Osgint – OSINT tool to find information about GitHub user • Hacker News Board

Re: Osgint – OSINT tool to find information about GitHub user

#21

Post by danso » Mon, Mar 24, 2025, 7:09 PM UTC

Uh couldn't you use the Events API to more efficiently go through someone's recent commits?

    def findEmailFromContributor(username, repo, contributor):
        response = requests.get('https://github.com/%s/%s/commits?author=%s' % (username, repo, contributor), auth=HTTPBasicAuth(username, '')).text
        latestCommit = re.search(r'href="/%s/%s/commit/(.*?)"' % (username, repo), response)
        if latestCommit:
            latestCommit = latestCommit.group(1)
        else:
            latestCommit = 'dummy'
        commitDetails = requests.get('https://github.com/%s/%s/commit/%s.patch' % (username, repo, latestCommit), auth=HTTPBasicAuth(username, '')).text
        email = re.search(r'', commitDetails)

Re: Osgint – OSINT tool to find information about GitHub user

#22

Post by dustyharddrive » Mon, Mar 24, 2025, 7:15 PM UTC

cpursley wrote: post #2

That's basically the idea behind https://reporeach.com

This looks very GDPR compliant!

Re: Osgint – OSINT tool to find information about GitHub user

#23

Post by ozim » Mon, Mar 24, 2025, 11:16 PM UTC

jillyboel wrote: post #13

theyknowitsxmas wrote: post #7

Who does this benefit besides spammers?

Stalkers and abusers

Or people who want to double check if they are not vulnerable to stalking and abuse by a silly mistake.

Re: Osgint – OSINT tool to find information about GitHub user

#24

Post by 69277494937 » Tue, Mar 25, 2025, 5:28 AM UTC

theyknowitsxmas wrote: post #7

Who does this benefit besides spammers?

Knowing what malicious actors are capable of is important for protecting yourself against them.

Re: Osgint – OSINT tool to find information about GitHub user

#25

Post by compootr » Tue, Mar 25, 2025, 5:44 AM UTC

Xaena wrote: post #20

You may not be the creator, but the intent of this repo appears to be at odds with GitHub's acceptable use policies. For anyone else dealing with recruiters or companies spamming you from your github commit email, it's reportable under information usage restrictions and privacy. https://docs.github.com/en/site-policy/acceptable-use-polici...

as a non-user, I'm not bound by their policies :3

also, don't they have an email masking option? i remember seeing some generated @github.com email in commit logs

Re: Osgint – OSINT tool to find information about GitHub user

#26

Post by daghamm » Tue, Mar 25, 2025, 9:27 AM UTC

1317 wrote: post #10

ok, but it doesn't actually tell you anything new except the email everything else is literally just the info on the github profile page

Email is visible in commit messages. So nothing new at all

Re: Osgint – OSINT tool to find information about GitHub user

#27

Post by gokayburuc_dev » Tue, Mar 25, 2025, 12:46 PM UTC

Correct me if I'm wrong, but isn't this feature already in Github API Tools?Project dashboards and contributors' e-mail addresses can already be seen in the free Github API Tools.At this point, the only advantage may be to compile all the information together.When data is requested in Json format, Github shares most of the data for free.

Re: Osgint – OSINT tool to find information about GitHub user

#28

Post by astr0n0mer » Wed, Mar 26, 2025, 12:05 AM UTC

compootr wrote: post #25

Xaena wrote: post #20

You may not be the creator, but the intent of this repo appears to be at odds with GitHub's acceptable use policies. For anyone else dealing with recruiters or companies spamming you from your github commit email, it's reportable under information usage restrictions and privacy. https://docs.github.com/en/site-policy/acceptable-use-polici...

as a non-user, I'm not bound by their policies :3 also, don't they have an email masking option? i remember seeing some generated @github.com email in commit logs

That's right, you can enable that email by checking "Keep my email addresses private" at https://github.com/settings/emails#toggle_visibility_note