diff options
author | CoprDistGit <infra@openeuler.org> | 2023-06-20 08:05:41 +0000 |
---|---|---|
committer | CoprDistGit <infra@openeuler.org> | 2023-06-20 08:05:41 +0000 |
commit | 6949f10c30661f11a39fff4f030ddf421bafcf1f (patch) | |
tree | 38cc3044f2d26447d1a4af6a16922a6539fe2d82 /python-ghdorker.spec | |
parent | 4690f98c00fc29d8f2ff31eac074f53b67a057bc (diff) |
automatic import of python-ghdorkeropeneuler20.03
Diffstat (limited to 'python-ghdorker.spec')
-rw-r--r-- | python-ghdorker.spec | 471 |
1 files changed, 471 insertions, 0 deletions
diff --git a/python-ghdorker.spec b/python-ghdorker.spec new file mode 100644 index 0000000..df74e2a --- /dev/null +++ b/python-ghdorker.spec @@ -0,0 +1,471 @@ +%global _empty_manifest_terminate_build 0 +Name: python-ghdorker +Version: 0.3.2 +Release: 1 +Summary: A better GitHub Dorking Utility +License: Apache Software License +URL: https://github.com/dtaivpp/gh-dorker +Source0: https://mirrors.aliyun.com/pypi/web/packages/88/36/0263e0038e5df08cc9d9f4e0ce585f85a3d79c7466157378ffb5afc50c59/ghdorker-0.3.2.tar.gz +BuildArch: noarch + +Requires: python3-ghapi +Requires: python3-dotenv +Requires: python3-wheel + +%description +# GitHub Dorker + +GH Dorker is picking up where several GitHub dorking tools leave off. Many of these dorkers grow stale and old becuase the code is very tangled and intertwined. GH-Dorker is building on the work of several other dorkers and creating a more modular approach. + +## Usage + +1. Install with pip `pip install ghdorker` +2. (Optional) you can either export an environment variable named "GH_TOKEN" or include it in a local .env file to ensure you can make the most requests. See ["Creating a personal access token"](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token) for more information on how to do so. + +``` +usage: ghdorker [-h] [-v] [-s {repo,user,org}] [-d DORKS] [--debug] [-o OUTPUT_FILENAME] [--options INPUT_OPTION [INPUT_OPTION ...]] search + +Search github for github dorks + +positional arguments: + search The repo, username, or organization you would like to search + +optional arguments: + -h, --help show this help message and exit + -v, --version show program's version number and exit + -s {repo,user,org}, --scope {repo,user,org} + The type of GitHub object you would like to search + -d DORKS, --dorks DORKS + Github dorks file. Eg: dorks.txt/.yaml + --debug Set this if you would like to see verbose logging. + -o OUTPUT_FILENAME, --outputFile OUTPUT_FILENAME + File to write results to. This overwrites the file provided! Accepts .json or .csv as output file types. + --options INPUT_OPTION [INPUT_OPTION ...] + YAML Options to target for dorking for example: all.cloud.aws + +Use responsibly, Enjoy pentesting +``` + +Here is a simple example: +``` +# The source is a repo and it is running against the gh_dorks_test.txt file +ghdorker -s repo -d samples/dorks.txt dtaivpp/NewsTicker +``` + +Additionally you can create a yaml config file like so for using only specific dorks on repos. +```yaml +all: + identity: + - filename:.dockercfg auth + - filename:id_rsa or filename:id_dsa + - filename:.npmrc _auth + - datafilename:.dockercfg auth + - dataextension:pem private + - extension:ppk private + cloud: + aws: + - rds.amazonaws.com password + - filename:.bash_profile aws + google: + - extension:json googleusercontent client_secret +``` + +This would run all the dorks that fall under the cloud section of the YAML. +``` +ghdorker -s repo dtaivpp/NewsTicker -d samples/dorks.yaml --options all.cloud +``` + +This would run all the dorks that fall under the aws and the identity sections. It's okay to duplicate entries under different sections as on the backend it is checking each entry for uniqueness. +``` +ghdorker -s repo dtaivpp/NewsTicker -d samples/dorks.yaml --options all.cloud.aws all.identiy +``` + +And finally here is an example of how you could output the results to either a json or csv file. +``` +ghdorker -s user dtaivpp -d samples/dorks.yaml --options all.cloud.aws all.test -o output.json +``` +This is always output to the console: +``` +2021-11-18 06:47:57,847 - dork: rds.amazonaws.com password user:dtaivpp, repository: dtaivpp/gh-dorker, path: samples/dorks.yaml, score: 1.0 +2021-11-18 06:47:57,848 - dork: rds.amazonaws.com password user:dtaivpp, repository: dtaivpp/gh-dorker, path: README.md, score: 1.0 +2021-11-18 06:48:05,171 - dork: extension:md user:dtaivpp, repository: dtaivpp/dtaivpp, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/gh-dorker, path: CONTRIBUTING.