Cross Fork Object Reference (CFOR) Exploit

A simple Python tool with a friendly GUI to find and save GitHub commits from repositories or organizations. exploring commits, downloading their changes.

What It Does

• Find Commits: Scans GitHub repositories or organizations to discover hidden or deleted commits using GitHub's API.
• Customizable: Set thread count, batch size, or use a proxy for scanning.

What You Need

• GitHub Personal Access Token (PAT): You need a token from your GitHub account with repo permissions.

How to Set It Up

1. Download or clone this project to your computer:

   git clone https://github.com/Abdulrahman-Gamil/Cross-Fork-Object-Reference-CFOR-Exploit.git
   cd Cross-Fork-Object-Reference-CFOR-Exploit/

How to Use It

1. Start the tool:

   python CFOR_exploit.py

2. Enter your GitHub Personal Access Token in the "GitHub Token" field. This must come from your GitHub account

3. Choose what to scan:

   • Repository: Paste a repo URL (https://github.com/owner/repo).
   • Organization: Type an organization name or pick a text file with organization names (one per line).

4. (Optional) Adjust settings:

   • Thread Count: How many tasks run at once (default: 2).
   • Batch Size: Commits checked per request (default: 300).
   • Proxy: Add a proxy like http://host:port if needed.

5. Start to begin scanning.

6. Watch the output log for updates.

7. Click Export Commits to save commit URLs to a text file.

8. Use Stop to pause or Clear Output to reset the log.

Notes

• Big Repos: For large repositories, try increasing the thread count or batch size for faster scanning.
• Rate Limits: The tool waits and retries if GitHub limits your requests.

Made By 0x41 0x47 0x4D 0x41