git-dumper
MIT๐ฅ Exploitation ยท Python
git-dumper downloads and reconstructs Git repositories from web servers where the .git directory is accidentally exposed. Many deployments leave .git accessible, exposing full source code, commit history, configuration files, and potentially credentials. git-dumper handles the complex process of downloading individual Git objects, reconstructing the pack files, and rebuilding a complete working repository. It supports recursive object resolution, handles missing objects gracefully, and works through redirects and basic authentication. A critical tool for web application pentesting where source code access dramatically accelerates vulnerability discovery.
Installation
$ pip install git-dumperUse Cases
- Dumping exposed .git directories from web servers
- Recovering full source code and commit history
- Finding credentials in Git commit history
- Source code review from accidentally exposed repositories
Tags
Details
- Category
- ๐ฅ Exploitation
- Language
- Python
- Repository
- arthaud/git-dumper
- License
- MIT
- Platforms
- ๐งlinux๐macos๐ชwindows
Links
Community Reviews
Alternatives & Comparisons
More in Exploitation
Metasploit Framework
RubyThe world's most used penetration testing framework. Exploit development, payload delivery, post-exploitation.
BloodHound
GoActive Directory attack path mapping. Visualizes privilege escalation paths using graph theory.
Impacket
PythonCollection of Python classes for working with network protocols. Essential for Windows/AD pentesting.
CrackMapExec
PythonSwiss army knife for pentesting Active Directory. SMB, LDAP, MSSQL, WinRM enumeration and exploitation.
Evil-WinRM
RubyUltimate WinRM shell for pentesting. Upload/download, in-memory PowerShell, DLL injection, pass-the-hash.
Covenant
C#.NET C2 framework. Collaborative, web-based interface for red team operations and implant management.