PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GitGot Tool Release

bishopfox.com | blog | #open-source | #github | #osint | #security-tools | #gitgot | #secret-scanning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

GitGot is a semi-automated, feedback-driven Bishop Fox tool that searches public GitHub data for sensitive secrets using blacklists, fuzzy matching and the GitHub Search API.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · bishopfox.com
Going Semi-Automated in an Automated World: Using Human-in-the-Loop Workflows to Improve Our Security Tools
Bishop Fox's Jake Miller argues that scanners alone miss context and shows how human-in-the-loop workflows like GitGot blend automation speed with human judgment.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
tool · github.com
Assetnote Releases php2shell-scanner: High-Fidelity Scanner for CVE-2026-109618 & CVE-2026-109619
As php2shell affects widespread PHP installations globally, this production-grade scanning logic enables enterprise security teams and defenders to reliably audit attack surfaces without relying on destructive exploit payloads.
Back