Git Tools

Git Commands

Commits

# Move within the .git directory
cd .git
# List commits
git log
# Write commits to a file
git log | grep commit | cut -d " " -f2 | xargs git show > commits

Show Commit

# Show the specified commit's content
git show <commit-id>

Extract Info

# extract author name and email
git log --pretty-format:"%an %ae" | sort -u
git log | grep Author | grep -oP '(?<=Author: ).*' | sort -u | tr -d '<>'

Tools

git-dumper

An example usage can be found here.

git-dumper <URL>/.git/ <output-dir>

gitjacker

sudo gitjacker <URL> -o <output-dir>

GitTools

An example usage can be found here.

# Identify websites with publicly accessible .git repos
$ ./gitfinder.py -i <input-file> -o <output-file>

# Download the files found in the .git repo
$ ./gitdumber.sh <URL>/.git/ <output-dir>

# Extract commits from a broken repo (can be used after gitdumber.sh)
$ ./extractor.sh <.git-directory> <output-dir>

Resources

git-dumper

GitHub - arthaud/git-dumper: A tool to dump a git repository from a websiteGitHub

GitJacker

GitHub - liamg/gitjacker: 🔪 Leak git repositories from misconfigured websitesGitHub

GitTools

GitHub - internetwache/GitTools: A repository with 3 tools for pwn'ing websites with .git repositories availableGitHub

PrettyFormat

Git - pretty-formats Documentation