git
Clones repos and rebuilds an exposed .git to read source and secrets.
Version control. In pentesting it matters for its leaks: an exposed .git directory on a web server lets you rebuild the source code and often find credentials in the history.
Family Web discovery & fuzzing
Flags clone log --all show
Concepts Exposed .git directory, Secrets in git history
Cheatsheet Discovery & fuzzing
Installation
sudo apt install -y gitUseful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- AmbassadorHackTheBox
- BastardHackTheBox
- BBSecuteProving Grounds Play
- BigPivotingDockerLabs
- BitforgeProving Grounds Practice
- BlueHackTheBox
- BoardLightHackTheBox
- BookHackTheBox
- BreaksshDockerLabs
- BullyboxProving Grounds Practice
- CertifiedHackTheBox
- CompiledHackTheBox
- CraftyHackTheBox
- Darkhole 2VulnHub
- EvilCupsHackTheBox
- ExfiltratedProving Grounds Practice
- ExpresswayHackTheBox
- FanatasticProving Grounds Practice
- GrandpaHackTheBox
- GreenHornHackTheBox
- HealHackTheBox
- HepetProving Grounds Practice
- HokkaidoProving Grounds Practice
- HunitProving Grounds Practice
- InstantHackTheBox
- KevinProving Grounds Practice
- LaVitaProving Grounds Practice
- LegacyHackTheBox
- LinkVortexHackTheBox
- MailingHackTheBox
- MarketingProving Grounds Practice
- MiceProving Grounds Practice
- OpenSourceHackTheBox
- PandoraHackTheBox
- PermXHackTheBox
- ReadysProving Grounds Practice
- RoquefortProving Grounds Practice
- ScrutinyProving Grounds Practice
- SeaHackTheBox
- SightlessHackTheBox
- SybarisProving Grounds Practice
- Symfonos 6VulnHub
- TeacherHackTheBox
- TricksterHackTheBox
- Vulnerable Lab (1 · 4 · 5)VulnHub
- WomboProving Grounds Practice