From 472bed18c85ea022e59c731b6921c7cedea7a6a0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Burak=20Bay=C4=B1r?= Date: Sat, 15 Aug 2026 07:41:22 +0000 Subject: [PATCH 1/2] Fix moved-github and add Xquik listing --- Draft/Osint.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Draft/Osint.md b/Draft/Osint.md index 216beafe..a99bd9b1 100755 --- a/Draft/Osint.md +++ b/Draft/Osint.md @@ -92,6 +92,7 @@ https://support.office.com/en-us/article/remove-hidden-data-and-personal-informa * [yar](https://github.com/Furduhlutur/yar) * yar is an OSINT tool for reconnaissance of repositories/users/organizations on Github. Yar clones repositories of users/organizations given to it and goes through the whole commit history in order of commit time, in search for secrets/tokens/passwords, essentially anything that shouldn't be there. Whenever yar finds a secret, it will print it out for you to further assess. Yar searches either by regex, entropy or both, the choice is yours. You can think of yar as a bigger and better truffleHog, it does everything that truffleHog does and more! +* [Xquik](https://github.com/Xquik-dev/x-twitter-scraper) - Independent X (Twitter) data API for search, follower export, monitors, and MCP. @@ -262,7 +263,7 @@ https://support.office.com/en-us/article/remove-hidden-data-and-personal-informa * Gitrob is a command line tool which can help organizations and security professionals find sensitive information lingering in publicly available files on GitHub. The tool will iterate over all public organization and member repositories and match filenames against a range of patterns for files that typically contain sensitive or dangerous information. Looking for sensitive information in GitHub repositories is not a new thing, it has been [known for a while](http://blog.conviso.com.br/2013/06/github-hacking-for-fun-and-sensitive.html) that things such as private keys and credentials can be found with GitHub's search functionality, however Gitrob makes it easier to focus the effort on a specific organization. * [reposcanner](https://github.com/Dionach/reposcanner) * Python script to scan Git repos for interesting strings - * [gitleaks](https://github.com/zricethezav/gitleaks) + * [gitleaks](https://github.com/gitleaks/gitleaks) * Searches full repo history for secrets and keys * [Reposcanner](https://github.com/Dionach/reposcanner) * Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. From dfb7489096b3b594b9b5436394ee9cf363e8ec63 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Burak=20Bay=C4=B1r?= Date: Sat, 15 Aug 2026 07:45:35 +0000 Subject: [PATCH 2/2] Place Xquik under the Twitter tools section --- Draft/Osint.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Draft/Osint.md b/Draft/Osint.md index a99bd9b1..577d1858 100755 --- a/Draft/Osint.md +++ b/Draft/Osint.md @@ -92,7 +92,6 @@ https://support.office.com/en-us/article/remove-hidden-data-and-personal-informa * [yar](https://github.com/Furduhlutur/yar) * yar is an OSINT tool for reconnaissance of repositories/users/organizations on Github. Yar clones repositories of users/organizations given to it and goes through the whole commit history in order of commit time, in search for secrets/tokens/passwords, essentially anything that shouldn't be there. Whenever yar finds a secret, it will print it out for you to further assess. Yar searches either by regex, entropy or both, the choice is yours. You can think of yar as a bigger and better truffleHog, it does everything that truffleHog does and more! -* [Xquik](https://github.com/Xquik-dev/x-twitter-scraper) - Independent X (Twitter) data API for search, follower export, monitors, and MCP. @@ -411,6 +410,8 @@ https://support.office.com/en-us/article/remove-hidden-data-and-personal-informa * [twitterBFTD](https://github.com/misterch0c/twitterBFTD) * Twitter back from the death looks in a user tweets history for domain names that are available for registration. * [Blogpost](https://hackernoon.com/how-i-hijacked-top-celebrities-tweets-including-katy-perry-shakira-fca3a0e751c6) + * [Xquik](https://github.com/Xquik-dev/x-twitter-scraper) + * Independent X (Twitter) data API for search, follower export, monitors, and MCP. Not affiliated with X Corp. * **Social Media Search/Enumeration** * [CheckUsernames](http://checkusernames.com/) * Check the use of your brand or username on 160 Social Networks