted_usernames) 41 | page_num += 1 42 | return usernames 43 | 44 | async def output(user): 45 | Text_Manager(text="[+] Analyzing followers and followings...").Tprint() 46 | friends = await track(user) 47 | 48 | print(f"{RED}{user}{WHITE}") 49 | print(f"└──{friends['message']}") 50 | 51 | for friend in friends['friends']: 52 | if friend['name'] != "": 53 | print(f" ├──{friend['name']}") 54 | -------------------------------------------------------------------------------- /lib/organizations.py: -------------------------------------------------------------------------------- 1 | from .Requests import Requests 2 | from .utils.utils import Text_Manager 3 | 4 | RED = Text_Manager.RED 5 | WHITE = Text_Manager.WHITE 6 | 7 | async def organizations_scraping(org): 8 | api = "https://api.github.com/orgs/{}".format(org) 9 | 10 | r = await Requests(api).get() 11 | 12 | try: 13 | data = { 14 | 'name': r.json()['name'], 15 | 'location': r.json()['location'], 16 | 'url': r.json()['blog'], 17 | 'email': r.json()['email'], 18 | 'verified': r.json()['is_verified'], 19 | 'followers': r.json()['followers'], 20 | 'following': r.json()['following'], 21 | 'creation': r.json()['created_at'].replace("-", "/").replace("T", " ").replace("Z", ""), 22 | 'update': r.json()['updated_at'].replace("-", "/").replace("T", " ").replace("Z", "") 23 | } 24 | 25 | members_api = "https://api.github.com/orgs/{}/public_members".format(org) 26 | 27 | req = await Requests(members_api).get() 28 | 29 | members = req.json() 30 | 31 | member_list = [] 32 | 33 | for member in members: 34 | member_data = { 35 | 'login': member['login'] 36 | } 37 | member_list.append(member_data) 38 | 39 | data['members'] = member_list 40 | 41 | return data 42 | 43 | except KeyError: 44 | exit("[-] Organization provided does not exist.") 45 | 46 | async def print_organization_info(org): 47 | org_data = await organizations_scraping(org=org) 48 | 49 | print(RED + org_data['name'] + WHITE) 50 | print(f"├──URL:", org_data['url']) 51 | print(f"├──Location:", org_data['location']) 52 | print(f"├──Email:", org_data['email']) 53 | print(f"├──Verified:", org_data['verified']) 54 | print(f"├──Followers:", org_data['followers']) 55 | print(f"├──Following:", org_data['following']) 56 | print(f"├──Creation Date:", org_data['creation'] + " 🌐 (UTC)") 57 | print(f"├──Last Update:", org_data['update'] + " 🌐 (UTC)") 58 | print(f"├──Member(s)") 59 | for member in org_data['members']: 60 | print(f" ├──{member['login']}") 61 | -------------------------------------------------------------------------------- /lib/cli.py: -------------------------------------------------------------------------------- 1 | import argparse 2 | from lib.organizations import print_organization_info 3 | from lib.hunt_mail import Hunt, Hunt_lightmod 4 | from lib.friends import output 5 | from lib.user import trackx 6 | from lib.avatar import Avatar_Scraper 7 | from lib.names_resembling import search 8 | from .check_gitsint_version import Version 9 | 10 | async def parser(): 11 | parser = argparse.ArgumentParser() 12 | 13 | parser.add_argument( 14 | '-u', '--username', 15 | nargs='?', 16 | type=str, 17 | default=None, 18 | help='searches all public information by username' 19 | ) 20 | parser.add_argument( 21 | '-o', '--organization', 22 | nargs='?', 23 | type=str, 24 | default=None, 25 | help='searches all public information by organization' 26 | ) 27 | parser.add_argument( 28 | '-e', '--email', 29 | nargs='?', 30 | type=str, 31 | default=None, 32 | help='search for an account by email' 33 | ) 34 | parser.add_argument( 35 | '-f', '--friends', 36 | nargs='?', 37 | type=str, 38 | default=None, 39 | help='search for potential friends by username' 