GitTools

GitTools ist eine Sammlung von Sicherheitsdienstprogrammen, die darauf ausgelegt sind, exponierte Versionskontrollverzeichnisse auf Webservern zu identifizieren, zu scannen und auszunutzen. Das Projekt bietet Tools zum Auffinden öffentlich zugänglicher Git-Verzeichnisse und zum Extrahieren ihrer Inhalte, um Informationslecks zu identifizieren.

Die Suite umfasst Funktionen zum Herunterladen von Dateien und Ordnerstrukturen von Remote-Repositories, selbst wenn das Directory-Listing deaktiviert ist. Sie enthält zudem ein Wiederherstellungssystem, das Commit-Objekte durchläuft, um Inhalte aus unvollständigen oder beschädigten Versionskontrolldaten wiederherzustellen.

Features

Exposed Repository Discovery - Scans websites to find publicly accessible Git directories that may contain sensitive source code or configuration files.
Directory Scanning Tools - Ships tools for fuzzing and discovering hidden web directories to identify exposed version control leaks.
Git File Path Enumerators - Provides the ability to discover repository structures by iterating through known Git file paths and metadata files via HTTP.
Git Directory Probers - Probes common Git object paths and hash prefixes to extract data when directory listing is disabled.
Web Git Repository Dumpers - Fetches entire .git directories from publicly accessible websites to reconstruct repositories locally even without directory listing.
Exposed Git Directory Scanners - Identifies and scans websites that have accidentally exposed their version control directories to the public.
Exposed Repository Extraction - Downloads source code and metadata from misconfigured version control repositories found during scanning.
Penetration Testing Tools - Includes scripts for automating the reconnaissance and exploitation of leaked Git directories.
Git Object Recoveries - Restores missing or broken content from incomplete Git repositories by iterating through available commit objects.
Git Object Recoverers - Recovers Git objects and commit history by analyzing fetched metadata files.
Repository State Recovery - Provides utilities to recover a codebase from a corrupted state by iterating through commit objects.
Object Reconstruction - Implements a recovery system that traverses commit and tree objects to restore content from corrupted repository data.
Web Application Penetration Testing - Identifies and exploits version control leaks as part of a systematic web application penetration testing process.
OSINT Investigation Tools - Scans GitHub repositories for exposed emails and names
Vulnerability Research - Scripts for researching and extracting data from Git repositories.
Git Repository Analysis - Utilities for exploiting misconfigured .git repositories.
Source Code Reconnaissance - Automated discovery and download of public git repositories.
Web Exploitation - Exploits exposed .git directories.

Star-Verlauf

internetwacheGitTools

Name: internetwache/gittools
Author: internetwache

View on GitHub

4,151 Stars631 ForksShellMIT10 Aufrufe

GitTools

Features

Exposed Repository Discovery - Scans websites to find publicly accessible Git directories that may contain sensitive source code or configuration files.
Directory Scanning Tools - Ships tools for fuzzing and discovering hidden web directories to identify exposed version control leaks.
Git File Path Enumerators - Provides the ability to discover repository structures by iterating through known Git file paths and metadata files via HTTP.
Git Directory Probers - Probes common Git object paths and hash prefixes to extract data when directory listing is disabled.
Web Git Repository Dumpers - Fetches entire .git directories from publicly accessible websites to reconstruct repositories locally even without directory listing.
Exposed Git Directory Scanners - Identifies and scans websites that have accidentally exposed their version control directories to the public.
Exposed Repository Extraction - Downloads source code and metadata from misconfigured version control repositories found during scanning.
Penetration Testing Tools - Includes scripts for automating the reconnaissance and exploitation of leaked Git directories.
Git Object Recoveries - Restores missing or broken content from incomplete Git repositories by iterating through available commit objects.
Git Object Recoverers - Recovers Git objects and commit history by analyzing fetched metadata files.
Repository State Recovery - Provides utilities to recover a codebase from a corrupted state by iterating through commit objects.
Object Reconstruction - Implements a recovery system that traverses commit and tree objects to restore content from corrupted repository data.
Web Application Penetration Testing - Identifies and exploits version control leaks as part of a systematic web application penetration testing process.
OSINT Investigation Tools - Scans GitHub repositories for exposed emails and names
Vulnerability Research - Scripts for researching and extracting data from Git repositories.
Git Repository Analysis - Utilities for exploiting misconfigured .git repositories.
Source Code Reconnaissance - Automated discovery and download of public git repositories.
Web Exploitation - Exploits exposed .git directories.

Open-Source-Alternativen zu GitTools

Ähnliche Open-Source-Projekte, sortiert nach der Anzahl der gemeinsamen Funktionen mit GitTools.

arthaud/git-dumper
arthaud/git-dumper
2,553Auf GitHub ansehen
Pythongitsecurityweb
Auf GitHub ansehen2,553
ffuf/ffuf
ffuf/ffuf
15,618Auf GitHub ansehen
This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I
Gofuzzerinfosecpentesting
Auf GitHub ansehen15,618
jaykali/maskphish
jaykali/maskphish
3,020Auf GitHub ansehen
Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe
Shellhackhackinghacking-tool
Auf GitHub ansehen3,020

Häufig gestellte Fragen

Was macht internetwache/gittools?

Was sind die Hauptfunktionen von internetwache/gittools?

Die Hauptfunktionen von internetwache/gittools sind: Exposed Repository Discovery, Directory Scanning Tools, Git File Path Enumerators, Git Directory Probers, Web Git Repository Dumpers, Exposed Git Directory Scanners, Exposed Repository Extraction, Penetration Testing Tools.

Welche Open-Source-Alternativen gibt es zu internetwache/gittools?

Open-Source-Alternativen zu internetwache/gittools sind unter anderem: arthaud/git-dumper. ffuf/ffuf — This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure… jaykali/maskphish — Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network… fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a… epinna/tplmap — tplmap is a security tool designed for the detection and exploitation of server-side template injection… oj/gobuster — Gobuster is a command-line security utility designed for brute-force discovery of hidden infrastructure and content.…