Find hosts that expose a public .git directory

gittools-finder is the discovery component of the GitTools project. Given a list of hosts, it checks each one for a publicly accessible .git directory, the misconfiguration that exposes a site's source history to anyone who asks for it. Instead of probing one URL at a time, it runs the check across the whole input file so you can sweep a large scope in one pass.

It is the front of the GitTools recovery flow. The Finder tells you which hosts are worth attacking; the Dumper and Extractor then download and reconstruct the repositories it flagged. A threads option controls how many hosts it checks concurrently, which keeps a wide sweep moving without overwhelming the resolver.

Run it after subdomain discovery and probing, then feed its hits into gittools-dumper to start recovering source. On Trickest it is a Discovery node that reads an input file of hosts and writes a file and a folder listing the ones with an exposed .git.