Discovery
Recover source from an exposed /.git/ URL
Download an exposed .git and rebuild the working tree in one pass.
overview
What gittools-dumper-extractor does
In a recovery workflow, this node sits after you confirm a live /.git/ URL. It pulls the exposed git objects, then reconstructs the working tree so secret scanners get readable source instead of raw internals.
Set target to a URL that ends in /.git/. The node requests known git paths by name, so directory listing does not need to be on. Output is a folder with whatever commits and files the downloaded objects support.
Prefer this over gittools-dumper alone when you want dump and extract in one step, especially if the repo may be incomplete. Use gittools-extractor only when a dump folder already exists. gitjacker is a peer one-pass option with different logging.
use cases
Where gittools-dumper-extractor fits
Recover a repo in a single node
Point the tool at a target's /.git/ path and get the reconstructed working tree back without chaining a separate dumper and extractor.
Rebuild incomplete repositories
When the download is partial or objects are missing, it still reconstructs as much of the source as the recovered objects allow.
Hand source straight to secret scanning
Route the reconstructed repository into a tool like gitleaks so committed credentials are triaged right after recovery.
reference
gittools-dumper-extractor inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| target | STRING | · | Target URL including the /.git/ folder. |
Showing key inputs. gittools-dumper-extractor exposes 1 inputs in total.
example
Run gittools-dumper-extractor
# gittools-dumper-extractor: dump then reconstruct an exposed .git into ./repogitdumper.sh https://example.com/.git/ ./dump && extractor.sh ./dump ./repo[+] Downloading from https://example.com/.git/[*] Fetching HEAD, refs, and pack objects[+] Dump complete under ./dump[+] Extracting repository into ./repo[*] Restored refs/heads/main[*] Wrote working tree files (partial objects recovered)[+] Reconstruction finished: ./repoguidance
Choosing gittools-dumper-extractor
Reach for gittools-dumper-extractor when a target URL exposes /.git/ and you want download plus reconstruction in one node, including partial trees. Use gittools-dumper when you only need the raw dump. Prefer gittools-extractor when the dump folder already exists. Consider gitjacker for a different one-pass recovery path.
gittools-dumper
Downloads .git data only. Pair with gittools-extractor for the same end state in two nodes.
gitjacker
Also one-pass download and rebuild from a URL, with verbose logging as the main difference.
gittools-extractor
Reconstruction only. Use when .git data is already dumped to a folder.
faq
gittools-dumper-extractor questions
related
More Discovery tools
apkurlgrep
Extract URLs and endpoints from Android APK files.
cariddi
Crawl a domain list and scan responses for endpoints, secrets, tokens, and juicy files.
crawlergo
Browser-driven crawler that harvests requests for downstream scanners.
dirsearch
Web path scanner.
fallparams
Crawl pages, harvest potential parameters, write a custom wordlist.
feroxbuster
Recursive content discovery with smart defaults and rich response filters.
Run gittools-dumper-extractor yourself
A /.git/ URL feeds gittools-dumper-extractor, which rebuilds the repository and hands it to gitleaks so any committed secrets land as output.
Facts on this page come from the live Trickest tool library.