blacklanternsecurity/bbot

New Module: Githacker

Opened this issue · 1 comments

Description
Githacker is a tool to download .git folders from sites and reconstruct them. wget -r is usually the goto to exploit this but that only works if directory listing is enabled while tools like githacker/gittools work by bruteforcing common filenames in the .git folder.

It probably makes sense if the current git module has an enhancement to raise CODE_REPOSITORY events tagged with githacker or reconstruct (Not git as the git_clone.py module will pick that up and try and clone it which will not work)

Once githacker has reconstructed the folder it can raise it as a FILESYSTEM event

Nice, looks like githacker might be a better alternative to gitdumper.