xiry.

Development · GitHub repo

gitGraber

Real-time GitHub monitoring tool to find leaked credentials and API tokens

From the Xiry library · Updated 3 October 2026

Visit github.com ↗

gitGraber is a Python tool that monitors newly indexed files on GitHub for sensitive data and API keys using regex pattern matching. It is designed to catch recent leaks from organizations, third-party vendors, or employees and can alert via Slack, Discord, or Telegram.

What it's for

  • Monitor GitHub commits in real time for leaked company secrets and API keys
  • Send automated alerts to Slack, Discord, or Telegram when sensitive tokens are exposed
  • Generate custom wordlists from filenames discovered across indexed repositories

Features

  • Built-in regex detection patterns for over 30 services including AWS, Google, Stripe, Slack, and Twilio
  • Integration with Slack, Discord, and Telegram webhooks for instant notifications
  • Automated cron-job scheduling to run queries at regular 30-minute intervals
  • GitHub rate limit handling with automatic fallback across multiple personal access tokens
  • Deduplication tracking to prevent repeating alerts for previously scanned repository URLs
  • Dynamic wordlist generation based on matching filenames found during queries

Pricing

Open source

Details

Type
GitHub repo
Category
Development
Topic
Secret Scanning
Open source
Yes
Platforms
Command line, Linux, macOS, Windows
For
Security engineers, bug bounty hunters, and DevOps teams
Alternative to
TruffleHog, Gitleaks, GitGuardian
Tags
security, osint, secrets detection, github, python, recon

Why it was saved

  • @carterperez.dev, 9 August 2026: Continuously searches GitHub commits for exposed passwords and API tokens and immediately sends alert notifications to Telegram.

Related

  • holehe

    Check if an email address is registered across 120+ online platforms.

  • AIMap

    Discovery and security testing platform for exposed internet-facing AI endpoints.

  • Argus

    Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks

  • Browser Use Agent Sandbox Architecture

    Architecture pattern for securely running code-executing agents inside isolated micro-VMs

  • OpenOSINT

    AI OSINT agent, MCP server, and framework chaining intelligence tools

  • Sandbox Hardening Checklist for Code-Executing Agents

    A three-step checklist to isolate and harden runtimes for arbitrary code execution.

Updated