40 | ) 41 | parser.add_argument( 42 | '-l', '--light', 43 | action='store_true', 44 | help="light mode with option '-e'" 45 | ) 46 | parser.add_argument( 47 | '-a', '--avatar', 48 | nargs='?', 49 | type=str, 50 | default=None, 51 | help='download profile picture (avatar) by username' 52 | ) 53 | parser.add_argument( 54 | '-s', '--similar', 55 | nargs='?', 56 | type=str, 57 | default=None, 58 | help='search for similar names by usernamee' 59 | ) 60 | parser.add_argument( 61 | '-v', '--version', 62 | action='store_true', 63 | help="check your version & update(s)" 64 | ) 65 | 66 | args = parser.parse_args() 67 | 68 | if args.username: 69 | user = args.username 70 | await trackx(user) 71 | exit() 72 | 73 | elif args.organization: 74 | org = args.organization 75 | await print_organization_info(org) 76 | exit() 77 | 78 | elif args.light: 79 | if args.email: 80 | email = args.email 81 | await Hunt_lightmod.hunt(email) 82 | exit() 83 | 84 | elif args.email: 85 | email = args.email 86 | instance = Hunt(target=email) 87 | await instance.launch() 88 | exit() 89 | 90 | elif args.friends: 91 | username = args.friends 92 | await output(user=username) 93 | exit() 94 | 95 | elif args.avatar: 96 | u = args.avatar 97 | await Avatar_Scraper(name=u).downloader() 98 | exit() 99 | 100 | elif args.similar: 101 | username = args.similar 102 | await search(user=username) 103 | exit() 104 | 105 | elif args.version: 106 | await Version.check_update() 107 | 108 | else: 109 | exit(1) 110 | -------------------------------------------------------------------------------- /lib/utils/utils.py: -------------------------------------------------------------------------------- 1 | import time 2 | from lib.Requests import * 3 | 4 | class Text_Manager: 5 | def __init__(self, text: str, time: int=3) -> None: 6 | self.text = text 7 | self.time = time 8 | 9 | # all colors used 10 | RED = "\033[31m" 11 | WHITE = "\033[0m" 12 | GREEN = "\033[38;2;0;201;87m" 13 | PURPLE = "\033[38;2;171;130;255m" 14 | BLACK = "\033[38;2;89;89;89m" 15 | 16 | def italic(self): 17 | ITALIC = "\033[3m" + self.text + "\033[0m" 18 | return ITALIC 19 | 20 | def no_letters(self): 21 | digits = "".join(filter(str.isdigit, self.text)) 22 | return digits 23 | 24 | def Tprint(self): 25 | print(self.text, end="", flush=True) 26 | time.sleep(self.time) 27 | print("\r" + " " * (len(self.text) + 1) + "\r", end="", flush=True) 28 | 29 | class Keys: 30 | def __init__(self, target: str) -> None: 31 | self.targ = target 32 | # self.keys_lister: list[str] 33 | 34 | async def key_recoverer(self): 35 | r = await Requests(url=f"https://github.com/{self.targ}.keys").get() 36 | 37 | lines = r.text.strip().split('\n') 38 | 39 | if lines: 40 | ssh_rsa_count = sum("ssh-rsa" in line for line in lines) 41 | return ssh_rsa_count 42 | 43 | else: 44 | pass 45 | 46 | class Credentials: 47 | def __init__(self, username:str, token:str) -> None: 48 | self.u = username 49 | self.t = token 50 | 51 | async def check_token(self): 52 | api_test_valid = "https://api.github.com/octocat" 53 | 54 | headers = { 55 | 'Authorization': f'Bearer {self.t}', 56 | 'X-GitHub-Api-Version': '2022-11-28' 57 | } 58 | 59 | r = await Requests(api_test_valid, headers=headers).get() 60 | status = r.status_code 61 | 62 | status_dict = { 63 | 200: '[+] Token valid.', 64 | 401: '[-] Token not valid please try creating one again.', 65 | 403: '[-] Rate limit try again later...' 