DotGit

An extension for checking if .git is exposed in visited websites

Features

• Check if a .git/.svn/.hg folder exists for each site you visit
• Check if a .env file exists for each site you visit
• Check if a .DS_Store file exists for each site you visit
• Check if the site is open source (github/gitlab)
• Check if the site has security.txt
• You will be notified when a folder is found
• List of exposed sites found
• Download the entire .git folder in zip format, even if the files are not listed on the site
• View .git/config with one click
• Options for: colors, notifications, timeouts and downloads

Some checks are turned off by default, open the settings to turn them on

Timeouts

Every network request (checks, downloads and the open-source probe) is aborted after the same request timeout, 15 seconds by default. You can change it in the settings: raise it if your connection is slow, lower it if you want the checks to fail fast.

How the download works

There is a queue for downloads, with a maximum of simultaneous connections; if this number is exceeded, subsequent files are queued and started as soon as a connection is free. A request that does not answer within the request timeout is counted as a network error, so a dead server cannot keep the download open forever.

Note:

• Downloading is an extra feature to DotGit, it is not meant to download large repositories (there are limits to the memory usable by extensions, and DotGit does everything in RAM)
• Changing the download settings is recommended as by default the values are kept low to avoid problems for those who do not have a good connection or a good CPU, however too high values could freeze the browser even on powerful computers
• By default, svn, mercurial, dotenv and .DS_Store are disabled, to activate them just go to settings and turn them on

Screenshot

Download: Firefox | Chrome