gitGRAB

gitGRAB Install Requests pip install requests 执行程序 python3 gitgrab.py...

GitHacker

GitHacker 一个多线程的 .git 文件夹利用工具。即使禁用了目录列表（DirectoryListings），也能通过暴力破解已知引用来完整重建目标仓库——包括源代码、提交历史、分支、暂存区、远程仓库和标签。 配套研究网站位于 https://githacker.pages.dev ，发布了： 一份可重现的 基准测试 ，针对其他六个掠夺工具（GitTools、dvcs-ripper、GitHack、git-dumper、dumpall、rbozburun/git-hacker）在五种 Web 服务器场景下的表现。 一套对抗性的 安全测试套件 ，针对恶意构造的 .git/...

git_rce

CVE-2024-32002 PoC 1. Debes configurar la opción de enlace simbólico de git de la siguiente manera: git config --global core.symlinks true 2. Luego explota CVE-2024-32002 con el siguiente comando: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Escenario de Ataque...

git-remote-gcrypt

git-remote-gcrypt GNU Privacy Guard 加密的 git 远程仓库 :手册章节: 1 描述 git-remote-gcrypt 是一个 git 远程辅助工具，用于推送和拉取使用 GnuPG 加密的仓库，采用自定义格式。该远程辅助工具处理以 gcrypt:: 为前缀的 URI。 支持的后端有 local、rsync:// 和 sftp://，仓库以一组文件的形式存储；也可以是任意 ，此时 gcrypt 会将相同的表示存储在一个 git 仓库中，通过任意 git 传输桥接。如果可能，优先使用 local 或 rsync://；性能方面的讨论见下文“性能”部分。...

binsync

BinSync BinSync es una herramienta de colaboración para decompiladores construida sobre el sistema de versionado Git para permitir la colaboración en ingeniería inversa con granularidad fina, independientemente del decompilador. BinSync es desarrollado por mahaloz, el equipo de angr y el...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. sudo python3 -m pip install gdbfrontend if it is already installed and you are upgrading su...

CVE-2019-10392

CVE-2019-10392 RCE con Git Client Plugin 2.8.2 Autenticado 0x01 Inicio de Docker docker run -p 8080:8080 -p 50000:50000 jenkins/jenkins:lts-alpine 0x02 Entorno de vulnerabilidad Jenkins 2.176.3 Git Client Plugin 2.8.2 https://updates.jenkins-ci.org/download/plugins/git-client/ Git Plugin 3.12.0...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git 概念验证 从 Docker 拉取 docker pull qweraqq/cve-2018-11235-git-submodule-rce 启动 Git HTTP 服务器 docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce 概念验证 git clone --recurse-submodules http://git.gitserver/malicious.git...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets 关于 git-all-secrets 是一款能够执行以下操作的工具： 克隆某个组织的多个公共/私有 GitHub 仓库并进行扫描， 克隆组织中某个用户的多个公共/私有 GitHub 仓库并进行扫描， 克隆某个组织的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/秘密 Gist 并进行扫描， 克隆组织中某个团队的所有仓库并进行扫描， 以上全部功能可以一起完成！没错！只需提供组织名称，即可获取该组织的所有秘密。如果你还想获取组织中某个团队的秘密，只需在组织名称旁注明团队名称。 同时支持克隆和扫描 GitHu...

CVE-2026-60004-POC

CVE-2026-60004 — Ejecución Remota de Código Pre-Auth en Gitea CVSS 9.8 ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

Exploits + Shellcode + GHDB

漏洞利用数据库 Git 仓库 这是漏洞利用数据库的官方仓库，一个由Offensive Security赞助的项目。 我们的仓库包括： 漏洞利用与Shellcode：gitlab.com/exploit-database/exploitdb 二进制漏洞利用：gitlab.com/exploit-database/exploitdb-bin-sploits 论文：gitlab.com/exploit-database/exploitdb-papers...

cve-2020-27955

cve-2020-27955 cve-2020-27955 复现 1. 创建github仓库 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

hooky

hooky Este repositorio es un submódulo para https://github.com/markuta/CVE-2024-32002, que contiene un simple hook ubicado en y/hooks/post-checkout para abrir la calculadora en sistemas macOS: open -a Calculator.app Puedes encontrar más información sobre la vulnerabilidad aquí y aquí...

CVE-2026-70357

The Gitea repository migration feature is vulnerable to a Server-Side Request Forgery (SSRF) via DNS rebinding . While Gitea validates the migration hostname against allow and block lists, the Git subprocess independently resolves the hostname during the Git clone operation . An attacker controll...

CVE-2026-104636

The Gitea platform is vulnerable to a Server-Side Request Forgery (SSRF) flaw. While the system validates initial remote URLs for push mirrors, wiki remote checks, and migrated pull request head fetches, the subsequent raw Git operations follow HTTP redirects without revalidating the new destinat...

CVE-2026-95106

Gitea is vulnerable to a review and execution mismatch caused by pushing Git trees with duplicate tree entries . While Git's internal consistency checks typically reject such trees, Gitea allowed them. This creates a discrepancy where Gitea's web views resolve a path to the first entry, but git c...

CVE-2026-89430

The Gitea push mirror functionality contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) and a Time-of-check Time-of-use (TOCTOU) race condition (CWE-367). The software only validates a push mirror's remote address against [migrations] allow and block lists during creation. Durin...

gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...