Skip to content
🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind
Branch: master
Clone or download
Latest commit 4ecabf9 Apr 27, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
GitHacker.py [+] Disable content output Aug 31, 2018
README.md Update README.md Apr 27, 2019

README.md

GitHacker

Desciption:

This is a multiple threads tool to detect whether a site has git source leaks,   
and has the ability to download the site source to the local  
This tool can even be in. Git directory is prohibited when access to the use of loopholes
It is worth mentioning that this tool will be, 
git directory completely simulated to the local rather than tools 
such as [githack] just simply restore to the latest version  
so that you can view the developer's submission history as well as submit the annotation 
you can be better To grasp the character and psychology of developers, 
so as to lay the foundation for further code audit

Why you need this tool not other tools

image.png

Requirments:

git >= 2.11.0
python-requests
Linux envrionment

Installation:

# Install requests
pip install requests
# Download source
# Notice: NO NOT DOWNLOAD ZIP FROM GITHUB
git clone https://github.com/wangyihang/GitHacker.git

Usage :

Usage :
        python GitHacker.py [Website]
Example :
        python Githack.py http://127.0.0.1/.git/
Author :
        wangyihang <wangyihanger@gmail.com>

Example:

python GitHacker.py http://127.0.0.1/.git/

TODO:

  • Download tags and branches when Index enabled
  • Try common tags and branches when Index disabled
  • find packed refs

Video:

asciicast

Licsence

THE DRINKWARE LICENSE

<wangyihanger@gmail.com> wrote this file. As long as 
you retain this notice you can do whatever you want 
with this stuff. If we meet some day, and you think 
this stuff is worth it, you can buy me the following
drink(s) in return.

Red Bull
JDB
Coffee
Sprite
Cola
Harbin Beer
etc

Wang Yihang
You can’t perform that action at this time.