Osgint——一款查找GitHub用户信息的OSINT工具
Osgint – OSINT tool to find information about GitHub user

原始链接: https://github.com/hippiiee/osgint

OSGINT.py是一个Python工具,用于通过用户名或邮箱检索GitHub用户信息。可以使用`pip3 install -r requirements.txt`安装,并用`python3 osgint.py`执行。 使用用户名搜索(`-u`)时,OSGINT.py会检索诸如登录名、ID、头像URL、姓名、博客、个人简介、仓库和gist数量、关注者/关注数量、创建/更新日期、GPG密钥和关联邮箱地址等详细信息。`--json`标志会以JSON格式输出数据。 使用邮箱搜索(`-e`)时,OSGINT.py会尝试查找对应的GitHub用户名。 对于邮箱检索,OSGINT.py会检查GitHub用户API、公开提交(查找非隐藏邮箱)和GPG密钥内容(base64解码后)。该工具还旨在整合欺骗提交检查以进行邮箱发现,但这部分被标记为“开发中”。OSGINT.py由Hippie开发,灵感来自Zen。

Hacker News 最新 | 过去 | 评论 | 提问 | 展示 | 招聘 | 提交 登录 Osgint – 用于查找 GitHub 用户信息的 OSINT 工具 (github.com/hippiiee) 11 分,来自 CHEF-KOCH 5 小时前 | 隐藏 | 过去 | 收藏 | 讨论 加入我们 6 月 16-17 日在旧金山举办的 AI 初创公司学校! 指南 | 常见问题 | 列表 | API | 安全 | 法律 | 申请 YC | 联系我们 搜索:

原文

Retrieve informations about a github username/email
img last release

pip3 install -r requirements.txt
$ python3 osgint.py -h                                  

 .d88888b.                    d8b          888    
d88P" "Y88b                   Y8P          888    
888     888                                888    
888     888 .d8888b   .d88b.  888 88888b.  888888 
888     888 88K      d88P"88b 888 888 "88b 888    
888     888 "Y8888b. 888  888 888 888  888 888    
Y88b. .d88P      X88 Y88b 888 888 888  888 Y88b.  
 "Y88888P"   88888P'  "Y88888 888 888  888  "Y888 
                          888  v1.0.0
                     Y8b d88P                     
                      "Y88P"                      
By Hippie | https://twitter.com/hiippiiie

usage: osgint.py [-h] [-u USERNAME] [-e EMAIL] [--json]

options:
  -h, --help            show this help message and exit
  -u USERNAME, --username USERNAME
                        Github username of the account to search for (default: None)
  -e EMAIL, --email EMAIL
                        Email of the account to search for github username (default: None)
  --json                Return a json output (default: False)
$ ./osgint.py -u hippiiee
[+] login : hippiiee
[+] id : 41185722
[+] avatar_url : https://avatars.githubusercontent.com/u/41185722?v=4
[+] name : Hippie
[+] blog : https://hippie.cat
[+] bio : Hi !
[+] public_repos : 10
[+] public_gists : 0
[+] followers : 8
[+] following : 9
[+] created_at : 2018-07-13T08:28:00Z
[+] updated_at : 2022-08-21T13:11:36Z
[+] public_gists : https://gist.github.com/hippiiee
[+] GPG_keys : https://github.com/hippiiee.gpg
[+] GPG_key_id : 27cbb171ff857c58
[+] email : [email protected] [email protected]
$ ./osgint.py -u hippiiee --json
{
    "GPG_key_id": "27cbb171ff857c58",
    "GPG_keys": "https://github.com/hippiiee.gpg",
    "avatar_url": "https://avatars.githubusercontent.com/u/41185722?v=4",
    "bio": "Hi !",
    "blog": "https://hippie.cat",
    "created_at": "2018-07-13T08:28:00Z",
    "email": [
        "[email protected]",
        "[email protected]"
    ],
    "followers": 8,
    "following": 9,
    "id": 41185722,
    "login": "hippiiee",
    "name": "Hippie",
    "public_gists": "https://gist.github.com/hippiiee",
    "public_repos": 10,
    "updated_at": "2022-08-21T13:11:36Z"
}
$ ./osgint.py -e [email protected]
[+] username : ChrisADR
$ ./osgint.py -e [email protected] --json
{
    "username": "ChrisADR"
}

To get a user email, osingt is checking :

  • all the public commits of the user, if the email is not hidden in one of the commit it will be added to the list
  • if the user have a GPG key, if he has one, it's getting the email from the content of the GPG after a base64 decode
  • github user API

To get a user email, osgint is checking :

  • github user API
  • 🚧 spoofing a commit with the email, then checking the name in the commit history (working every time) 🚧 (Work In Progress)

Project inspired from Zen

联系我们 contact @ memedata.com