GitTools
A collection of three tools for extracting, dumping, and scanning exposed .git repositories on websites to identify sensitive information and security vulnerabilities.
A collection of three tools for extracting, dumping, and scanning exposed .git repositories on websites to identify sensitive information and security vulnerabilities.
Checked October 2026.
GitTools is a collection of three specialized tools designed for extracting and analyzing information from exposed .git repositories on websites.
The toolkit includes:
These tools are commonly used during penetration testing and security assessments to identify information disclosure vulnerabilities when .git directories are accidentally exposed on web servers. The tools can help security professionals discover source code, configuration files, commit history, and potentially sensitive data that should not be publicly accessible.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about GitTools: features, pricing and alternatives.
GitTools is a product in the Penetration Testing category. It covers Sensitive Data and Reconnaissance.
GitTools is free. Download and setup instructions are at https://github.com/internetwache/GitTools/.
Alternatives to GitTools listed on CybersecTools:
Compare all GitTools alternatives at https://cybersectools.com/alternatives/gittools
GitTools is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A tool to dump a Git repository from a website
A collection of CLI tools and API utilities for searching and filtering GitHub repositories by various criteria including keywords, users, organizations, and repository attributes.
A tool to leak git repositories from misconfigured websites
Continuous DAST and real-time human-verified penetration testing for SaaS.
A powerful directory/file, DNS and VHost busting tool written in Go.
A fast and minimal JS endpoint extractor
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
