# gitGraber

> Real-time GitHub monitoring tool to find leaked credentials and API tokens

gitGraber is a Python tool that monitors newly indexed files on GitHub for sensitive data and API keys using regex pattern matching. It is designed to catch recent leaks from organizations, third-party vendors, or employees and can alert via Slack, Discord, or Telegram.

Website: https://github.com/hisxo/gitGraber

## What it is for

- Monitor GitHub commits in real time for leaked company secrets and API keys
- Send automated alerts to Slack, Discord, or Telegram when sensitive tokens are exposed
- Generate custom wordlists from filenames discovered across indexed repositories

## Features

- Built-in regex detection patterns for over 30 services including AWS, Google, Stripe, Slack, and Twilio
- Integration with Slack, Discord, and Telegram webhooks for instant notifications
- Automated cron-job scheduling to run queries at regular 30-minute intervals
- GitHub rate limit handling with automatic fallback across multiple personal access tokens
- Deduplication tracking to prevent repeating alerts for previously scanned repository URLs
- Dynamic wordlist generation based on matching filenames found during queries

## Pricing

Open source

## Details

- Type: GitHub repo
- Category: [Development](https://xiry.app/topics/development.md)
- Open source: yes
- Platforms: Command line, Linux, macOS, Windows
- For: Security engineers, bug bounty hunters, and DevOps teams
- Alternative to: TruffleHog, Gitleaks, GitGuardian
- Tags: security, osint, secrets detection, github, python, recon

## Why it was saved

- [@carterperez.dev, 9 August 2026](https://www.instagram.com/reel/Db0ipK0RLCE/): Continuously searches GitHub commits for exposed passwords and API tokens and immediately sends alert notifications to Telegram.

## Related

- [holehe](https://xiry.app/resources/holehe): Check if an email address is registered across 120+ online platforms. (GitHub repo, Open source)
- [AIMap](https://xiry.app/resources/aimap): Discovery and security testing platform for exposed internet-facing AI endpoints. (Web app, Open source)
- [Argus](https://xiry.app/resources/argus): Python interactive CLI toolkit for automated OSINT, network reconnaissance, and security checks (GitHub repo, Open source)
- [Browser Use Agent Sandbox Architecture](https://xiry.app/resources/browser-use-agent-sandbox-architecture): Architecture pattern for securely running code-executing agents inside isolated micro-VMs (Framework, Free)
- [OpenOSINT](https://xiry.app/resources/openosint): AI OSINT agent, MCP server, and framework chaining intelligence tools (GitHub repo, Open source)
- [Sandbox Hardening Checklist for Code-Executing Agents](https://xiry.app/resources/sandbox-hardening-checklist-for-code-executing-agents): A three-step checklist to isolate and harden runtimes for arbitrary code execution. (Tip, Free)

Updated 3 October 2026. Page: https://xiry.app/resources/gitgraber

Make your own library: Xiry takes your saved reels, tweets, Reddit bookmarks and Watch Later videos, makes them searchable and pulls the useful stuff out, like this library. It's invite-only for now; join the waitlist at https://xiry.app/#waitlist.