Acid
Phishing Expert
2
MONTHS
2 2 MONTHS OF SERVICE
LEVEL 1
300 XP
I know that it's a common thing but non-github users still don not know how you do that.
You can actually view a github user's personal email and perhaps his real name since github makes the registered email the commit mail by default.
And since github client sets username to your windows user's name, lots of people who hangout "anonymous" online leak their info without even noticing it.
Step 1:
- Go to a repository of your target user
- Open the commit history of the repo
- Click to a commit, preferably a verified one because that it means the commit was made from github web
(notice that my target has "anonymous" profile pic xd)
Step 2:
Now once the commit page is loaded, simply modify the url by appending ".patch" at the end of it,
for example this will:
Code:
become this:
Code:
And here you go:
I know any git client user knows this but abusing git logs in this way is very useful. I was able to dox lots of users with this method.
Anyways thanks for reading this thread.
You can actually view a github user's personal email and perhaps his real name since github makes the registered email the commit mail by default.
And since github client sets username to your windows user's name, lots of people who hangout "anonymous" online leak their info without even noticing it.
Step 1:
- Go to a repository of your target user
- Open the commit history of the repo
- Click to a commit, preferably a verified one because that it means the commit was made from github web
(notice that my target has "anonymous" profile pic xd)
Step 2:
Now once the commit page is loaded, simply modify the url by appending ".patch" at the end of it,
for example this will:
Code:
Code:
[hide]https://github.com/XXXXXX/YYYYYYY/commit/b62df321e9362940258c610517485f690a24d437[/hide]
Code:
Code:
[hide]https://github.com/XXXXXX/YYYYYYY/commit/b62df321e9362940258c610517485f690a24d437.patch[/hide]
And here you go:
I know any git client user knows this but abusing git logs in this way is very useful. I was able to dox lots of users with this method.
Anyways thanks for reading this thread.