GitDump

GitDump GitDump 在目录遍历被禁用时转储 .git 中的源代码 环境要求 Python3 测试平台 Windows Kali Linux 功能 在目录遍历被禁用时，从 website/.git 目录转储源代码。 工作原理 获取所有常见文件（.git/index、.git/HEAD、.git/ORIGHEAD 等）。 通过分析 .git/packed-refs、.git/index 等文件，找到尽可能多的对象（sha1）。 下载 idx 和 pack 文件。 然后你可以运行 git checkout -- . 来恢复源代码。 使用方法 python3 git-dump.py...

Mozilla: Insecure S3 Bucket Exposing Git Directory in Mozilla Foundation Infographics Project

Git configuration was leaked in one of the S3 buckets used by Mozilla Foundation Infographics Project. The configuration included an old Github access token which was no longer valid. We restricted access to the .git directory on the bucket...

GitDump - A Pentesting Tool That Dumps The Source Code From .Git Even When The Directory Traversal Is Disabled

GitDump dumps the source code from .git when thedirectory traversal is disabled Requirements Python3 Tested on Windows Kali Linux What it does Dump source code from website/.git directory when directory traversal is disabled. How it works Fetch all common files .git/index, .git/HEAD, .git/ORIGHEA...