Discovery
Turn dumped git objects into readable commits
Reconstruct commits from a dumped .git folder.
overview
What gittools-extractor does
After gittools-dumper writes a folder of git objects, this node is the reconstruction step. It walks refs and objects and writes readable source instead of opaque blobs.
Provide git-folder with the dumped .git tree. Partial dumps still rebuild whatever objects remain, which is often enough to surface config and committed secrets.
It does not fetch from the web. For URL-to-source in one node, use gittools-dumper-extractor or gitjacker. Keep this node when you already have a dump on disk and want extract-only control.
use cases
Where gittools-extractor fits
Rebuild source from dumped git data
Feed the Extractor a folder of dumped .git objects and it reconstructs the commits into readable source files you can review.
Recover what a partial dump still holds
When the dumper returned an incomplete repository, the Extractor rebuilds as many files as the available objects allow rather than failing outright.
Prepare recovered code for secret scanning
Pass the reconstructed source to a tool like gitleaks so credentials buried in the recovered history get surfaced and triaged.
Walk the recovered commit history
Because each commit rebuilds into its own numbered folder, you can trace when a secret was introduced or which files changed across the exposed timeline.
reference
gittools-extractor inputs and flags
| Name | Type | Flag | Description |
|---|---|---|---|
| git-folder | FOLDER | · | Dumped .git repository folder to reconstruct from (typically gittools-dumper output). |
Showing key inputs. gittools-extractor exposes 1 inputs in total.
example
Run gittools-extractor
# reconstruct source from a dumped .git folderextractor.sh ./dumped-git ./recovered############ Extractor is part of https://github.com/internetwache/GitTools## Developed and maintained by @gehaxelt from @internetwache###########[+] Found commit: 7f3c9a2e5d1b8046af2c9d3e1b0a5c47e9d28f61[+] Found file: /recovered/0-7f3c9a2e5d1b8046af2c9d3e1b0a5c47e9d28f61/config.php[+] Found file: /recovered/0-7f3c9a2e5d1b8046af2c9d3e1b0a5c47e9d28f61/.env[+] Found commit: 4b8e1d60c7a2f9538e0b6c1a4d7f2093ab5e6c82[+] Found file: /recovered/1-4b8e1d60c7a2f9538e0b6c1a4d7f2093ab5e6c82/config.phpguidance
Choosing gittools-extractor
Use gittools-extractor after a .git directory has been dumped to a folder and you need readable source back. It reconstructs; it does not download. Pair with gittools-dumper upstream. For download plus recovery in one node, use gittools-dumper-extractor.
gittools-dumper
Download half of GitTools. Run it first to produce the folder this node reconstructs from.
gittools-dumper-extractor
Combines download and reconstruction in one step when you have a live target URL.
gitjacker
Downloads and rebuilds an exposed repo from a URL rather than from a dumped folder.
faq
gittools-extractor questions
related
More Discovery tools
apkurlgrep
Extract URLs and endpoints from Android APK files.
cariddi
Crawl a domain list and scan responses for endpoints, secrets, tokens, and juicy files.
crawlergo
Browser-driven crawler that harvests requests for downstream scanners.
dirsearch
Web path scanner.
fallparams
Crawl pages, harvest potential parameters, write a custom wordlist.
feroxbuster
Recursive content discovery with smart defaults and rich response filters.
Run gittools-extractor yourself
A dumped .git folder feeds gittools-extractor, which reconstructs the commits and writes the recovered source as a queryable output.
Facts on this page come from the live Trickest tool library.