arthaud/git-dumper

Health v2 · maintenance only

Adoption not part of the score

2645 stars · 306 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

git-dumper is a Python CLI tool that reconstructs a full git repository from a website that exposes its .git directory, even when directory listing is disabled. It recursively discovers refs and objects via HTTP requests and runs git checkout to recover the working tree.

Use cases

• dump a git repository exposed on a website
• recover source code from a misconfigured web server with a public .git folder
• exploit exposed .git directories during a penetration test
• solve CTF challenges involving leaked git repositories
• download a git repo when directory listing is disabled
• audit whether my website accidentally exposes its .git directory

When to choose

• you found an exposed .git directory on a target site and want to reconstruct the full repository
• you need a fast, scriptable CLI with proxy, header, and client-certificate support for dumping git data
• you are doing CTF or pentest work involving git source disclosure

When to avoid

• you just want to clone a repository normally over git/https protocols
• the .git directory is not exposed or the server blocks access to it
• you need a GUI or a fully automated continuous scanning solution rather than a one-shot dumping tool

Facets

cli-tool · maturity stable

security http-client cli version-control security penetration-testing developer-tools python cli windows cross-platform git-dumping offensive-security ctf vulnerability-assessment web-security command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="arthaud/git-dumper")