0xHJK/dumpall

Health v2 · maintenance only

Adoption not part of the score

1579 stars · 153 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

dumpall is a Python command-line tool for exploiting information disclosure vulnerabilities on web servers. It reconstructs source code from exposed .git and .svn directories, extracts file listings from .DS_Store files, and recursively downloads open directory listings using asyncio for speed.

Use cases

• dump an exposed .git directory to recover website source code
• exploit a .svn source code leak during a pentest
• parse .DS_Store files to enumerate hidden files and directories
• download all files from an open directory listing
• find source code disclosure issues in bug bounty recon
• one tool to handle multiple classes of information leakage

When to choose

• you have authorization and discovered .git, .svn, or .DS_Store exposure or directory listing on a target
• you want a single pip-installable CLI instead of separate git/svn/DS_Store dumper scripts
• you need fast concurrent downloads via asyncio with proxy and custom output directory support

When to avoid

• the target has not given you permission to test - unauthorized use is illegal
• you need to download very large files, which the tool does not yet optimize
• you require WAF/bypass evasion features or support for very old SVN repositories
• you need an actively maintained tool - the last release was in 2022

Facets

cli-tool · maturity maintenance

penetration-testing security web-scraping security penetration-testing crawlers cli cross-platform python git-leak svn-leak ds-store directory-listing source-code-disclosure bug-bounty gitdumper asyncio recon information-disclosure

Member repositories

For agents

markdown · JSON · MCP: product_card(name="0xHJK/dumpall")