66 | } 67 | 68 | for key, value in status_dict.items(): 69 | if key == status: 70 | if key != 200: 71 | exit("\n" + value) 72 | else: 73 | print("\n" + value) 74 | break 75 | 76 | async def check_scopes(self): 77 | await self.check_token() 78 | 79 | api = "https://api.github.com" 80 | 81 | headers = {"Authorization": f"token {self.t}"} 82 | 83 | r = await Requests(url=api, headers=headers).get() 84 | 85 | oauth_scopes = r.headers.get("x-oauth-scopes", "") 86 | oauth_scopes = str(oauth_scopes).split(",") 87 | oauth_scopes = [scope.strip() for scope in oauth_scopes] 88 | 89 | scopes_list = [ 90 | 'repo', 91 | 'delete_repo', 92 | 'user:email' 93 | ] 94 | 95 | print("\n[+] 🎯 The scopes presents => " + ', '.join(oauth_scopes)) 96 | if all(scope in oauth_scopes for scope in scopes_list): 97 | print("[+] 🎯 The scopes (repo, delete_repo, user:email) are present in the token.") 98 | 99 | else: 100 | exit("[-] 🎯 The scopes (repo, delete_repo, user:email) are not present in the token.") 101 | -------------------------------------------------------------------------------- /lib/names_resembling.py: -------------------------------------------------------------------------------- 1 | from .Requests import Requests 2 | from bs4 import BeautifulSoup 3 | 4 | # patch note n°2 5 | # fix {AttributeError: 'NoneType' object has no attribute 'text'} 6 | 7 | async def search(user): 8 | api = "https://api.github.com/search/users?q={}".format(user) 9 | 10 | r = await Requests(api).get() 11 | 12 | if r.status_code == 200: 13 | try: 14 | items = r.json()['items'] 15 | if not items: 16 | print(f"[-] No result for {user}.") 17 | exit() 18 | 19 | else: 20 | count = 0 21 | for item in items: 22 | _login = item['login'] 23 | 24 | if _login != user: 25 | count += 1 26 | 27 | url = f"https://github.com/{_login}" 28 | 29 | _r = await Requests(url).get() 30 | 31 | soup = BeautifulSoup(_r.text, 'html.parser') 32 | name = soup.find("span", {"class": "p-name vcard-fullname d-block overflow-hidden"}) 33 | if name != None: 34 | _name = name.text.strip() 35 | 36 | if _name != '': 37 | print(f"[+] 🙉 {_login} ({_name})") 38 | 39 | else: 40 | print(f"[+] 🙉 {_login}") 41 | else: 42 | print(f"[+] 🙉 {_login}") 43 | 44 | if count == 0: 45 | print(f"[-] No result for {user}.") 46 | 47 | except (KeyError, ValueError): 48 | print("[-] JSON parsing error.") 49 | exit() 50 | 51 | 52 | async def search2(user): 53 | api = "https://api.github.com/search/users?q={}".format(user) 54 | 55 | r = await Requests(api).get() 56 | 57 | if r.status_code == 200: 58 | count = 0 59 | names = [] 60 | 61 | try: 62 | items = r.json().get('items', []) 63 | if not items: 64 | return { 65 | "count": count, 66 | "names": f"No result for {user}." 67 | } 68 | 69 | for item in items: 70 | _login = item['login'] 71 | 72 | if _login != user: 73 | url = f"https://github.com/{_login}" 74 | 75 | _r = await Requests(url).get() 76 | 77 | soup = BeautifulSoup(_r.text, 'html.parser') 78 | name = soup.find("span", {"class": "p-name vcard-fullname d-block overflow-hidden"}) 79 | if name != None: 80 | _name = name.text.strip() 81 | 82 | if _name: 83 | count += 1 84 | names.append(f"{_login} ({_name})") 85 | else: 86 | count += 1 87 | names.append(f"{_login}") 88 | 89 | else: 90 | count += 1 91 | names.append(f"{_login}") 92 | 93 | return { 94 | "count": count, 95 | "names": names 96 | } 97 | 98 | except (KeyError, ValueError): 99 | return { 100 | "count": False, 101 | "names": "JSON parsing error." 102 | } 103 | -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # Byte-compiled / optimized / DLL files 2 | __pycache__/ 3 | *.py[cod] 4 | *$py.class 5 | 6 | # C extensions 7 | *.so 8 | 9 | # Distribution / packaging 10 | .Python 11 | build/ 12 | develop-eggs/ 13 | dist/ 14 | downloads/ 15 | eggs/ 16 | .eggs/ 17 | lib/ 18 | lib64/ 19 | parts/ 20 | sdist/ 21 | var/ 22 | wheels/ 23 | share/python-wheels/ 24 | *.egg-info/ 25 | .installed.cfg 26 | *.egg 27 | MANIFEST 28 | 29 | # PyInstaller 30 | # Usually these files are written by a python script from a template 31 | # before PyInstaller builds the exe, so as to inject date/other infos into it. 32 | *.manifest 33 | *.spec 34 | 35 | # Installer logs 36 | pip-log.txt 37 | pip-delete-this-directory.txt 38 | 39 | # Unit test / coverage reports 40 | htmlcov/ 41 | .tox/ 42 | .nox/ 43 | .coverage 44 | .coverage.