Skip to content
A tool for searching a Git repository for interesting content
Go
Branch: master
Clone or download
Latest commit 217c245 Oct 23, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitignore
LICENSE Initial commit Jul 30, 2019
README.md Update README.md Oct 23, 2019
commit.go
main.go
patterns.json Removed test regex Oct 23, 2019
signatures.go grep gettin gthere Sep 6, 2019

README.md

GitHunter

Every now and then, on an internal test, you'll land on a box with a Git repository already checked out into directory. GitHunter will help you search that repository for anything juicy which could help you with other areas of your test.

GitHunter looks for:

  • Keywords in commit messages
  • Keywords in files
  • Interesting file names

Thanks to @michenriksen for allowing me to include his existing Gitrob signatures for doing the file name checks.

For the two keyword checks, the script uses a customisable JSON file to allow you to do either simple or regular expressesion searches, meaning you can target the discovery to your client's environment.

Installation

  1. Set up your Go environment.
  2. Checkout the project:
    go get https://github.com/digininja/GitHunter/
    
  3. Change into the project directory:
    cd ~/go/src/github.com/digininja/GitHunter/
    
  4. Get any dependencies:
    go get ./...
    

Usage

Usage is fairly simple, by default, GitHunter will look in the current directory for a .git directory and, if it finds one, will parse through it and show anything interesting it finds in either filenames or in commit comments. You can specify a different directory for the repository with the -gitdir parameter.

If you want to expand what is searched to include file contents at each commit, you can add the -grep parameter, but be warned, git, on my box at least, runs single threaded, and can take a long time to do the grepping on a large repository. It actually failed trying to grep through Metasploit, due to the sheer number of commits and content. Still worth trying it though, especially on smaller repos, as you may find something.

If you want a dump of the commit logs, without any commentary, then you can use the -dump parameter.

To specify a custom patterns file, use -patterns and to have the output without any fancy colours (easier for parsing) use -nocolours.

Testing things out

If you want a repository to test things on, have a look at my Leaky Repo which contains quite a few interesting things to find.

You can’t perform that action at this time.