Tip No. 7 – Use the ideal tool for each case

To be successful in the search for vulnerabilities, we must have clear ideas and know at all times what we want to find, which is why it is very necessary to always know which tool to use in each case. For example, if what we want is to analyze a repository, the best way to analyze it would be with a reconnaissance tool such as gitgrepper: https://gist.github.com/EdOverflow/a9aad69a690d97a8da20cd4194ca6596.

Here is an application code sample; as you can see, it is very simple:

Figure 11.1 – Application code sample

First, you should find the repositories and clone them, then analyze their code for juicy information.

It’s also important to note the following: imagine you come across a GitLab login panel. Here’s a tip: if you access/explore it, there’s a chance the instance is misconfigured and doesn’t require authentication. That’s why it is important to...