# liamg/gitjacker

🔪 :octocat: Leak git repositories from misconfigured websites

Repository: https://github.com/liamg/gitjacker
Canonical: https://ross.abutalabs.com/products/gitjacker
Language: Go
License: Unlicense
License Family: permissive
Topics: git, pentesting, penetration-testing, hacking, red-team
Last push: 2025-12-05T02:29:17+00:00

## Health v2 (maintenance only)
Score: 48/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 55, release rhythm 8, longevity 100
- inputs: {"age_days": 2170, "days_push": 272, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1607, forks 120 (observed 2026-08-28T04:05:10.532540+00:00)

## What it is
Gitjacker is a Go CLI tool that downloads and reconstructs git repositories from websites where the .git directory has been mistakenly exposed, even without directory listings. It is intended for educational and authorized penetration testing use.

## Use cases
- recover a git repository leaked from a misconfigured website
- test whether my site accidentally exposes its .git directory
- extract source code during an authorized pentest
- download exposed .git folders without directory listing enabled
- red team tooling for information disclosure findings

## When to choose
- you need to exploit or verify exposed .git directories on a target you're authorized to test
- you want a simple single-binary tool that works even when directory listings are disabled
- you're doing red team or security assessment work involving information disclosure

## When to avoid
- you don't have authorization to test the target website - this is illegal
- you need a general web vulnerability scanner rather than a git-specific leak tool
- you want to defend against exposure rather than exploit it - use a scanner or server config hardening instead

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, http-client, developer-tools
- domain: security, penetration-testing, developer-tools, web-development
- platform: windows, cli, cross-platform
- tags: git-exposure, red-team, offensive-security, vulnerability-exploitation, misconfigured-sites, linux, macos

## Member repositories
- liamg/gitjacker (main) score 48

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:10.532540+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:51:48.058213+00:00, confidence not recorded.
  - readme: https://github.com/liamg/gitjacker (fetched 2026-08-28T04:05:10.532540+00:00, sha db16aee207a0)
- Data as of 2026-08-30T08:39:29.467469+00:00.