# hisxo/gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Repository: https://github.com/hisxo/gitGraber
Canonical: https://ross.abutalabs.com/products/gitgraber
Language: Python
License: GPL-3.0
License Family: copyleft
Topics: security-tools, monitor, bugbounty, security-automation, osint, redteam, realtime, leaks
Last push: 2026-03-26T09:32:20+00:00

## Health v2 (maintenance only)
Score: 66/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 74, release rhythm 35, longevity 100
- inputs: {"age_days": 2555, "days_push": 160, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2376, forks 356 (observed 2026-08-28T04:06:42.049188+00:00)

## What it is
gitGraber is a Python3 command-line tool that monitors GitHub search results in real time to find leaked sensitive data such as API keys and tokens for services like AWS, PayPal, Stripe, Mailgun, and Twilio. It sends findings to Slack notifications or the CLI and deduplicates previously scanned repositories.

## Use cases
- monitor github for leaked api keys in real time
- find exposed secrets for bug bounty hunting
- detect credential leaks for my company keyword
- get slack alerts when api tokens are pushed to github
- osint reconnaissance for red team engagements

## When to choose
- you want real-time monitoring of newly indexed GitHub files rather than historical repo scanning
- you need Slack notifications for leaked service-specific tokens
- you run bug bounty or red team recon and want low false-positive secret detection

## When to avoid
- you need to scan the full history of existing repositories - other tools do that better
- you want zero false positives without tuning regexes and blacklist patterns
- you need a GUI or managed SaaS secret-scanning solution

## Facets
- artifact type: cli-tool
- maturity: active
- function: osint, security, web-scraping, monitoring, search-engine
- domain: security, osint, developer-tools, crawlers
- platform: python, cli, windows
- tags: secret-detection, github-monitoring, leak-detection, bugbounty, api-keys, slack-notifications, real-time, linux, macos

## Member repositories
- hisxo/gitGraber (main) score 66

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:42.049188+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:34:59.576256+00:00, confidence not recorded.
  - readme: https://github.com/hisxo/gitGraber (fetched 2026-08-28T04:06:42.049188+00:00, sha 1352ba304e39)
- Data as of 2026-08-30T08:39:29.467469+00:00.