liamg/gitjacker

Health v2 · maintenance only

Adoption not part of the score

1607 stars · 120 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Gitjacker is a Go CLI tool that downloads and reconstructs git repositories from websites where the .git directory has been mistakenly exposed, even without directory listings. It is intended for educational and authorized penetration testing use.

Use cases

• recover a git repository leaked from a misconfigured website
• test whether my site accidentally exposes its .git directory
• extract source code during an authorized pentest
• download exposed .git folders without directory listing enabled
• red team tooling for information disclosure findings

When to choose

• you need to exploit or verify exposed .git directories on a target you're authorized to test
• you want a simple single-binary tool that works even when directory listings are disabled
• you're doing red team or security assessment work involving information disclosure

When to avoid

• you don't have authorization to test the target website - this is illegal
• you need a general web vulnerability scanner rather than a git-specific leak tool
• you want to defend against exposure rather than exploit it - use a scanner or server config hardening instead

Facets

cli-tool · maturity active

security penetration-testing http-client developer-tools security penetration-testing developer-tools web-development windows cli cross-platform git-exposure red-team offensive-security vulnerability-exploitation misconfigured-sites linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="liamg/gitjacker")