PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

gitGraber: A tool to monitor GitHub in real-time to find sensitive data

yeswehack.com | blog | #bug-bounty | #open-source | #github | #security-tools | #monitoring | #sensitive-data | #api-keys
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The origin story of gitGraber, an open-source tool born in a bug bounty that monitors GitHub in real time for leaked API keys and sensitive data, helping SOC teams detect and remediate exposure.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
tool · github.com
ipatool (DrWhax Fork): App Store CLI with Native FairPlay Decryption Pipeline & MCP Integration
Significantly streamlines iOS security auditing and reverse engineering by providing an all-in-one CLI and MCP workflow to retrieve App Store packages and decrypt FairPlay binaries for static analysis.
tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
tool · github.com
Assetnote Releases php2shell-scanner: High-Fidelity Scanner for CVE-2026-109618 & CVE-2026-109619
As php2shell affects widespread PHP installations globally, this production-grade scanning logic enables enterprise security teams and defenders to reliably audit attack surfaces without relying on destructive exploit payloads.
Back