ENNAENNA

git-dumper vs Gitleaks

GitHub Stats

2.5k
Stars
26.3k
296
Forks
2.0k
10
Issues
358
1mo ago
Updated
1mo ago
MIT
License
MIT
Python
Language
Go

About git-dumper

git-dumper downloads and reconstructs Git repositories from web servers where the .git directory is accidentally exposed. Many deployments leave .git accessible, exposing full source code, commit history, configuration files, and potentially credentials. git-dumper handles the complex process of downloading individual Git objects, reconstructing the pack files, and rebuilding a complete working repository. It supports recursive object resolution, handles missing objects gracefully, and works through redirects and basic authentication. A critical tool for web application pentesting where source code access dramatically accelerates vulnerability discovery.

About Gitleaks

Gitleaks is a Go-based tool for scanning Git repositories to identify hardcoded secrets, such as passwords, API keys, and tokens. It integrates seamlessly into CI/CD pipelines, providing continuous monitoring and alerting for potential security leaks. Gitleaks helps developers maintain secure codebases by preventing the accidental exposure of sensitive information.

Platform Support

๐Ÿงlinux๐ŸŽmacos๐ŸชŸwindows
๐Ÿงlinux๐ŸŽmacos๐ŸชŸwindows

Tags

git-dumper only

git-exposuresource-codeweb-exploitationinformation-disclosurerecon

Gitleaks only

secretsgitci-cdapi-keys