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/gh-dorker, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/OpenSearch-Utilization, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/DevOps-Template, path: README.md, score: 1.0 +``` + +And in addition here is what it looks like as JSON: +```json +[ + { + "dork": "rds.amazonaws.com password user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "samples/dorks.yaml", + "score": 1.0 + }, + { + "dork": "rds.amazonaws.com password user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "README.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/dtaivpp", + "path": "README.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "CONTRIBUTING.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "README.md", + "score": 1.0 + } +] +``` + +As an aside, rate limiting is already built into the codebase. It will not allow you to make more requests than allowable. GH-Dorker grabs your real rate limits live from GitHub so it will make the maximim amount of requests permittable in a given timeframe. + +## Contributing + +For how to contribute please see [CONTRIBUTING.md]("CONTRIBUTING.md"). + + +## Credits +Reference points for creating GitDorker and compiling dorks lists + +- [@techgaun](https://github.com/techgaun/github-dorks) - This was the primary repo I was looking to for inspiration when writing this dorker +- [@obheda12](https://github.com/obheda12/GitDorker) - You have one of the cleanest README's ive read in a while and if you couldn't tell has inspired much of this project's structure + + + + +%package -n python3-ghdorker +Summary: A better GitHub Dorking Utility +Provides: python-ghdorker +BuildRequires: python3-devel +BuildRequires: python3-setuptools +BuildRequires: python3-pip +%description -n python3-ghdorker +# GitHub Dorker + +GH Dorker is picking up where several GitHub dorking tools leave off. Many of these dorkers grow stale and old becuase the code is very tangled and intertwined. GH-Dorker is building on the work of several other dorkers and creating a more modular approach. + +## Usage + +1. Install with pip `pip install ghdorker` +2. (Optional) you can either export an environment variable named "GH_TOKEN" or include it in a local .env file to ensure you can make the most requests. See ["Creating a personal access token"](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token) for more information on how to do so. + +``` +usage: ghdorker [-h] [-v] [-s {repo,user,org}] [-d DORKS] [--debug] [-o OUTPUT_FILENAME] [--options INPUT_OPTION [INPUT_OPTION ...]] search + +Search github for github dorks + +positional arguments: + search The repo, username, or organization you would like to search + +optional arguments: + -h, --help show this help message and exit + -v, --version show program's version number and exit + -s {repo,user,org}, --scope {repo,user,org} + The type of GitHub object you would like to search + -d DORKS, --dorks DORKS + Github dorks file. Eg: dorks.txt/.yaml + --debug Set this if you would like to see verbose logging. + -o OUTPUT_FILENAME, --outputFile OUTPUT_FILENAME + File to write results to. This overwrites the file provided! Accepts .json or .csv as output file types. + --options INPUT_OPTION [INPUT_OPTION ...] + YAML Options to target for dorking for example: all.cloud.aws + +Use responsibly, Enjoy pentesting +``` + +Here is a simple example: +``` +# The source is a repo and it is running against the gh_dorks_test.txt file +ghdorker -s repo -d samples/dorks.txt dtaivpp/NewsTicker +``` + +Additionally you can create a yaml config file like so for using only specific dorks on repos. +```yaml +all: + identity: + - filename:.dockercfg auth + - filename:id_rsa or filename:id_dsa + - filename:.npmrc _auth + - datafilename:.dockercfg auth + - dataextension:pem private + - extension:ppk private + cloud: + aws: + - rds.amazonaws.com password + - filename:.bash_profile aws + google: + - extension:json googleusercontent client_secret +``` + +This would run all the dorks that fall under the cloud section of the YAML. +``` +ghdorker -s repo dtaivpp/NewsTicker -d samples/dorks.yaml --options all.cloud +``` + +This would run all the dorks that fall under the aws and the identity sections. It's okay to duplicate entries under different