* 45 | .cache 46 | nosetests.xml 47 | coverage.xml 48 | *.cover 49 | *.py,cover 50 | .hypothesis/ 51 | .pytest_cache/ 52 | cover/ 53 | 54 | # Translations 55 | *.mo 56 | *.pot 57 | 58 | # Django stuff: 59 | *.log 60 | local_settings.py 61 | db.sqlite3 62 | db.sqlite3-journal 63 | 64 | # Flask stuff: 65 | instance/ 66 | .webassets-cache 67 | 68 | # Scrapy stuff: 69 | .scrapy 70 | 71 | # Sphinx documentation 72 | docs/_build/ 73 | 74 | # PyBuilder 75 | .pybuilder/ 76 | target/ 77 | 78 | # Jupyter Notebook 79 | .ipynb_checkpoints 80 | 81 | # IPython 82 | profile_default/ 83 | ipython_config.py 84 | 85 | # pyenv 86 | # For a library or package, you might want to ignore these files since the code is 87 | # intended to run in multiple environments; otherwise, check them in: 88 | # .python-version 89 | 90 | # pipenv 91 | # According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control. 92 | # However, in case of collaboration, if having platform-specific dependencies or dependencies 93 | # having no cross-platform support, pipenv may install dependencies that don't work, or not 94 | # install all needed dependencies. 95 | #Pipfile.lock 96 | 97 | # poetry 98 | # Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control. 99 | # This is especially recommended for binary packages to ensure reproducibility, and is more 100 | # commonly ignored for libraries. 101 | # https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control 102 | #poetry.lock 103 | 104 | # pdm 105 | # Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control. 106 | #pdm.lock 107 | # pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it 108 | # in version control. 109 | # https://pdm.fming.dev/#use-with-ide 110 | .pdm.toml 111 | 112 | # PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm 113 | __pypackages__/ 114 | 115 | # Celery stuff 116 | celerybeat-schedule 117 | celerybeat.pid 118 | 119 | # SageMath parsed files 120 | *.sage.py 121 | 122 | # Environments 123 | .env 124 | .venv 125 | env/ 126 | venv/ 127 | ENV/ 128 | env.bak/ 129 | venv.bak/ 130 | 131 | # Spyder project settings 132 | .spyderproject 133 | .spyproject 134 | 135 | # Rope project settings 136 | .ropeproject 137 | 138 | # mkdocs documentation 139 | /site 140 | 141 | # mypy 142 | .mypy_cache/ 143 | .dmypy.json 144 | dmypy.json 145 | 146 | # Pyre type checker 147 | .pyre/ 148 | 149 | # pytype static type analyzer 150 | .pytype/ 151 | 152 | # Cython debug symbols 153 | cython_debug/ 154 | 155 | # PyCharm 156 | # JetBrains specific template is maintained in a separate JetBrains.gitignore that can 157 | # be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore 158 | # and can be added to the global gitignore or merged into this file. For a more nuclear 159 | # option (not recommended) you can uncomment the following to ignore the entire idea folder. 