GitTools is a collection of security utilities designed to identify, scan, and exploit exposed version control directories on web servers. The project provides tools to locate publicly accessible Git directories and extract their contents to identify information leaks. The suite includes capabilities for downloading files and folder structures from remote repositories even when directory listing is disabled. It also features a recovery system that iterates through commit objects to restore content from incomplete or corrupted version control data.
fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits. It functions as a wrapper that integrates external security binaries into a unified, menu-driven interface, providing a centralized system for command-line parameter mapping and execution. The project distinguishes itself by organizing specialized utilities into domain-specific collections for structured navigation. It automates the transition between different phases of an audit by chaining reconnaissance and exploitation tools through sequential workflow automation. The fram
w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities in web applications. It functions as a vulnerability scanner that crawls targets to find injection points and a fuzzer used to discover hidden endpoints and test input validation. The project distinguishes itself by providing an intercepting HTTP proxy for capturing and modifying traffic, combined with a knowledge-base driven exploitation system. It enables the execution of security exploits to gain remote shell access and supports post-exploitation activities, such as routing
phpggc is a security assessment utility and command-line tool designed for the automated generation, obfuscation, and wrapping of serialized object chains. It functions as a gadget chain framework used to identify and verify remote code execution vectors by testing for PHP object injection vulnerabilities. The project provides a modular system for constructing complex serialized object sequences and includes a dedicated payload obfuscator to transform byte streams for bypassing web application firewalls and security filters. It also features a generator for wrapping serialized data into archi
🔪 :octocat: Leak git repositories from misconfigured websites
The main features of liamg/gitjacker are: Git Repository Analysis, Web Exploitation.
Open-source alternatives to liamg/gitjacker include: internetwache/gittools — GitTools is a collection of security utilities designed to identify, scan, and exploit exposed version control… manisso/fsociety — fsociety is a penetration testing framework and security tool orchestrator designed to conduct full security audits.… andresriancho/w3af — w3af is a web penetration testing suite and security audit framework designed to identify and exploit vulnerabilities… ambionics/phpggc — phpggc is a security assessment utility and command-line tool designed for the automated generation, obfuscation, and… cujanovic/ssrf-testing — SSRF (Server Side Request Forgery) testing resources. arthaud/git-dumper.