Packages and Binaries:
gitxray
Gitxray (short for Git X-Ray) is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that would otherwise be very time-consuming to obtain manually. Additionally, it seeks out information in unconventional places.
Installed size: 353 KB
How to install: sudo apt install gitxray
Dependencies:
- python3
- python3-requests
gitxray
root@kali:~# gitxray -h
███ █████
░░░ ░░███
███████ ████ ███████ █████ █████ ████████ ██████ █████ ████
███░░███░░███ ░░░███░ ░░███ ░░███ ░░███░░███ ░░░░░███ ░░███ ░███
░███ ░███ ░███ ░███ ░░░█████░ ░███ ░░░ ███████ ░███ ░███
░███ ░███ ░███ ░███ ███ ███░░░███ ░███ ███░░███ ░███ ░███
░░███████ █████ ░░█████ █████ █████ █████ ░░████████ ░░███████
░░░░░███░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░ ░░░░░░░░ ░░░░░███
███ ░███ ███ ░███
░░██████ ░░██████
░░░░░░ ░░░░░░
gitxray: X-Ray and analyze GitHub Repositories and their Contributors. Trust no one!
v1.0.17.4 - Developed by Kulkan Security [www.kulkan.com] - Penetration testing by creative minds.
####################################################################################################
usage: gitxray [-h] (-r REPOSITORY | -rf REPOSITORIES_FILE | -o ORGANIZATION)
[-c CONTRIBUTOR | -l] [-f FILTERS] [--debug] [--shush]
[-out OUTFILE] [-outformat {html,text,json}]
Gitxray
options:
-h, --help show this help message and exit
-r, --repository REPOSITORY
The repository to check (Including https://github.com/
is optional)
-rf, --repositories-file REPOSITORIES_FILE
A file containing repositories separated by newlines.
-o, --organization ORGANIZATION
An organization to check all of their repositories
(Including https://github.com/ is optional)
-c, --contributor CONTRIBUTOR
A comma-separated list of contributor usernames to
focus on within the Repository or Organization that
you Gitxray.
-l, --list List contributors (if a repository was specified) or
List repositories (if an Org was specified). Useful if
you intend to then focus on a specific username or
repository.
-f, --filters FILTERS
Comma separated keywords to filter results by (e.g.
private,macbook).
--debug Enable Debug mode - be prepared for an excessive
amount of output.
--shush Reduced output in stdout, shushing Gitxray to remove
any progress output.
-out, --outfile OUTFILE
Set the location for the output log file.
-outformat, --output-format {html,text,json}
Format for log file (html,text,json) - default: html
Updated on: 2025-May-20