Skip to main content

A pure python implemented .git/ folder disclosure exploit

Project description

https://badge.fury.io/gh/owenchia%2Fgithack.svg https://travis-ci.com/OwenChia/githack.svg?branch=master https://badge.fury.io/py/githack.svg PyPI - Python Version GitHub

Basically it an py3k version with own implemented Git objects parser for GitHack:

GitHack is a `.git` folder disclosure exploit.

Why another git dumper tool?

  • python 3.6+ support

  • pure-Python implementation without third-party dependencies

  • git database crawling support

  • zipapp mode support

How it works?

  • step 1: fetch metadata (eg. .git/{HEAD,index,config})

  • step 2: using commit objects as seed, crawling whole git database

  • step 3: parse index, then restore objects to source code

Usage:

  • portable standalone

    > make zipapp

    > python githack.pyz http://example.com/.git

  • pip

    > pip install githack

    > githack http://example.com/.git

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

githack-0.0.4.post1-py3-none-any.whl (54.2 kB view details)

Uploaded Python 3

File details

Details for the file githack-0.0.4.post1-py3-none-any.whl.

File metadata

  • Download URL: githack-0.0.4.post1-py3-none-any.whl
  • Upload date:
  • Size: 54.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.13.0 pkginfo/1.5.0.1 requests/2.21.0 setuptools/40.6.2 requests-toolbelt/0.9.1 tqdm/4.31.1 CPython/3.7.3

File hashes

Hashes for githack-0.0.4.post1-py3-none-any.whl
Algorithm Hash digest
SHA256 7005846c90483cfcfc8dcf57c2378b4169af1dffd45a5c60a9e302aa34310acc
MD5 c6eb7a1c9788ad764437b6db6f37e82e
BLAKE2b-256 9d3e5dcf2626ca3bcb6184a23152788c9e46b7f2bdfea1ea822b607dddbfab15

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page