internetwache/gittools 的主要功能有哪些？

internetwache/gittools 的主要功能包括：Exposed Repository Discovery, Directory Scanning Tools, Git File Path Enumerators, Git Directory Probers, Web Git Repository Dumpers, Exposed Git Directory Scanners, Exposed Repository Extraction, Penetration Testing Tools。

internetwache/gittools 有哪些开源替代品？

internetwache/gittools 的开源替代品包括： arthaud/git-dumper. ffuf/ffuf — This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure… jaykali/maskphish — Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network… fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a… epinna/tplmap — tplmap is a security tool designed for the detection and exploitation of server-side template injection… oj/gobuster — Gobuster is a command-line security utility designed for brute-force discovery of hidden infrastructure and content.…

GitTools

GitTools 是一套安全实用程序，旨在识别、扫描并利用 Web 服务器上暴露的版本控制目录。该项目提供了定位公开可访问的 Git 目录并提取其内容以识别信息泄露的工具。

该套件包括即使在禁用目录列表的情况下也能从远程存储库下载文件和文件夹结构的功能。它还具有一个恢复系统，通过迭代提交对象来从不完整或损坏的版本控制数据中恢复内容。

Features

Exposed Repository Discovery - Scans websites to find publicly accessible Git directories that may contain sensitive source code or configuration files.
Directory Scanning Tools - Ships tools for fuzzing and discovering hidden web directories to identify exposed version control leaks.
Git File Path Enumerators - Provides the ability to discover repository structures by iterating through known Git file paths and metadata files via HTTP.
Git Directory Probers - Probes common Git object paths and hash prefixes to extract data when directory listing is disabled.
Web Git Repository Dumpers - Fetches entire .git directories from publicly accessible websites to reconstruct repositories locally even without directory listing.
Exposed Git Directory Scanners - Identifies and scans websites that have accidentally exposed their version control directories to the public.
Exposed Repository Extraction - Downloads source code and metadata from misconfigured version control repositories found during scanning.
Penetration Testing Tools - Includes scripts for automating the reconnaissance and exploitation of leaked Git directories.
Git Object Recoveries - Restores missing or broken content from incomplete Git repositories by iterating through available commit objects.
Git Object Recoverers - Recovers Git objects and commit history by analyzing fetched metadata files.
Repository State Recovery - Provides utilities to recover a codebase from a corrupted state by iterating through commit objects.
Object Reconstruction - Implements a recovery system that traverses commit and tree objects to restore content from corrupted repository data.
Web Application Penetration Testing - Identifies and exploits version control leaks as part of a systematic web application penetration testing process.
OSINT Investigation Tools - Scans GitHub repositories for exposed emails and names
Vulnerability Research - Scripts for researching and extracting data from Git repositories.
Git Repository Analysis - Utilities for exploiting misconfigured .git repositories.
Source Code Reconnaissance - Automated discovery and download of public git repositories.
Web Exploitation - Exploits exposed .git directories.

Star 历史

internetwacheGitTools

Name: internetwache/gittools
Author: internetwache

View on GitHub

4,151 星标631 分支ShellMIT10 次浏览

GitTools

Features

Exposed Repository Discovery - Scans websites to find publicly accessible Git directories that may contain sensitive source code or configuration files.
Directory Scanning Tools - Ships tools for fuzzing and discovering hidden web directories to identify exposed version control leaks.
Git File Path Enumerators - Provides the ability to discover repository structures by iterating through known Git file paths and metadata files via HTTP.
Git Directory Probers - Probes common Git object paths and hash prefixes to extract data when directory listing is disabled.
Web Git Repository Dumpers - Fetches entire .git directories from publicly accessible websites to reconstruct repositories locally even without directory listing.
Exposed Git Directory Scanners - Identifies and scans websites that have accidentally exposed their version control directories to the public.
Exposed Repository Extraction - Downloads source code and metadata from misconfigured version control repositories found during scanning.
Penetration Testing Tools - Includes scripts for automating the reconnaissance and exploitation of leaked Git directories.
Git Object Recoveries - Restores missing or broken content from incomplete Git repositories by iterating through available commit objects.
Git Object Recoverers - Recovers Git objects and commit history by analyzing fetched metadata files.
Repository State Recovery - Provides utilities to recover a codebase from a corrupted state by iterating through commit objects.
Object Reconstruction - Implements a recovery system that traverses commit and tree objects to restore content from corrupted repository data.
Web Application Penetration Testing - Identifies and exploits version control leaks as part of a systematic web application penetration testing process.
OSINT Investigation Tools - Scans GitHub repositories for exposed emails and names
Vulnerability Research - Scripts for researching and extracting data from Git repositories.
Git Repository Analysis - Utilities for exploiting misconfigured .git repositories.
Source Code Reconnaissance - Automated discovery and download of public git repositories.
Web Exploitation - Exploits exposed .git directories.

GitTools 的开源替代方案

相似的开源项目，按与 GitTools 的功能重合度排序。

arthaud/git-dumper
arthaud/git-dumper
2,553在 GitHub 上查看
Pythongitsecurityweb
在 GitHub 上查看2,553
ffuf/ffuf
ffuf/ffuf
15,618在 GitHub 上查看
This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I
Gofuzzerinfosecpentesting
在 GitHub 上查看15,618
jaykali/maskphish
jaykali/maskphish
3,020在 GitHub 上查看
Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe
Shellhackhackinghacking-tool
在 GitHub 上查看3,020
epinna/tplmap
epinna/tplmap
4,169在 GitHub 上查看
tplmap is a security tool designed for the detection and exploitation of server-side template injection vulnerabilities. It functions as an automated scanner to identify vulnerable template engine contexts and provides a framework for achieving remote code execution. The tool focuses on translating high-level requests into engine-specific syntax to execute operating system commands and bypass application sandboxes. It further enables remote file system access, allowing users to read, write, and transfer files between a local machine and a target server. Additional capabilities include the ab
Python
在 GitHub 上查看4,169

查看 GitTools 的所有 30 个替代方案

常见问题解答

internetwache/gittools 是做什么的？