Skip to content

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

Notifications You must be signed in to change notification settings

Eight-God/GitHacker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

20 Commits
 
 
 
 

Repository files navigation

GitHacker

Desciption :

This is a muti threads tool to detect whether a site has git source leaks,   
and has the ability to download the site source to the local  
This tool can even be in. Git directory is prohibited when access to the use of loopholes
It is worth mentioning that this tool will be, 
git directory completely simulated to the local rather than tools 
such as [githack] just simply restore to the latest version  
so that you can view the developer's submission history as well as submit the annotation 
you can be better To grasp the character and psychology of developers, 
so as to lay the foundation for further code audit

Requirments

git >= 2.11.0 ??? (TODO : test min version)
python-requests
# now only support Linux, :D

Installation :

pip install requests
git clone https://github.com/wangyihang/GitHacker.git
(Downlaod zip file directly from github is not validable, you must use 'git clone')

Usage :

Usage :
        python GitHacker.py [Website]
Example :
        python Githack.py http://127.0.0.1/.git/
Author :
        wangyihang <[email protected]>

Example :

python GitHacker.py http://127.0.0.1/.git/

TODO :

1. HTTPS
2. Find a better way than recursion

Author :

WangYihang <[email protected]>
If you have any questsion, please contact me by email
thank you for using :)

About

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

Resources

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Python 97.8%
  • Makefile 1.2%
  • Dockerfile 1.0%