Red Team Credentials Recon: OLD with a TWIST
Shantanu Khandelwal presents GitHub Credentials Stroller, an automated OSINT reconnaissance tool that deep-scans developer repositories for exposed credentials.
Summary
The Threat of Leaked Developer Credentials on GitHub
Developers frequently commit API keys, cloud credentials, and database passwords to public and corporate GitHub repositories, providing attackers with instant initial access.
Limitations of Existing Credential Scanners
Shantanu Khandelwal reviews existing open-source secret scanning tools, identifying common blind spots in deep commit history analysis and fork enumeration.
Introducing GitHub Credentials Stroller
Khandelwal introduces GitHub Credentials Stroller, a reconnaissance tool that recursively dives into developer organizations, commit diffs, and issue attachments.
Operationalizing Credential Recon for Red Teams
The author demonstrates practical workflows for red teams to harvest initial access credentials and advises organizations on automating secret leakage remediation.
Related talks
Main Stage·32 min
Alexander Hagenah · nyxgeek
Alexander Hagenah details unauthenticated, zero-log user enumeration techniques across Microsoft Azure, Teams, and OneDrive spanning millions of accounts.
Village Interviews·1 min
An inside look at the Recon Village CTF, testing OSINT investigative methodology, public records pivots, and asset discovery.
Recon Village·30 min
Andy Dennis
Andy Dennis demonstrates leveraging passive DNS databases to uncover competitor infrastructure, corporate acquisitions, and business intelligence.