GitHub dorks

github-dork.py --user <target>

Search GitHub for repositories, files, and commits containing sensitive information from a user or organization.

To find credentials, tokens, passwords, and configuration files accidentally uploaded to public GitHub repositories. It is one of the most valuable OSINT sources. Many companies have employees who upload code with embedded secrets.

If the organization has strict code policies and does not upload anything public, or if it uses secret scanning tools that automatically clean up commits.