160 | #.idea/ 161 | -------------------------------------------------------------------------------- /lib/commits.py: -------------------------------------------------------------------------------- 1 | from .Requests import Requests 2 | 3 | class Email: 4 | async def search(user): 5 | 6 | r = await Requests(f"https://api.github.com/users/{user}/events").get() 7 | events = r.json() 8 | 9 | emails = [] 10 | 11 | for event in events: 12 | if event["type"] == "PushEvent": 13 | commits = event["payload"]["commits"] 14 | for commit in commits: 15 | author = commit["author"] 16 | email = author.get("email") 17 | username = author.get("name") 18 | if email and "@users.noreply.github.com" not in email: 19 | if (email, username) not in emails: 20 | emails.append((email, username)) 21 | 22 | result = { 23 | 'count': len(emails), 24 | 'emails': [] 25 | } 26 | 27 | for email, username in emails: 28 | result['emails'].append({ 29 | 'name': username, 30 | 'email': email 31 | }) 32 | 33 | if result['count'] > 0: 34 | return result 35 | else: 36 | return { 37 | 'message': 'Email(s) not found in commits for the given user' 38 | } 39 | 40 | async def resolv_email(user): 41 | count = 0 42 | email = None 43 | 44 | r = await Requests(f"https://api.github.com/users/{user}/events").get() 45 | events = r.json() 46 | 47 | for event in events: 48 | if event["type"] == "PushEvent": 49 | commits = event["payload"]["commits"] 50 | for commit in commits: 51 | author = commit["author"] 52 | current_email = author.get("email") 53 | username = author.get("name") 54 | if current_email and "@users.noreply.github.com" not in current_email and username == user: 55 | count += 1 56 | email = current_email 57 | 58 | result = { 59 | 'count': count, 60 | 'email': email 61 | } 62 | 63 | if result['count'] > 0: 64 | return result 65 | elif result['count'] == 0: 66 | return { 67 | 'email': 'None@nop' 68 | } 69 | 70 | class Name: 71 | async def history(user): 72 | response = await Requests("https://api.github.com/users/{}/events".format(user)).get() 73 | 74 | pseudos = {} 75 | 76 | data = response.json() 77 | 78 | for commit in data: 79 | if commit["type"] == "PushEvent": 80 | commits = commit["payload"]["commits"] 81 | for c in commits: 82 | pseudo = c["author"]["name"] 83 | if pseudo in pseudos: 84 | pseudos[pseudo] += 1 85 | else: 86 | pseudos[pseudo] = 1 87 | 88 | if len(pseudos) > 0: 89 | gateau = { 90 | 'message': 'History of usernames found in commits' 91 | } 92 | listt = [] 93 | for pseudo, count in pseudos.items(): 94 | d = { 95 | 'name': pseudo, 96 | 'count': count 97 | } 98 | listt.append(d) 99 | gateau['names'] = listt 100 | return gateau 101 | 102 | else: 103 | return { 104 | 'message': f'No names found in commits.', 105 | 'names':{ 106 | 'name': None, 107 | 'count': 0 108 | } 109 | } 110 | -------------------------------------------------------------------------------- /lib/profile.py: -------------------------------------------------------------------------------- 1 | from bs4 import BeautifulSoup 2 | from .Requests import Requests 3 | from .utils.utils import * 4 | 5 | class user_infos: 6 | types = ['fork', 'source', 'archived', 'mirror', 'template'] 7 | list = [] 8 | 9 | BASE_URL = "https://github.com" 10 | 11 | async def scrap_repos(user): 12 | for type in user_infos.types: 13 | response = await Requests(f"{user_infos.BASE_URL}/{user}?tab=repositories&q=&type={type}&language=&sort=").get() 14 | soup = BeautifulSoup(response.content, 'html.parser') 15 | count = soup.find("div", {"class": "user-repo-search-results-summary TableObject-item TableObject-item--primary v-align-top"}).findAll("strong") 16 | count = count[0].text.strip() 17 | 18 | user_infos.list.append(count) 19 | 20 | return { 21 | 'public_repos': int(user_infos.list[1]) + int(user_infos.list[0]) + int(user_infos.list[2]) + int(user_infos.list[3]) + int(user_infos.list[4]), 22 | 'sources': user_infos.list[1], 23 | 'forks': user_infos.list[0], 24 | 'archived': user_infos.list[2], 25 | 'mirrors': user_infos.list[3], 26 | 'templates': user_infos.list[4] 27 | } 28 | 29 | 30 | async def profile_scraping(user): 31 | profile_url = await Requests(user_infos.BASE_URL + f"/{user}").get() 