Introduction

GitPhish is an innovative open-source tool designed for security assessments focused on GitHub's device code authentication flow. This tool enhances the capabilities of red teams and detection engineers by simulating realistic attack scenarios, ultimately improving organizational resilience against phishing attacks and validating the identification of suspicious OAuth flows.