New port: security/gitjacker: Leak git repositories from misconfigure…

…d websites
freebsd · May 7, 2021 · c6bfc1a · c6bfc1a
1 parent 37342bf
commit c6bfc1a
Show file tree

Hide file tree

Showing 4 changed files with 33 additions and 0 deletions.
diff --git a/security/Makefile b/security/Makefile
@@ -173,6 +173,7 @@
     SUBDIR += git-crypt
     SUBDIR += git-remote-gcrypt
     SUBDIR += git-secret
+    SUBDIR += gitjacker
     SUBDIR += gnome-keyring
     SUBDIR += gnome-keyring-sharp
     SUBDIR += gnome-ssh-askpass

diff --git a/security/gitjacker/Makefile b/security/gitjacker/Makefile
@@ -0,0 +1,19 @@
+PORTNAME=	gitjacker
+DISTVERSIONPREFIX=	v
+DISTVERSION=	0.1.0
+CATEGORIES=	security
+
+MAINTAINER=	yuri@FreeBSD.org
+COMMENT=	Leak git repositories from misconfigured websites
+
+LICENSE=	PD
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+USES=		go:modules
+
+GO_MODULE=	github.com/liamg/gitjacker
+GO_TARGET=	./cmd/${PORTNAME}
+
+PLIST_FILES=	bin/${PORTNAME}
+
+.include <bsd.port.mk>
diff --git a/security/gitjacker/distinfo b/security/gitjacker/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1620355103
+SHA256 (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.mod) = b3db6be3fc30d6f4246b98b62a9a1aaeeb4baf56813250be44bc31d1346faebf
+SIZE (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.mod) = 341
+SHA256 (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.zip) = 850de0ee593d0292c248275b1bd3aec2ec98f6336329aab516087544a1f345dc
+SIZE (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.zip) = 239095
diff --git a/security/gitjacker/pkg-descr b/security/gitjacker/pkg-descr
@@ -0,0 +1,8 @@
+Gitjacker downloads git repositories and extracts their contents from sites
+where the .git directory has been mistakenly uploaded. It will still manage
+to recover a significant portion of a repository even where directory listings
+are disabled.
+
+For educational/penetration testing use only.
+
+WWW: https://github.com/liamg/gitjacker