Locked GitDump - A Pentesting Tool

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

GitDump dumps the source code from .git when the directory traversal is disabled

Requirements

    Python3

Tested on

    Windows
    Kali Linux

What it does

    Dump source code from website/.git directory when directory traversal is disabled.

How it works

    Fetch all common files (.git/index, .git/HEAD, .git/ORIG_HEAD, etc.).
    Find as many objects (sha1) as possible by analyzing .git/packed-refs, .git/index, etc.
    Download idx and pack files.
    Now you can run git checkout -- . to retrieve source code.

This is the hidden content, please

• Sign In
• or
• Sign Up