3 ms·
> A tool to discover, one to download and one to extract git repositories. Hasn't dvcs-ripper [1] been around for longer? It supports other VCSes as well. Als
by auscompgeek 9y ago
> A tool to discover, one to download and one to extract git repositories.
Hasn't dvcs-ripper [1] been around for longer? It supports other VCSes as well.
Also, the article fails to mention that a simple `git clone` would usually work as well, although that tends to be blocked in similar CTF challenges.
[1] https://github.com/kost/dvcs-ripper https://github.com/kost/dvcs-ripper
- gehaxelt 9y agoHi, one of the authors here. I knew about dvcs-ripper, but thought that implementing another variant might be fun and let me learn about git internals. Does a simple `git clone` really work? I just tested it and it failed: ``` $> git clone http://x.domain.tld/ http://x.domain.tld/ fatal: repository 'http://x.domain.tld/' http://x.domain.tld/' not found $> git clone http://x.domain.tld/.git/ http://x.domain.tld/.git/ fatal: repository 'http://x.domain.tld/.git/' http://x.domain.tld/.git/' not found ``` And yes, the post's background is a CTF challenge that blocked a simple `git clone`.
- bitwave 9y agoI remember, that it was the 9447 ctf in 2014. The challenges were bashful and tumorous. See: https://github.com/ctfs/write-ups-2014/tree/master/9447-ctf-2014/bashful https://github.com/ctfs/write-ups-2014/tree/master/9447-ctf-...
- rurban 9y agoSince about 2012: https://k0st.wordpress.com/2012/10/23/rip-or-pillage-dvcs-story-about-git/ https://k0st.wordpress.com/2012/10/23/rip-or-pillage-dvcs-st... Parts are even in metasploit.