Flag hosts that serve a public .git directory

mass-gitfinder reads a host file via -i and checks each target for a publicly reachable .git directory, writing the short list of leak candidates.

Use it after subdomain discovery and an HTTP prober such as httpx so checks run only on live hosts. Raise -t when the list is large.

Trickest provides mass-gitfinder as a managed Discovery node. It flags exposure only; route hits to gittools-dumper or gitjacker to recover the repository.