vmfunc

vmfunc / gh-os

Public

github OSINT PII scanner. enumerate emails and identifying info from any github account

19
1
69% credibility
Found Mar 16, 2026 at 19 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
Python
AI Summary

A scanner that collects and organizes personal emails and identifying details from a GitHub user's public profile, activities, repositories, keys, and notes.

How It Works

1
👀 Spot a GitHub user

You notice a GitHub account and get curious about all the personal details they've shared publicly.

2
💻 Prepare the scanner

You set up the simple scanner on your computer with a couple of easy helpers.

3
🎯 Enter the username

You type in the GitHub username you want to check and choose any extra options like including copies.

4
🚀 Start gathering info

The scanner springs to life, pulling details from profiles, activities, security keys, and full histories.

5
⏳ Watch it work

You follow along with colorful progress bars as it checks everything thoroughly.

📊 See the full report

A nice colored list of all personal emails, names, sources, and profile info appears, making it easy to spot the real gems.

Sign up to see the full architecture

4 more

Sign Up Free

Star Growth

See how this repo grew from 19 to 19 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is gh-os?

gh-os is a Python CLI tool for GitHub OSINT that scans any user's public profile, repos, gists, events, GPG/SSH keys, and social accounts to extract emails, names, companies, locations, and other PII. Run `python gh_os.py username -t github_token` to get a color-coded table of deduped findings or pipe JSON output for scripting, like filtering real emails from torvalds or gh osang dresden. It solves the pain of manually hunting leaked info across GitHub surfaces, beating API limits by cloning repos for full commit history.

Why is it gaining traction?

Unlike basic GitHub API scrapers, gh-os bare-clones repos for unlimited git log scans, pulls 90-day events, regexes gists under 50KB, and fingerprints keys—covering more ground than gh-ost or github script alternatives. Developers dig the progress bars, noreply/bot dimming, and env var token support (GITHUB_TOKEN for 5000 req/hr), plus JSON for github osint discord bots or github copilot chat integrations in 2025 workflows.

Who should use this?

Security analysts probing github github_personal_access_token leaks in enterprise repos, OSINT hunters targeting users like gh osterbauer neunkirchen or gh oswald unterbergla, and pentesters mapping attack surfaces via github github_workspace exposures. Skip if you're just browsing github pages or github repo stats—it's for deep PII enumeration.

Verdict

Grab it for quick GitHub recon if you're in OSINT, but with 19 stars and 0.699999988079071% credibility score, treat as a rough prototype: solid README, no tests, single-script maturity. Pair with a token and --max-repos 100 for reliable results.

(178 words)

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.