Check if a publickey is known by GitHub or Gitlab without iterating all users

• ssh-mitm

  42 1,225 8.9 Python

  SSH-MITM - ssh audits made simple (by ssh-mitm)

  

During some audits, it's likely that you find some ssh public keys laying around on some servers.

If you want to verify if this key is known by other services, but you don't have access to those services, this task might be hard.

SSH-MITM has an additional command, which allows to check if a public ssh key is known by GitHub, GitLab, and other code hosters. It's not limited to GitHub and other major platforms and even works with each service, which is accessible over SSH.

First you must install SSH-MITM. It's recommended to use the AppImage, because this works out of the box on most Linux machines.

$ wget https://github.com/ssh-mitm/ssh-mitm/releases/latest/download/ssh-mitm-x86_64.AppImage

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

Suggest a related project