Gato-X
A fast scanning and attack toolkit for identifying and exploiting GitHub Actions vulnerabilities at scale.
What is Gato-X?
Gato-X is an offensive security toolkit for GitHub Actions that identifies and exploits misconfigurations and vulnerabilities in CI/CD pipelines. It performs fast static analysis across thousands of repositories to detect issues like self-hosted runner takeovers, Pwn Requests, and secrets exposure that traditional scanners miss.
Red teamers, bug bounty hunters, and security engineers who need to identify and validate GitHub Actions vulnerabilities at scale.
Developers choose Gato-X for its speed, cross-repository analysis capabilities, and operator-focused design that prioritizes finding all potential vulnerabilities over minimizing false positives.
Overview
GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
Use Cases
Best For
- Scanning thousands of repositories for GitHub Actions vulnerabilities quickly
- Identifying cross-repository workflow security issues
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
