{"repo":"AdnaneKhan/gato-x","free":true,"listed":false,"github":"https://github.com/AdnaneKhan/gato-x","clone":"git clone https://github.com/AdnaneKhan/gato-x.git","description":"GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.","language":"Python","stars":569,"topics":["bugbounty","cicd","github","github-actions","hacking","red-team"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"Gato (Github Attack TOolkit) - Extreme Edition Gato-X is a FAST scanning and attack tool for GitHub Actions pipelines. You can use it to identify Pwn Requests, Actions Injection, TOCTOU Vulnerabilities, and Self-Hosted Runner takeover at scale using just a single API token. It will also analyze cross-repository workflows and reusable actions. This surfaces vulnerabilities that other scanners miss because they only scan workflows within a single repository. Gato-X is an operator focused tool that is tuned to avoid false negatives. It will have a higher false positive rate than SAST tools like CodeQL, but Gato-X will give you everything you need to quickly determine if something is a true positive or not! The search and enumerate modes are safe to run on all public repositories, and you will not violate any rules by doing so. Gato-X's attack features should only be used with authorization, and make sure to follow responsible disclosure if you find vulnerabilities with Gato-X. Gato-X is a powerful tool and should only be used for ethical security research purposes. Documentation For comprehensive documentation, please visit the Gato-X Documentation site. What is Gato-X? Gato-X is an offensive security tool designed to identify exploitable GitHub Actions misconfigurations or privilege escalation paths. It focuses on several key areas: Self-Hosted Runner enumeration using static analysis of workflow files and analysis of workflow run logs Pwn Request and Actions Injection enumerat","default_branch":null,"files":null,"tree":[],"storefront":"/r/AdnaneKhan","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/AdnaneKhan/gato-x/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}