# GitHacker2

**Repository Path**: wangta00/GitHacker2

## Basic Information

- **Project Name**: GitHacker2
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2021-05-07
- **Last Updated**: 2024-11-26

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# GitHacker

#### Desciption

This is a multiple threads tool to detect whether a site has the `.git` folder 
leakage vulnerability. It is able to download the target `.git` folder almost 
completely. This tool also works when the `DirectoryListings` feature is 
disabled. It is worth mentioning that this tool will download almost all files 
of the target git repository and then rebuild them locally, which makes this 
tool State of the art in this area. For example, tools like [githack] just 
simply restore the latest version. With GitHacker's help, you can view the 
developer's commit history, which makes a better understanding of the character 
and psychology of developers, so as to lay the foundation for further code 
audition.

#### Comparison of other tools

![image.png](https://upload-images.jianshu.io/upload_images/2355077-64bde1bcf617e0cf.png?imageMogr2/auto-orient/strip%7CimageView2/2/w/1240)

* [【.git/ folder attack】Comparison of attack tools (Part ONE)](https://www.youtube.com/watch?v=Bs3QpVGf2uk)
* [【.git/ folder attack】Comparison of attack tools (Part TWO)](https://www.youtube.com/watch?v=Xzg4kQt4qEo)

#### Requirments

* git >= 2.11.0
* python-requests
* Linux envrionment

#### Installation
```
# Install requests
pip install requests
# Download source
git clone https://github.com/wangyihang/GitHacker.git
```

#### Usage :
```
Usage :
        python GitHacker.py [Website]
Example :
        python Githacker.py http://127.0.0.1/.git/
Author :
        wangyihang <wangyihanger@gmail.com>
```

#### Example
```
python GitHacker.py http://127.0.0.1/.git/
```

#### TODO:
- [ ] Download tags and branches when Index enabled
- [ ] Try common tags and branches when Index disabled
- [ ] [find packed refs](https://github.com/WangYihang/GitHacker/issues/1#issuecomment-487135667)

#### Video

[![asciicast](https://asciinema.org/a/xgRmZ9dNvzhe3T2XRYDJe15Rj.png)](https://asciinema.org/a/xgRmZ9dNvzhe3T2XRYDJe15Rj)

#### Acknowledgement
- [lesion1999](https://github.com/lesion1999)

#### Licsence
```
THE DRINKWARE LICENSE

<wangyihanger@gmail.com> wrote this file. As long as 
you retain this notice you can do whatever you want 
with this stuff. If we meet some day, and you think 
this stuff is worth it, you can buy me the following
drink(s) in return.

Red Bull
JDB
Coffee
Sprite
Cola
Harbin Beer
etc

Wang Yihang
```