Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add GHTorrent project #8

Merged
merged 2 commits into from
Jul 7, 2024
Merged

Add GHTorrent project #8

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f76c041
Add GHTorrent project
TupleType Jul 7, 2024
8d6e0c2
Fix linting
TupleType Jul 7, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Practical resources for offensive CI/CD security research.
- [Initial Code Execution](#initial-code-execution)
- [Post Exploitation](#post-exploitation)
- [Defense Evasion](#defense-evasion)
- [Offensive Tools](#offensive-tools)
- [Tools](#tools)
- [Case Studies](#case-studies)
- [Similar Projects](#similar-projects)

Expand Down Expand Up @@ -85,9 +85,10 @@ A curated list of unique and useful CI/CD attack techniques.
- [Working as unexpected](https://www.chainguard.dev/unchained/working-as-unexpected) - Creating a GitHub branch that matches a branch protection rule pattern with a workflow file that triggers on push to gain access to environment secrets.
- [Zuckerpunch - Abusing Self Hosted GitHub Runners at Facebook](https://marcyoung.us/post/zuckerpunch/) - Hide commits in a GitHub PR.

## Offensive Tools
## Tools
- [ADOKit](https://github.com/xforcered/ADOKit) - Azure DevOps Services Attack Toolkit.
- [Gato](https://github.com/praetorian-inc/gato) - GitHub Attack Toolkit.
- [GHTorrent Project](http://ghtorrent-downloads.ewi.tudelft.nl/mysql/) - A queryable offline mirror of the GitHub API data. [Tutorial](https://ghtorrent.github.io/tutorial/).
- [git-dumper](https://github.com/arthaud/git-dumper) - Dump Git repository from a website.
- [GitFive](https://github.com/mxrch/gitfive) - OSINT tool to investigate GitHub profiles.
- [Grep.app](https://grep.app/) - Search GitHub using regex.
Expand Down
Loading