GitHack
GitHack copied to clipboard
A `.git` folder disclosure exploit
CTHHub log题 使用GitHack还原git历史 命令: ```bash python GitHack.py http://challenge-378c7eae57fd469c.sandbox.ctfhub.com:10800/.git/ ``` 得到: ```bash [+] Download and parse index file ... [+] 50x.html [+] index.html [OK] index.html [OK] 50x.html ``` 按理说应该得到 ```bash [+]...
Traceback (most recent call last): File "GitHack.py", line 40, in main() File "GitHack.py", line 21, in main init() File "GitHack.py", line 35, in init start() File "/root/GitHack/lib/controler.py", line 21, in...
第一次用的时候可以正常使用,最近开始用发现一直4xx的错 [ERROR] index file download failed: HTTP Error 404: Not Found 不知道是为什么,求解
404
E:\cybersecurityTOOL\GitHack-master>GitHack.py http://www.baidu.com/.git/ [+] Download and parse index file ... [ERROR] index file download failed: HTTP Error 404: Not Found
优化建议
1. 建议增加参数:--threads 修改 `thread_count` 的值(有时候太快了会出被 ban 掉 IP) 2. 建议增加参数:--proxy 一个好工具都有的功能 3. 建议增加参数:--filter [正则表达式|文件前缀/后缀] 过滤一些没用的文件 (比如一些静态文件 assert) respect~
COMMIT_EDITSG 建议扫描加上,一些CTF里会把flag放这里
[+] Download and parse index file ... [ERROR] index file download failed: HTTP Error 404: Not Found 我第一次用的时候可以用,不知道为什么现在用了就4xx的错 _Originally posted by @kaysinchin in https://github.com/lijiejie/GitHack/issues/14#issuecomment-1170949707_