Open-Source Code
In the following sections, we’ll explore various online tools and resources
we can use to passively gather information.
Code stored online can provide a glimpse into the programming languages
and frameworks used by an organization.
On a few rare occasions, developers have even accidentally
committed sensitive data and credentials to public repos.
The search tools for some of these platforms
will support the Google search operators that we discussed earlier in this Topic.
GitHub’s search, for example, is very flexible.
We can use GitHub to search a user’s or organization’s repos;
however, we need an account if we want to search across all public repos.
Once logged in to our Github account,
we can search MegaCorp One’s repos for interesting information.
Let’s use filename:users to search for any files with the word “users” in the name.
Our search only found one file - xampp.users.
This is nevertheless interesting
because XAMPP is a web application development environment.
This file appears to contain a username and password hash,
which could be very useful when we begin our active attack phase.