32 | 33 | soup = BeautifulSoup(profile_url.content, 'html.parser') 34 | 35 | name = soup.find("span", {"class": "p-name vcard-fullname d-block overflow-hidden"}) 36 | name = name.text.strip() 37 | if name == "": 38 | name = None 39 | else: 40 | name = name 41 | 42 | api = f"https://api.github.com/users/{user}" 43 | 44 | req = await Requests(api).get() 45 | 46 | json_data = req.json() 47 | 48 | id = json_data['id'] 49 | location = json_data['location'] 50 | company = json_data['company'] 51 | blog = json_data['blog'] 52 | bio = json_data['bio'] 53 | x = json_data['twitter_username'] 54 | gists = json_data['public_gists'] 55 | creation = json_data['created_at'] 56 | update = json_data['updated_at'] 57 | followers = json_data['followers'] 58 | following = json_data['following'] 59 | avatar = json_data['avatar_url'] 60 | 61 | return { 62 | 'profile': { 63 | 'name': name, 64 | 'id': id, 65 | 'location': location, 66 | 'company': company, 67 | 'blog': blog, 68 | 'biography': bio, 69 | 'x': x, 70 | 'gists': gists, 71 | 'creation_date': creation, 72 | 'update_date': update, 73 | 'followers': followers, 74 | 'following': following, 75 | 'avatar': avatar 76 | } 77 | } 78 | 79 | 80 | async def org(user): 81 | org_list = [] 82 | 83 | api = f"https://api.github.com/users/{user}/orgs" 84 | 85 | r = await Requests(api).get() 86 | 87 | if r and r.text and "{" in r.text: 88 | orgs = r.json() 89 | 90 | for org in orgs: 91 | name = org['login'] 92 | org_data = { 93 | 'name': name 94 | } 95 | org_list.append(org_data) 96 | 97 | data = { 98 | 'organization': org_list 99 | } 100 | 101 | return data 102 | 103 | else: 104 | data = { 105 | 'message': 'Has no related organizations' 106 | } 107 | return data 108 | 109 | async def contributions(user): 110 | url = "https://github.com/{}".format(user) 111 | 112 | r = await Requests(url).get() 113 | 114 | soup = BeautifulSoup(r.text, "html.parser") 115 | 116 | contribut = soup.find('h2', {'class': 'f4 text-normal mb-2'}) 117 | contribut = contribut.text.strip() 118 | 119 | numbers = Text_Manager(text=contribut).no_letters() 120 | return numbers 121 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 |
125 |
--------------------------------------------------------------------------------
/lib/user.py:
--------------------------------------------------------------------------------
1 | from .commits import *
2 | from .friends import *
3 | from .profile import *
4 | from .utils.utils import Text_Manager
5 | from .gitlab import user_test_in_gitlab
6 | from .hunterio import Hunter
7 | from .names_resembling import search2
8 | from .utils.utils import Keys
9 |
10 | async def trackx(user):
11 | RED = Text_Manager.RED
12 | WHITE = Text_Manager.WHITE
13 |
14 | profile = await user_infos.profile_scraping(user)
15 | profile = profile['profile']
16 | repos = await user_infos.scrap_repos(user)
17 | orgs = await user_infos.org(user)
18 | friends = await track(user)
19 | email_search = await Email.search(user)
20 | username_history = await Name.history(user)
21 | # num_contributors = await user_infos.contributions(user)
22 | gitlab = await user_test_in_gitlab(user)
23 | email_target = await Email.resolv_email(user)
24 | company = await Hunter.find_domain(user)
25 | second = await search2(user)
26 | ssh_keys = await Keys(user).key_recoverer()
27 |
28 | print(f"{RED}{user}{WHITE}")
29 | print(f"├──Profile")
30 | print(f"│ ├──Name: {profile['name']}")
31 | print(f"│ ├──Id: {profile['id']}")
32 | print(f"│ ├──Bio: {profile['biography']}")
33 | print(f"│ ├──Location: {profile['location']}")
34 | print(f"│ ├──Avatar: {profile['avatar']}")
35 | print(f"│ ├──Followers: {profile['followers']}")
36 | print(f"│ └──Following: {profile['following']}")
