Dump the contents of a remote git repository without directory listing enabled
Dump the contents of a remote git repository without directory listing enabled
Based on GitDumper but rewritten to not rely on specific GNU grep options
First, install Node.js, then:
npm install -g git-dump
git-dump <url> [dir=.] [workers=3]
Using Blizzards Lumerico website for the Sombra ARG
$ ./git-dump https://lumerico.mx/president-bypass/.git sombra
> GET https://lumerico.mx/president-bypass/.git/description --> description
> GET https://lumerico.mx/president-bypass/.git/HEAD --> HEAD
> GET https://lumerico.mx/president-bypass/.git/config --> config
> GET https://lumerico.mx/president-bypass/.git/index --> index
> GET https://lumerico.mx/president-bypass/.git/refs/heads/master --> refs/heads/master
found 1 hashes in refs/heads/master
> GET https://lumerico.mx/president-bypass/.git/logs/HEAD --> logs/HEAD
found 2 hashes in logs/HEAD
> GET https://lumerico.mx/president-bypass/.git/logs/refs/heads/master --> logs/refs/heads/master
found 2 hashes in logs/refs/heads/master
> GET https://lumerico.mx/president-bypass/.git/info/exclude --> info/exclude
> GET https://lumerico.mx/president-bypass/.git/objects/67/7d90499d571221e2ec71914e56aee35afa9340 --> objects/67/7d90499d571221e2ec71914e56aee35afa9340
found 1 hashes in `git cat-file -p 677d90499d571221e2ec71914e56aee35afa9340`
objects/67/7d90499d571221e2ec71914e56aee35afa9340 already downloaded
> GET https://lumerico.mx/president-bypass/.git/objects/67/7d90499d571221e2ec71914e56aee35afa9340 --> objects/67/7d90499d571221e2ec71914e56aee35afa9340
found 1 hashes in `git cat-file -p 677d90499d571221e2ec71914e56aee35afa9340`
> GET https://lumerico.mx/president-bypass/.git/objects/7e/1701a6431539487bb0faf2862059c7aab7bc98 --> objects/7e/1701a6431539487bb0faf2862059c7aab7bc98
found 4 hashes in `git cat-file -p 7e1701a6431539487bb0faf2862059c7aab7bc98`
> GET https://lumerico.mx/president-bypass/.git/objects/7e/1701a6431539487bb0faf2862059c7aab7bc98 --> objects/7e/1701a6431539487bb0faf2862059c7aab7bc98
found 4 hashes in `git cat-file -p 7e1701a6431539487bb0faf2862059c7aab7bc98`
> GET https://lumerico.mx/president-bypass/.git/objects/79/e2fa35af7d9fee7961bee8d61ed096860f3b35 --> objects/79/e2fa35af7d9fee7961bee8d61ed096860f3b35
> GET https://lumerico.mx/president-bypass/.git/objects/54/273bcc08ed806cb37e3c6d3e146c2a17744964 --> objects/54/273bcc08ed806cb37e3c6d3e146c2a17744964
objects/54/273bcc08ed806cb37e3c6d3e146c2a17744964 already downloaded
objects/79/e2fa35af7d9fee7961bee8d61ed096860f3b35 already downloaded
> GET https://lumerico.mx/president-bypass/.git/objects/91/141f7bb072c3305c727c471e628358b23b6b48 --> objects/91/141f7bb072c3305c727c471e628358b23b6b48
> GET https://lumerico.mx/president-bypass/.git/objects/07/521638776e9f959c311373512aa87a58bfd570 --> objects/07/521638776e9f959c311373512aa87a58bfd570
> GET https://lumerico.mx/president-bypass/.git/objects/91/141f7bb072c3305c727c471e628358b23b6b48 --> objects/91/141f7bb072c3305c727c471e628358b23b6b48
> GET https://lumerico.mx/president-bypass/.git/objects/07/521638776e9f959c311373512aa87a58bfd570 --> objects/07/521638776e9f959c311373512aa87a58bfd570
Now, the directory will resemble a git repo
$ cd sombra/
$ ls
HEAD config description index info/ logs/ objects/ refs/
$ git log
commit 677d90499d571221e2ec71914e56aee35afa9340
Author: pedro <pedro@lumerico.mx>
Date: Wed Oct 12 20:09:41 2016 -0400
president auth bypass
Signed-off-by: pedro <pedro@lumerico.mx>
MIT
FAQs
Dump the contents of a remote git repository without directory listing enabled
We found that git-dump demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.