sections as on the backend it is checking each entry for uniqueness. +``` +ghdorker -s repo dtaivpp/NewsTicker -d samples/dorks.yaml --options all.cloud.aws all.identiy +``` + +And finally here is an example of how you could output the results to either a json or csv file. +``` +ghdorker -s user dtaivpp -d samples/dorks.yaml --options all.cloud.aws all.test -o output.json +``` +This is always output to the console: +``` +2021-11-18 06:47:57,847 - dork: rds.amazonaws.com password user:dtaivpp, repository: dtaivpp/gh-dorker, path: samples/dorks.yaml, score: 1.0 +2021-11-18 06:47:57,848 - dork: rds.amazonaws.com password user:dtaivpp, repository: dtaivpp/gh-dorker, path: README.md, score: 1.0 +2021-11-18 06:48:05,171 - dork: extension:md user:dtaivpp, repository: dtaivpp/dtaivpp, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/gh-dorker, path: CONTRIBUTING.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/gh-dorker, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/OpenSearch-Utilization, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/DevOps-Template, path: README.md, score: 1.0 +``` + +And in addition here is what it looks like as JSON: +```json +[ + { + "dork": "rds.amazonaws.com password user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "samples/dorks.yaml", + "score": 1.0 + }, + { + "dork": "rds.amazonaws.com password user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "README.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/dtaivpp", + "path": "README.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "CONTRIBUTING.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "README.md", + "score": 1.0 + } +] +``` + +As an aside, rate limiting is already built into the codebase. It will not allow you to make more requests than allowable. GH-Dorker grabs your real rate limits live from GitHub so it will make the maximim amount of requests permittable in a given timeframe. + +## Contributing + +For how to contribute please see [CONTRIBUTING.md]("CONTRIBUTING.md"). + + +## Credits +Reference points for creating GitDorker and compiling dorks lists + +- [@techgaun](https://github.com/techgaun/github-dorks) - This was the primary repo I was looking to for inspiration when writing this dorker +- [@obheda12](https://github.com/obheda12/GitDorker) - You have one of the cleanest README's ive read in a while and if you couldn't tell has inspired much of this project's structure + + + + +%package help +Summary: Development documents and examples for ghdorker +Provides: python3-ghdorker-doc +%description help +# GitHub Dorker + +GH Dorker is picking up where several GitHub dorking tools leave off. Many of these dorkers grow stale and old becuase the code is very tangled and intertwined. GH-Dorker is building on the work of several other dorkers and creating a more modular approach. + +## Usage + +1. Install with pip `pip install ghdorker` +2. (Optional) you can either export an environment variable named "GH_TOKEN" or include it in a local .env file to ensure you can make the most requests. See ["Creating a personal access token"](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token) for more information on how to do so. + +``` +usage: ghdorker [-h] [-v] [-s {repo,user,org}] [-d DORKS] [--debug] [-o OUTPUT_FILENAME] [--options INPUT_OPTION [INPUT_OPTION ...]] search + +Search github for github dorks + +positional arguments: + search The repo, username, or organization you would like to search + +optional arguments: + -h, --help show this help message and exit + -v, --version show program's version number and exit + -s {repo,user,org}, --scope {repo,user,org} + The type of GitHub object you would like to search + -d DORKS, --dorks DORKS + Github dorks file. Eg: dorks.txt/.yaml + --debug Set this if you would like to see verbose logging. + -o OUTPUT_FILENAME, --outputFile OUTPUT_FILENAME + File to write results to. This overwrites the file provided! Accepts .json or .csv as output file types. + --options INPUT_OPTION [INPUT_OPTION ...] + YAML Options to target for dorking for example: all.cloud.aws + +Use responsibly, Enjoy pentesting +``` + +Here is a simple example: +``` +# The source is a repo and it is running against the gh_dorks_test.txt file +ghdorker -s repo -d samples/dorks.txt dtaivpp/NewsTicker +``` + +Additionally you can create a yaml config file like so for using only specific dorks on repos. +```yaml +all: + identity: + - filename:.dockercfg auth + - filename:id_rsa or filename:id_dsa + - filename:.npmrc _auth + - datafilename:.dockercfg auth + - dataextension:pem private + - extension:ppk private + cloud: + aws: + - rds.amazonaws.com password + - filename:.bash_profile aws + google: + - extension:json googleusercontent client_secret +``` + +This would run all the dorks that fall under the cloud section of the YAML. +``` +ghdorker -s repo dtaivpp/NewsTicker -d samples/dorks.yaml --options all.cloud +``` + +This would run all the dorks that fall under the aws and the identity sections. It's okay to duplicate entries under different sections as on the backend it is checking each entry for uniqueness. +``` +ghdorker -s repo dtaivpp/NewsTicker -d samples/dorks.yaml --options all.cloud.aws all.identiy +``` + +And finally here is an example of how you could output the results to either a json or csv file. +``` +ghdorker -s user dtaivpp -d samples/dorks.yaml --options all.cloud.aws all.test -o output.json +``` +This is always output to the console: +``` +2021-11-18 06:47:57,847 - dork: rds.amazonaws.com password user:dtaivpp, repository: dtaivpp/gh-dorker, path: samples/dorks.yaml, score: 1.0 +2021-11-18 06:47:57,848 - dork: rds.amazonaws.com password user:dtaivpp, repository: dtaivpp/gh-dorker, path: README.md, score: 1.0 +2021-11-18 06:48:05,171 - dork: extension:md user:dtaivpp, repository: dtaivpp/dtaivpp, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/gh-dorker, path: CONTRIBUTING.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/gh-dorker, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/OpenSearch-Utilization, path: README.md, score: 1.0 +2021-11-18 06:48:05,172 - dork: extension:md user:dtaivpp, repository: dtaivpp/DevOps-Template, path: README.md, score: 1.0 +``` + +And in addition here is what it looks like as JSON: +```json +[ + { + "dork": "rds.amazonaws.com password user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "samples/dorks.yaml", + "score": 1.0 + }, + { + "dork": "rds.amazonaws.com password user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "README.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/dtaivpp", + "path": "README.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "CONTRIBUTING.md", + "score": 1.0 + }, + { + "dork": "extension:md user:dtaivpp", + "repository": "dtaivpp/gh-dorker", + "path": "README.md", + "score": 1.0 + } +] +``` + +As an aside, rate limiting is already built into the codebase. It will not allow you to make more requests than allowable. GH-Dorker grabs your real rate limits live from GitHub so it will make the maximim amount of requests permittable in a given timeframe. + +## Contributing + +For how to contribute please see [CONTRIBUTING.md]("CONTRIBUTING.md"). + + +## Credits +Reference points for creating GitDorker and compiling dorks lists + +- [@techgaun](https://github.com/techgaun/github-dorks) - This was the primary repo I was looking to for inspiration when writing this dorker +- [@obheda12](https://github.com/obheda12/GitDorker) - You have one of the cleanest README's ive read in a while and if you couldn't tell has inspired much of this project's structure + + + + +%prep +%autosetup -n ghdorker-0.3.2 + +%build +%py3_build + +%install +%py3_install +install -d -m755 %{buildroot}/%{_pkgdocdir} +if [ -d doc ]; then cp -arf doc %{buildroot}/%{_pkgdocdir}; fi +if [ -d docs ]; then cp -arf docs %{buildroot}/%{_pkgdocdir}; fi +if [ -d example ]; then cp -arf example %{buildroot}/%{_pkgdocdir}; fi +if [ -d examples ]; then cp -arf examples %{buildroot}/%{_pkgdocdir}; fi +pushd %{buildroot} +if [ -d usr/lib ]; then + find usr/lib -type f -printf "\"/%h/%f\"\n" >> filelist.lst +fi +if [ -d usr/lib64 ]; then + find usr/lib64 -type f -printf "\"/%h/%f\"\n" >> filelist.lst +fi +if [ -d usr/bin ]; then + find usr/bin -type f -printf "\"/%h/%f\"\n" >> filelist.lst +fi +if [ -d usr/sbin ]; then + find usr/sbin -type f -printf "\"/%h/%f\"\n" >> filelist.lst +fi +touch doclist.lst +if [ -d usr/share/man ]; then + find usr/share/man -type f -printf "\"/%h/%f.gz\"\n" >> doclist.lst +fi +popd +mv %{buildroot}/filelist.lst . +mv %{buildroot}/doclist.lst . + +%files -n python3-ghdorker -f filelist.lst +%dir %{python3_sitelib}/* + +%files help -f doclist.lst +%{_docdir}/* + +%changelog +* Tue Jun 20 2023 Python_Bot <Python_Bot@openeuler.org> - 0.3.2-1 +- Package Spec generated |