Insecure Source Code Management · passage 13 of 24

Git: GitHack

1 code block · Insecure Source Code Management/Git.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

* [lijiejie/GitHack](https://github.com/lijiejie/GitHack)

GitHack.py http://web.site/.git/

Every one of the 24 is a mark on the map. Named now: 1 to 24, reading order first.

Insecure Source Code Management§ 1text · README.md
Methodology§ 21 code block · README.md
Bazaar: Bazaar§ 3text · Bazaar.md
Bazaar: rip-bzr.pl§ 4text · Bazaar.md
Bazaar: bzrdumper§ 52 code blocks · Bazaar.md
Git: Methodology§ 6text · Git.md
Git: Recovering file contents from .git/logs/HEAD§ 7text · Git.md
Git: Recovering file contents from .git/index§ 82 code blocks · Git.md
Git: git-dumper.py§ 91 code block · Git.md
Git: diggit.py§ 101 code block · Git.md
Git: GoGitDumper§ 111 code block · Git.md
Git: rip-git§ 121 code block · Git.md
Git: GitHack§ 131 code block · Git.md
Git: GitTools§ 141 code block · Git.md
Git: noseyparker§ 151 code block · Git.md
Git: trufflehog§ 161 code block · Git.md
Git: Yar§ 171 code block · Git.md
Git: Gitrob§ 181 code block · Git.md
Git: Gitleaks§ 19text · Git.md
Mercurial: Mercurial§ 20text · Mercurial.md
Mercurial: rip-hg.pl§ 21text · Mercurial.md
Subversion: Subversion§ 22text · Subversion.md
Subversion: Tools§ 23text · Subversion.md
Subversion: Methodology§ 241 code block · Subversion.md

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.