This repo will deliberately contain things that shouldn't be found in a repository. I am setting it up ahead of a talk I'll be giving along with Chris Truncer at Wild West Hackin' Fest 2019. If things go well, I'll also be dropping some new tools to help to automate the search for Git leaks.
For now, you can have a play with tools like Gitrob and look through solutions.md to see what you can find by hand.
- Two sets of TLS certificates, keys etc.
- Some SSH keys
- A set of AWS keys
- Database credentials
- Secrets in workflow logs
This repo is built on an original idea by Kev Smith and David Betteridge which they presented in a workshop at SteelCon. Thanks for the inspiration guys.