loading
Loading content
loading
Discovery
Download a .git directory and recover the repository in one pass.
overview
gittools-dumper-extractor combines the two halves of GitTools recovery into a single node. It downloads a .git directory that a site exposed to its web root, then reconstructs the repository from the objects it pulled. Like the standalone Dumper, it works even when the server has directory listing disabled, requesting git paths by name rather than browsing the folder.
The added value over the plain Dumper is recovery of incomplete repositories. When some objects are missing or the download is partial, this tool still rebuilds as much of the working tree as the available objects allow, so a half-exposed .git still yields readable source.
On Trickest, gittools-dumper-extractor is a Discovery node that takes a target URL ending in /.git/ and writes a folder containing the reconstructed repository. Use it when you want the source directly without wiring a separate extractor, then send the result to a secret scanner.
use cases
Point the tool at a target's /.git/ path and get the reconstructed working tree back without chaining a separate dumper and extractor.
When the download is partial or objects are missing, it still reconstructs as much of the source as the recovered objects allow.
Route the reconstructed repository into a tool like gitleaks so committed credentials are triaged right after recovery.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| target | STRING | · | Target URL including the /.git/ folder. |
Showing key inputs. gittools-dumper-extractor exposes 1 inputs in total.
example
# gittools-dumper-extractor: dump then reconstruct an exposed .git into ./repogitdumper.sh https://example.com/.git/ ./dump && extractor.sh ./dump ./repo[+] Downloading from https://example.com/.git/[*] Fetching HEAD, refs, and pack objects[+] Dump complete under ./dump[+] Extracting repository into ./repo[*] Restored refs/heads/main[*] Wrote working tree files (partial objects recovered)[+] Reconstruction finished: ./repoguidance
Use gittools-dumper-extractor when you want both the download and the reconstruction in one step and the exposed repository may be incomplete. For the dump alone use gittools-dumper, and for download plus partial recovery with verbose logging consider gitjacker.
Only downloads the .git data; pair it with the extractor for the same result in two nodes.
Single-pass download and reconstruction with verbose logging; a close alternative.
Reconstruction only; use it when the .git data has already been dumped to a folder.
faq
related
Check whether a URL redirects to a masked 404 page.
Append lines to a file only if they are not already there.
Extract URLs and endpoints from Android APK files.
Visual inspection of websites across a large number of hosts.
Find suspicious files across a large set of AWS S3 buckets.
An automated tool that checks for backup artifacts that may disclose a web application's source code.
A /.git/ URL feeds gittools-dumper-extractor, which rebuilds the repository and hands it to gitleaks so any committed secrets land as output.
Facts on this page come from the live Trickest tool library.