gitjacker

gitjacker Gitjacker 能够从误上传了 .git 目录的站点下载 git 仓库并提取其内容。即使禁用了目录列表，它仍能恢复仓库的很大一部分。 仅用于教育/渗透测试用途。 更多信息请访问 https://liam-galvin.co.uk/security/2020/09/26/leaking-git-repos-from-misconfigured-sites.html 安装 root@kitploit: curl -s "https://raw.githubusercontent.com/liamg/gitjacker/master/scripts/install.sh...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

EUVD-2022-2393

Malicious code in bioql PyPI...

CVE-2021-29417

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

Arbitrary Code Execution

github.com/liamg/gitjacker is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper handling of file paths, allowing directory traversal with a crafted .git directory...

GO-2023-1911 gitjacker arbitrary code execution in github.com/liamg/gitjacker

gitjacker arbitrary code execution in github.com/liamg/gitjacker...

Fedora: Security Advisory for gitjacker (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: gitjacker-0.0.2-9.fc36

Leak git repositories from misconfigured websites...

Fedora: Security Advisory for gitjacker (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: gitjacker-0.0.2-6.fc35

Leak git repositories from misconfigured websites...

GHSA-4J5X-F394-XX79 gitjacker arbitrary code execution

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

gitjacker arbitrary code execution

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

CVE-2021-29417

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

CVE-2021-29417

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

Directory traversal

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

CVE-2021-29417

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal...

CVE-2021-29417

CVE-2021-29417 affects the GitJacker project. Affected software: gitjacker prior to version 0.1.0. Root cause: directory traversal via a crafted ".git" directory enables remote code execution. Impact: arbitrary code execution with network access and no authentication, as described in multiple sou...

PT-2021-18200 · Gitjacker · Gitjacker

Name of the Vulnerable Software and Affected Versions: gitjacker versions prior to 0.1.0 Description: The issue allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal. This enables attackers to potentially gain control over the system...

Liam Galvin gitjacker 路径遍历漏洞

Liam Galvin gitjacker is a Liam Galvin open source application. It is used to extract the contents of a git error upload directory from a site where it was uploaded. Liam Galvin gitjacker A path traversal vulnerability can be exploited to execute arbitrary code through a crafted .git directory...