git-hound replacement about reconftw

[hackingguy]

I think mainly time is taken in shuffleDNS Sub Domains Brute Forcing and JS Files Extractions!
Both of them are very slow!
I tried on a very small scope program this both caused it to take around 4 hrs!

[six2dez]

• GitDorker could be an option.
• GitGraber could be an option.
• GitGot is interactive.
• Gitleaks requires target repository.
• Gitminer requires setting GitHub cookie manually.
• Trufflehog requires target repository.
• Gitrob, web interface, requires git user/organization as target.
• Git-hound requires 2FA input.

[bileltechno]

What is the main problem with git-hound?

[six2dez]

Just make some research in terms of results and speed

[six2dez]

Thanks for the feedback @hackingguy can you tell us what is exactly a very small scope? How many subdomains resolved? I have been testing for a "small scope" <30 subs alive and it takes 25 min. It's right JS subs scraping takes too much and that's why we set a max time of 10m for this step.

[bileltechno]

Target z***.com: 23 probed links

santaHog

antahog --regex --entropy --pypi santaHog

Works only agianst pypi or npm packages .

git-hound

truffleHogRegexes

• These are the regexes that power truffleHog

truffleHog

truffleHog --regex --entropy=True git_url="https://github.com/dxa4481/truffleHog.git"

installed via pip3 but throws errors:

  File "/home/xxxx/.local/lib/python3.8/site-packages/git/cmd.py", line 408, in wait
    raise GitCommandError(self.args, status, errstr)
git.exc.GitCommandError: Cmd('git') failed due to: exit code(128)
  cmdline: git clone -v git_url=https://github.com/dxa4481/truffleHog.git /tmp/tmpu4hbpnjl
  stderr: 'Cloning into '/tmp/tmpu4hbpnjl'...
fatal: protocol 'git_url=https' is not supported

[six2dez]

Done dfbdee3