37 | print(f"│")
38 | print(f"├──Stats")
39 | print(f"│ └───Repostitories")
40 | print(f"│ └──Public repos: {repos['public_repos']}")
41 | print(f"│ ├──Sources: {repos['sources']}")
42 | print(f"│ ├──Forks: {repos['forks']}")
43 | print(f"│ ├──Archived: {repos['archived']}")
44 | print(f"│ ├──Mirrors: {repos['mirrors']}")
45 | print(f"│ └──Templates: {repos['templates']}")
46 | print(f"│")
47 | print(f"├──Gists")
48 | print(f"│ └──Gists: {profile['gists']}")
49 | print(f"|")
50 | print(f"├──Keys")
51 | print(f"│ └──SSH Keys: {ssh_keys}")
52 | print(f"│")
53 | print(f"├──Date")
54 | print(f"│ ├──Creation date: {profile['creation_date'].replace('-', '/').replace('T', ' ').replace('Z', '')} 🌐 (UTC)")
55 | print(f"│ └──Update date: {profile['update_date'].replace('-', '/').replace('T', ' ').replace('Z', '')} 🌐 (UTC)")
56 | print(f"│")
57 | print(f"├──Social")
58 | print(f"│ ├──X (Twitter): {profile['x']}")
59 | print(f"│ └──GitLab")
60 | print(f"│ └──Name: {gitlab['name']}")
61 | print(f"│")
62 | print(f"├──URL")
63 | print(f"│ ├──Blog: {profile['blog']}")
64 | print(f"│ └──{company['message']}")
65 | print(f"│")
66 | print(f"├──Organization(s)")
67 | for org in orgs.get('organization', []):
68 | print(f"│ ├──Name: {org['name']}")
69 | print(f"│")
70 | print(f"├──Friend(s)")
71 | for friend in friends['friends']:
72 | if friend['name'] != "":
73 | print(f"│ ├──{friend['name']}")
74 | print(f"│")
75 | # print(f"├──Contributions")
76 | # print(f"│ └──{num_contributors} contributions in the last year")
77 | print(f"│")
78 | print(f"├──Commits")
79 | print(f"│ └──Emails")
80 | if 'count' in email_search:
81 | print(f"│ └──Count: {email_search['count']}")
82 | if email_search['count'] > 0 and 'emails' in email_search:
83 | for email_data in email_search['emails']:
84 | print(f"│ ├──Name: {email_data['name']}")
85 | print(f"│ │ └──Email: {email_data['email']}")
86 | print(f"│")
87 | print(f"│ └──Name(s) History")
88 | if second['count'] > 0 and 'names' in second:
89 | print(f"│ ├──Names resembling")
90 | print(f"│ │ └──Count: {second['count']}")
91 | for second_data in second['names']:
92 | print(f"│ │ ├──Name: {second_data}")
93 |
94 | print(f"│ ├──Names used: {gitlab['name']}, {profile['name']}, {profile['x']}, {email_target['email'].split('@')[0]}")
95 | if 'message' in username_history:
96 | print(f"│ └──{username_history['message']}")
97 | if 'has not had several names' in username_history['message']:
98 | exit()
99 |
100 | if 'names' in username_history:
101 | if username_history['message'] == "No names found in commits.":
102 | exit()
103 | for name_data in username_history['names']:
104 | print(f"│ ├──Name: {name_data['name']} (found in {name_data['count']} commit{'s' if name_data['count'] > 1 else ''})")
105 |
--------------------------------------------------------------------------------
/lib/hunt_mail.py:
--------------------------------------------------------------------------------
1 | from .Requests import Requests
2 | from .utils.utils import Text_Manager as TM
3 | from .utils.utils import Credentials
4 | import uuid
5 | import os
6 |
7 | BLACK = TM.BLACK
8 | WHITE = TM.WHITE
9 |
10 | class Hunt_lightmod:
11 | async def hunt(email):
12 | api = "https://api.github.com/search/users?q={}".format(email)
13 |
14 | r = await Requests(api).get()
15 | TM("[~] 🔎 GitHub account tracking...").Tprint()
16 |
17 | if r.status_code == 200:
18 | try:
19 | items = r.json()['items']
20 | if not items:
21 | exit(f"[-] 😔 {email} has not GitHub account.")
22 |
23 | name = items[0]['login']
24 |
25 | print(f"[+] 🤙 Username => {name}")
26 | exit()
27 |
28 | except (KeyError, ValueError):
29 | print("[-] JSON parsing error.")
