Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets
- This guest post by independent security researcher Ben Zimmermann was developed in collaboration with the Kingfisher team at MongoDB.
- Ben specializes in large-scale credential exposure research across public source-hosting platforms.
- TL;DR: I scanned 7,256,531 public repositories on Gitee (China's largest indigenous Git hosting platform), using both TruffleHog and Kingfisher, and found 26,400 unique verified-live credentials.
Unverified
- This guest post by independent security researcher Ben Zimmermann was developed in collaboration with the Kingfisher team at MongoDB.
- Ben specializes in large-scale credential exposure research across public source-hosting platforms.
- TL;DR: I scanned 7,256,531 public repositories on Gitee (China's largest indigenous Git hosting platform), using both TruffleHog and Kingfisher, and found 26,400 unique verified-live credentials.
Sources: Mongodb