WangYihang/GitHacker

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1664 stars · 248 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

GitHacker is a multi-threaded Python CLI tool that exploits exposed `.git` directories on web servers to reconstruct the entire Git repository, including branches, tags, stashes, and commit history, even without directory listings. It also ships a research site with a reproducible benchmark and security suite comparing it against other .git pillagers.

Use cases

• dump a leaked .git folder from a website during a pentest
• recover source code and commit history from an exposed .git directory
• restore branches, tags, and stashes when directory listing is disabled
• brute-force git ref names on a target web server
• scan multiple URLs for exposed .git folders
• test .git pillager tools against malicious git directories

When to choose

• you need the most complete recovery of a leaked repository including stashes and tags
• directory listing is disabled and you need ref brute-forcing
• you want a maintained tool hardened against malicious .git attacks
• you need to run the dump in a disposable Docker container

When to avoid

• you only need a quick single-file download rather than a full repo reconstruction
• you are not authorized to test the target — this is an offensive security tool
• you need a GUI or non-command-line workflow

Facets

cli-tool · maturity active

security http-client cli web-scraping security penetration-testing developer-tools cli python windows git-leakage git-folder-exploitation offensive-security source-code-disclosure pentest-tools command-line docker linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="WangYihang/GitHacker")