GitSnatcher

GitSnatcher is a high-performance, professional-grade .git directory reconstructor, source code extractor, and intelligence analyzer. It recovers exposed git repositories from web servers, intelligently crawling and decompressing packfiles, index structures, reflogs, and commit DAGs—even when directory listing is disabled, loose objects return 403 Forbidden, or servers employ WAF rate limiting. MADE WITH LOVE BY BABA01HACKER

Key Features

• ⚡ Multi-Threaded DAG Crawler: High-speed recursive crawling across Git objects (commits, trees, blobs, annotated tags) with optimized HTTP connection pooling.
• 🌳 Deep Index & Extension Parsing: Full binary support for Git DIRC index formats (v2, v3, and v4 prefix compression) plus TREE (cached trees) and REUC (resolve undo) extension blocks.
• 📦 Packfile & .idx Handling: Automatically discovers, parses (v1 & v2 index formats), downloads, and unpacks .pack files.
• 📜 Reflog & Branch Discovery: Automatically enumerates branches, remotes, and submodules from .git/config and reconstructs abandoned/historical commits from reflogs (logs/HEAD, logs/refs/heads/*).
• 🛡️ Soft-404 & Anti-Corruption Guard: Strict zlib binary validation on loose objects prevents bogus HTML/JSON 200 OK error pages from polluting the local repository.
• 🔄 Built-in Source Code Auto-Restore (-r / --restore): Pure-Python working tree reconstructor extracts original source code and project files directly into the destination folder—even without git installed!
• 🔍 Security & Secret Scanner (-s / --scan-secrets): Integrated audit scanner checks recovered repository objects for leaked API keys, tokens (AWS, OpenAI, GitHub, Stripe, Slack, etc.), database connection strings, RSA private keys, and .env files.
• 🕵️ Evasion & Stealth Engine: HTTP/HTTPS/SOCKS proxies, custom headers, cookies, randomized browser User-Agents, custom delays, and exponential backoff retry logic.

Installation

From Source:

git clone https://github.com/Baba01hacker666/gitsnatcher.git
cd gitsnatcher
pip install .

Quick Run:

python3 main.py -u http://example.com/.git/ -o ./loot

CLI Usage & Options

gitsnatcher -u <TARGET_URL> -o <OUTPUT_DIR> [OPTIONS]

Full Options Reference

Usage Examples

1. Basic Extraction & Auto-Restore

Recover the .git repository and automatically extract source files:

gitsnatcher -u http://target.com/.git/ -o ./loot_dir -r

2. Full Intelligence Audit (Extract + Restore + Scan Secrets + History)

gitsnatcher -u https://target.com/.git/ -o ./loot_dir -t 20 -r -s --dump-history

3. Stealth Evasion with Proxy and Randomized User-Agent

gitsnatcher -u https://target.com/.git/ -o ./loot_dir -x http://127.0.0.1:8080 -k --random-agent --delay 0.2

4. Authenticated Extraction

gitsnatcher -u https://target.com/.git/ -o ./loot_dir -H "Authorization: Bearer mytoken123" -c "session_id=abcdef"

Python API Usage

GitSnatcher can also be imported and used programmatically in your own Python tools:

from gitsnatcher import GitParser, GitDumper, SecretScanner

# 1. Parse objects or index files
hashes = GitParser.parse_index(open('.git/index', 'rb').read())
print(f"Discovered {len(hashes)} object hashes from index")

# 2. Extract and restore working tree files
dumper = GitDumper("./recovered_repo/.git")
count = dumper.auto_restore()
print(f"Restored {count} project files")

# 3. Scan for leaked credentials
scanner = SecretScanner("./recovered_repo/.git")
scanner.scan_all_objects()
scanner.print_report()

Running Tests

GitSnatcher includes a comprehensive test suite covering all parsers, index v2/v3/v4 extensions, tree unpackers, secret rules, and worktree dumpers:

python3 -m unittest discover tests

License

This project is licensed under the MIT License - see the LICENSE file for details.