Osgint - 用于查找 GitHub 用户信息的 OSINT 工具
该文章介绍了名为 `osgint` 的 OSINT 工具,用于在 GitHub 上查找用户信息。其主要功能包括:通过电子邮件查找用户名,通过用户名查找电子邮件(不保证有效),以及获取用户的个人资料信息,如创建日期、公共 Gist 等。该工具使用 Python 编写,通过 `pip3 install -r requirements.txt` 安装依赖,并提供命令行参数 `-u`(用户名)和 `-e`(电子邮件)进行查询,支持 JSON 格式输出。`osgint` 通过检查用户的公共提交、GPG 密钥和 GitHub 用户 API 来获取信息。
Navigation Menu
OSINT 工具,用于查找有关 GitHub 用户的信息 (email2username, username2email, 创建日期...)
hippiiee/osgint
master
Folders and files
Name | Name | Last commit message | Last commit date ---|---|---|--- README.md| README.md | | osgint.py| osgint.py | | requirements.txt| requirements.txt | |
View all files
Repository files navigation
OSGINT
检索有关 GitHub 用户名/电子邮件的信息
Features
- 从电子邮件查找 GitHub 用户名
- 从 GitHub 用户名查找电子邮件(并非总是有效)
- 查找有关个人资料的信息(帐户创建日期、公共 Gist、ID、公共 PGP、公共 SSH ...)
Requirements
pip3 install -r requirements.txt
Usage
$ python3 osgint.py -h
.d88888b. d8b 888
d88P" "Y88b Y8P 888
888 888 888
888 888 .d8888b .d88b. 888 88888b. 888888
888 888 88K d88P"88b 888 888 "88b 888
888 888 "Y8888b. 888 888 888 888 888 888
Y88b. .d88P X88 Y88b 888 888 888 888 Y88b.
"Y88888P" 88888P' "Y88888 888 888 888 "Y888
888 v1.0.0
Y8b d88P
"Y88P"
By Hippie | https://twitter.com/hiippiiie
usage: osgint.py [-h] [-u USERNAME] [-e EMAIL] [--json]
options:
-h, --help show this help message and exit
-u USERNAME, --username USERNAME
Github username of the account to search for (default: None)
-e EMAIL, --email EMAIL
Email of the account to search for github username (default: None)
--json Return a json output (default: False)
Example output
username
$ ./osgint.py -u hippiiee
[+] login : hippiiee
[+] id : 41185722
[+] avatar_url : https://avatars.githubusercontent.com/u/41185722?v=4
[+] name : Hippie
[+] blog : https://hippie.cat
[+] bio : Hi !
[+] public_repos : 10
[+] public_gists : 0
[+] followers : 8
[+] following : 9
[+] created_at : 2018-07-13T08:28:00Z
[+] updated_at : 2022-08-21T13:11:36Z
[+] public_gists : https://gist.github.com/hippiiee
[+] GPG_keys : https://github.com/hippiiee.gpg
[+] GPG_key_id : 27cbb171ff857c58
[+] email : hquere@e3r4p3.42.fr hippolyte.q@gmail.com
$ ./osgint.py -u hippiiee --json
{
"GPG_key_id": "27cbb171ff857c58",
"GPG_keys": "https://github.com/hippiiee.gpg",
"avatar_url": "https://avatars.githubusercontent.com/u/41185722?v=4",
"bio": "Hi !",
"blog": "https://hippie.cat",
"created_at": "2018-07-13T08:28:00Z",
"email": [
"hquere@e3r4p3.42.fr",
"hippolyte.q@gmail.com"
],
"followers": 8,
"following": 9,
"id": 41185722,
"login": "hippiiee",
"name": "Hippie",
"public_gists": "https://gist.github.com/hippiiee",
"public_repos": 10,
"updated_at": "2022-08-21T13:11:36Z"
}
$ ./osgint.py -e chrisadr@gentoo.org
[+] username : ChrisADR
$ ./osgint.py -e chrisadr@gentoo.org --json
{
"username": "ChrisADR"
}
How does it works ?
为了获取用户电子邮件,osgint 正在检查:
- 用户的所有公共提交,如果电子邮件未在其中一个提交中隐藏,它将被添加到列表
- 如果用户有 GPG 密钥,如果他有,则会在 base64 解码后从 GPG 的内容中获取电子邮件
- GitHub 用户 API
为了获取用户电子邮件,osgint 正在检查:
- GitHub 用户 API
- 🚧 欺骗包含电子邮件的提交,然后在提交历史记录中检查名称(每次都有效)🚧(正在进行中)
项目灵感来自Zen
About
OSINT 工具,用于查找有关 GitHub 用户的信息(email2username、username2email、创建日期...)
Resources
Stars
Watchers
Forks
Releases 1
🔖 Version 1.0.3 Latest Aug 22, 2022