# kost/dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

Repository: https://github.com/kost/dvcs-ripper
Canonical: https://ross.abutalabs.com/products/dvcs-ripper
Language: Perl
License: GPL-2.0
License Family: copyleft
Last push: 2024-07-19T12:49:07+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 5062, "days_push": 775, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1784, forks 320 (observed 2026-08-28T04:05:35.927374+00:00)

## What it is
dvcs-ripper is a set of Perl command-line tools that download (rip) web-accessible version control repositories such as GIT, SVN, Mercurial, Bazaar, and CVS from exposed servers, even when directory browsing is disabled. It is primarily used in penetration testing to recover source code and history from misconfigured web servers.

## Use cases
- download a leaked .git folder from a website during a pentest
- rip exposed .svn directories from a web server
- recover source code from a misconfigured .hg or .bzr directory
- test whether a site exposes version control metadata
- extract repository history from web-accessible VCS folders

## When to choose
- you are doing a security assessment and found exposed .git/.svn/.hg directories
- you need to reconstruct a repository without directory listing enabled
- you want a lightweight Perl tool with no heavy dependencies

## When to avoid
- you need a general-purpose web scraper rather than VCS-specific ripping
- you are not authorized to test the target system
- you need a GUI or automated scanning platform

## Facets
- artifact type: cli-tool
- maturity: stable
- function: web-scraping, security, penetration-testing, cli, version-control
- domain: security, penetration-testing, version-control, developer-tools
- platform: cli
- tags: dvcs, source-code-disclosure, git-ripping, svn-ripping, pentest-tools, recon, command-line, linux, macos, perl, docker

## Member repositories
- kost/dvcs-ripper (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:35.927374+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:24:15.639624+00:00, confidence not recorded.
  - readme: https://github.com/kost/dvcs-ripper (fetched 2026-08-28T04:05:35.927374+00:00, sha 9841fd3c7a7c)
- Data as of 2026-08-30T08:39:29.467469+00:00.