git

Clona repos y reconstruye un .git expuesto para leer código y secretos.

Control de versiones. En pentesting importa por sus fugas: un directorio .git expuesto en un servidor web permite reconstruir el código fuente y a menudo encontrar credenciales en el historial.

Familia Descubrimiento y fuzzing web

Flags clone log --all show

Conceptos Exposed .git directory, Secrets in git history

Cheatsheet Descubrimiento y fuzzing

Instalación

sudo apt install -y git

Comandos útiles3 comandos

Aparece en

Algunas máquinas donde se documenta su uso; no es una lista exhaustiva.

AmbassadorHackTheBox
BastardHackTheBox
BBSecuteProving Grounds Play
BigPivotingDockerLabs
BitforgeProving Grounds Practice
BlueHackTheBox
BoardLightHackTheBox
BookHackTheBox
BreaksshDockerLabs
BullyboxProving Grounds Practice
CertifiedHackTheBox
CompiledHackTheBox
CraftyHackTheBox
Darkhole 2VulnHub
EvilCupsHackTheBox
ExfiltratedProving Grounds Practice
ExpresswayHackTheBox
FanatasticProving Grounds Practice
GrandpaHackTheBox
GreenHornHackTheBox
HealHackTheBox
HepetProving Grounds Practice
HokkaidoProving Grounds Practice
HunitProving Grounds Practice
InstantHackTheBox
KevinProving Grounds Practice
LaVitaProving Grounds Practice
LegacyHackTheBox
LinkVortexHackTheBox
MailingHackTheBox
MarketingProving Grounds Practice
MiceProving Grounds Practice
OpenSourceHackTheBox
PandoraHackTheBox
PermXHackTheBox
ReadysProving Grounds Practice
RoquefortProving Grounds Practice
ScrutinyProving Grounds Practice
SeaHackTheBox
SightlessHackTheBox
SybarisProving Grounds Practice
Symfonos 6VulnHub
TeacherHackTheBox
TricksterHackTheBox
Vulnerable Lab (1 · 4 · 5)VulnHub
WomboProving Grounds Practice