WangYihang/GitHacker: 一个 Git 源码泄露利用工具 , 可恢复整个 Git 仓库 , 用于白盒审计以及分析开发者的思维
2018-06-03 23:15:06 Author: github.com(查看原文) 阅读量:504 收藏

Desciption :

This is a muti threads tool to detect whether a site has git source leaks,   
and has the ability to download the site source to the local  
This tool can even be in. Git directory is prohibited when access to the use of loopholes
It is worth mentioning that this tool will be, 
git directory completely simulated to the local rather than tools 
such as [githack] just simply restore to the latest version  
so that you can view the developer's submission history as well as submit the annotation 
you can be better To grasp the character and psychology of developers, 
so as to lay the foundation for further code audit

Requirments

git >= 2.11.0 ??? (TODO : test min version)
python-requests
# now only support Linux, :D

Installation :

pip install requests
git clone https://github.com/wangyihang/GitHacker.git
(Downlaod zip file directly from github is not validable, you must use 'git clone')

Usage :

Usage :
        python GitHacker.py [Website]
Example :
        python Githack.py http://127.0.0.1/.git/
Author :
        wangyihang <[email protected]>

Example :

python GitHacker.py http://127.0.0.1/.git/

TODO :

1. HTTPS
2. Find a better way than recursion

Author :

WangYihang <[email protected]>
If you have any questsion, please contact me by email
thank you for using :)

文章来源: https://github.com/WangYihang/GitHacker
如有侵权请联系:admin#unsafe.sh