From fd6d7f360e7047efa42fbffed273d2f13c7ca55e Mon Sep 17 00:00:00 2001 From: lanjelot Date: Wed, 3 Feb 2021 21:15:55 +1100 Subject: [PATCH 1/2] New tool git-dumper.py --- Insecure Source Code Management/README.md | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/Insecure Source Code Management/README.md b/Insecure Source Code Management/README.md index be752e9fcb..702609f70d 100644 --- a/Insecure Source Code Management/README.md +++ b/Insecure Source Code Management/README.md @@ -117,11 +117,20 @@ sha1 = d7ef4d77741c38b6d3806e0c6a57bf1090eec141 #### Automatic recovery +##### git-dumper.py + +```powershell +git clone https://github.com/arthaud/git-dumper +pip install -r requirements.txt +./git-dumper.py http://web.site/.git ~/website +``` + ##### diggit.py ```powershell +git clone https://github.com/bl4de/security-tools/ && cd security-tools/diggit ./diggit.py -u remote_git_repo -t temp_folder -o object_hash [-r=True] -./diggit.py -u http://webpage.com -t /path/to/temp/folder/ -o d60fbeed6db32865a1f01bb9e485755f085f51c1 +./diggit.py -u http://web.site -t /path/to/temp/folder/ -o d60fbeed6db32865a1f01bb9e485755f085f51c1 -u is remote path, where .git folder exists -t is path to local folder with dummy Git repository and where blob content (files) are saved with their real names (cd /path/to/temp/folder && git init) @@ -132,7 +141,7 @@ sha1 = d7ef4d77741c38b6d3806e0c6a57bf1090eec141 ```powershell go get github.com/c-sto/gogitdumper -gogitdumper -u http://urlhere.com/.git/ -o yourdecideddir/.git/ +gogitdumper -u http://web.site/.git/ -o yourdecideddir/.git/ git log git checkout ``` From 34dff949a2d515a9b53a3c0d5cf0e60ef7d5dddf Mon Sep 17 00:00:00 2001 From: lanjelot Date: Thu, 4 Feb 2021 00:47:00 +1100 Subject: [PATCH 2/2] Fix ToC --- Insecure Source Code Management/README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Insecure Source Code Management/README.md b/Insecure Source Code Management/README.md index 702609f70d..ad83d0273b 100644 --- a/Insecure Source Code Management/README.md +++ b/Insecure Source Code Management/README.md @@ -6,6 +6,7 @@ - [Recovering file contents from .git/index](#recovering-file-contents-from-gitindex) + [Tools](#tools) - [Automatic recovery](#automatic-recovery) + * [git-dumper.py](#git-dumperpy) * [diggit.py](#diggitpy) * [GoGitDumper](#gogitdumper) * [rip-git](#rip-git) @@ -165,7 +166,7 @@ git cat-file -p 5dae937a49acc7c2668f5bcde2a9fd07fc382fe2 ```powershell git clone https://github.com/lijiejie/GitHack -GitHack.py http://www.openssl.org/.git/ +GitHack.py http://web.site/.git/ ``` ##### GitTools