30 | exit()
31 |
32 | class Hunt:
33 | def __init__(self, target: str) -> None:
34 | self.token = None
35 | self.user = None
36 | self.name = None
37 | self.email = target
38 |
39 | async def create_repo(self):
40 | repo = str(uuid.uuid1())
41 | success = False
42 |
43 | headers = {
44 | 'authorization': f'token {self.token}'
45 | }
46 |
47 | data = {
48 | 'name': repo,
49 | 'private': True
50 | }
51 |
52 | r = await Requests("https://api.github.com/user/repos", headers=headers, json=data).post()
53 |
54 | if r.status_code == 201:
55 | TM("[+] 🎭 Creation of repo...").Tprint() # creation private repo
56 | success = True
57 |
58 | return success, repo
59 |
60 | async def commit(self):
61 | success, repo = await self.create_repo()
62 |
63 | if success:
64 | headers = {
65 | "authorization": f'token {self.token}'
66 | }
67 |
68 | data = {
69 | "message": "commit",
70 | "committer": {
71 | "name": "GitSint",
72 | "email": self.email
73 | },
74 | "content": "R2l0U2ludA=="
75 | }
76 |
77 | TM("[+] 🎭 Spoofing...").Tprint() # spoofing commit with the email provided in the data
78 | response = await Requests(f"https://api.github.com/repos/{self.user}/{repo}/contents/gitsint.txt", headers=headers, json=data).put()
79 | if response.status_code == 201:
80 | success = True
81 |
82 | return success, repo
83 |
84 | else:
85 | exit()
86 |
87 | async def push(self):
88 | success, repo = await self.commit()
89 |
90 | if success:
91 | headers = {
92 | 'authorization': f'token {self.token}'
93 | }
94 |
95 | TM("[+] 🎭 Pushing...").Tprint() # data push (email) of the falsified commit
96 | r = await Requests(f"https://api.github.com/repos/{self.user}/{repo}/commits", headers=headers).get()
97 |
98 | name = r.json()[0]['author']
99 | if not name:
100 | print(f"\n[-] 😔 {self.email} has not GitHub account.")
101 | else:
102 | print(f"\n[+] 🤙 Username => {name['login']}")
103 |
104 | return repo
105 |
106 | else:
107 | exit("\n[!] Commit error.")
108 |
109 | async def delete(self):
110 | repo = await self.push()
111 |
112 | headers = {
113 | 'authorization': f'token {self.token}'
114 | }
115 |
116 | r = await Requests(f"https://api.github.com/repos/{self.user}/{repo}", headers=headers).delete()
117 |
118 | if r.status_code == 204:
119 | print(TM(f"[+] Repo deleted.").italic()) # delete private repo
120 | else:
121 | print("[-] Error while deleting the repo.")
122 |
123 | #######################################################################################
124 |
125 | async def login(self):
126 | self.name = None
127 | self.token = None
128 |
129 | while not self.name:
130 | self.name = input("\n[?] 🐱 Please enter your username (recommended to use this option with a secondary account): ")
131 |
132 | print(f"\n{BLACK}-> https://github.com/settings/tokens (check scopes of : repo, delete_repo, user:email){WHITE}")
133 | while not self.token:
134 | self.token = input("[?] 🔑 Please enter your token: ")
135 |
136 | await Credentials(username=self.name, token=self.token).check_scopes()
137 |
138 | with open("creds.txt", "w") as file:
139 | file.write(f"Name:{self.name}\nToken:{self.token}")
140 | path = os.path.abspath("creds.txt")
141 |
142 | print("\n[+] ✍️ Credentials saved!")
143 |
144 | print(TM(f"[+] Credentials path => {path}").italic())
145 |
146 | async def launch(self):
147 | try:
148 | with open("creds.txt", "r") as file:
149 | reads = file.read().splitlines()
150 |
151 | for read in reads:
152 | if "Name:" in read:
153 | self.user = read.split(':')[1].strip()
154 | elif "Token:" in read:
155 | self.token = read.split(':')[1].strip()
156 |
157 | if self.user and self.token:
158 | r = await Requests("https://api.github.com/octocat", headers={'Authorization': f'Bearer {self.token}','X-GitHub-Api-Version': '2022-11-28'}).get()
159 | if r.status_code == 200:
160 | await self.delete()
161 |
162 | else:
163 | print("[-] Token not valid please try creating one again.")
164 | print("-> You have to log in / re-log in")
165 |
166 | await self.login()
167 |
168 | else:
169 | print("[-] Credentials not found in file.")
170 | print("-> You have to log in / re-log in")
171 |
172 | await self.login()
173 |
174 | except FileNotFoundError:
175 | print("[-] Credentials file not found.")
176 | print("-> You have to log in / re-log in")
177 |
178 | await self.login()
179 |
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | GNU GENERAL PUBLIC LICENSE
2 | Version 3, 29 June 2007
3 |
4 | Copyright (C) 2007 Free Software Foundation, Inc.