loading
Loading content
loading
Discovery
Download an exposed .git and rebuild the working tree in one pass.
overview
In a recovery workflow, this node sits after you confirm a live /.git/ URL. It pulls the exposed git objects, then reconstructs the working tree so secret scanners get readable source instead of raw internals.
Set target to a URL that ends in /.git/. The node requests known git paths by name, so directory listing does not need to be on. Output is a folder with whatever commits and files the downloaded objects support.
Prefer this over gittools-dumper alone when you want dump and extract in one step, especially if the repo may be incomplete. Use gittools-extractor only when a dump folder already exists. gitjacker is a peer one-pass option with different logging.
use cases
Point the tool at a target's /.git/ path and get the reconstructed working tree back without chaining a separate dumper and extractor.
When the download is partial or objects are missing, it still reconstructs as much of the source as the recovered objects allow.
Route the reconstructed repository into a tool like gitleaks so committed credentials are triaged right after recovery.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| target | STRING | · | Target URL including the /.git/ folder. |
Showing key inputs. gittools-dumper-extractor exposes 1 inputs in total.
example
# gittools-dumper-extractor: dump then reconstruct an exposed .git into ./repogitdumper.sh https://example.com/.git/ ./dump && extractor.sh ./dump ./repo[+] Downloading from https://example.com/.git/[*] Fetching HEAD, refs, and pack objects[+] Dump complete under ./dump[+] Extracting repository into ./repo[*] Restored refs/heads/main[*] Wrote working tree files (partial objects recovered)[+] Reconstruction finished: ./repoguidance
Reach for gittools-dumper-extractor when a target URL exposes /.git/ and you want download plus reconstruction in one node, including partial trees. Use gittools-dumper when you only need the raw dump. Prefer gittools-extractor when the dump folder already exists. Consider gitjacker for a different one-pass recovery path.
Downloads .git data only. Pair with gittools-extractor for the same end state in two nodes.
Also one-pass download and rebuild from a URL, with verbose logging as the main difference.
Reconstruction only. Use when .git data is already dumped to a folder.
faq
related
Extract URLs and endpoints from Android APK files.
Web path scanner.
Crawl pages, harvest potential parameters, write a custom wordlist.
Recursive content discovery with smart defaults and rich response filters.
Maintained gau fork for passive archive URL collection.
Extract JavaScript file URLs from a page or URL list.
A /.git/ URL feeds gittools-dumper-extractor, which rebuilds the repository and hands it to gitleaks so any committed secrets land as output.
Facts on this page come from the live Trickest tool library.