Skip to content
KitploitKITPLOIT
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ

ํ•ดํ‚น, ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋„๊ตฌ๋ฅผ ๋‹น์‹ ์˜ ๋ณด์•ˆ ๋ฌด๊ธฐ๊ณ ์—!

Kitploit์€ ํ•ดํ‚น, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ฐ ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ตœ์‹  ํ”„๋กœ์ ํŠธ ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐœ๊ฒฌํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์ฐพ๊ณ , ์‹œ์Šคํ…œ์„ ๋ถ„์„ํ•˜๊ณ , ํ…Œ์ŠคํŠธ๋ฅผ ์ž๋™ํ™”ํ•˜๊ณ , ๋ณด์•ˆ์„ ๊ฐ•ํ™”ํ•˜์„ธ์š”.

ยทยทํ”ผ๋“œยท๋ฌธ์˜ยท๊ฐœ์ธ์ •๋ณดยทยฉ 2026 Kitploit

๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ

์นดํ…Œ๊ณ ๋ฆฌ

๋ชจ๋“  ์นดํ…Œ๊ณ ๋ฆฌ ๋ณด๊ธฐ
Loading categories
๋„๊ตฌ/GitHubGitHub/liamg/gitjacker
ReconnaissanceInformation GatheringWeb SecurityPenetration TestingMisconfiguration
GitHubliamg/gitjacker

gitjacker

๐Ÿ”ช :octocat: ์ž˜๋ชป ๊ตฌ์„ฑ๋œ ์›น์‚ฌ์ดํŠธ์—์„œ Git ์ €์žฅ์†Œ ์œ ์ถœ

์ €์žฅ์†Œ ๋ณด๊ธฐ
1.6k12049๊ฐœ์›” ์ „Kitploit ๊ฒ€ํ†  ์™„๋ฃŒ

์ธ๊ธฐ

๋ชจ๋‘ ๋ณด๊ธฐ โ†’

์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ๊ฐ€์žฅ ๋งŽ์ด ์‚ฌ์šฉ๋˜๋Š” ๋„๊ตฌ๋ฅผ ์ฐพ์•„๋ณด์„ธ์š”.

๋ชจ๋“  ๋„๊ตฌ ํƒ์ƒ‰

๋„๊ตฌ ์ปฌ๋ ‰์…˜์„ ๋‘˜๋Ÿฌ๋ณด์„ธ์š”

๋ชจ๋“  ๋„๊ตฌ ๋ณด๊ธฐ โ†’
๊ณต์œ 

gitjacker

Travis Build Status

Gitjacker๋Š” .git ๋””๋ ‰ํ„ฐ๋ฆฌ๊ฐ€ ์‹ค์ˆ˜๋กœ ์—…๋กœ๋“œ๋œ ์‚ฌ์ดํŠธ์—์„œ git ์ €์žฅ์†Œ๋ฅผ ๋‹ค์šด๋กœ๋“œํ•˜๊ณ  ๊ทธ ๋‚ด์šฉ์„ ์ถ”์ถœํ•ฉ๋‹ˆ๋‹ค. ๋””๋ ‰ํ„ฐ๋ฆฌ ๋ชฉ๋ก์ด ๋น„ํ™œ์„ฑํ™”๋œ ๊ฒฝ์šฐ์—๋„ ์ €์žฅ์†Œ์˜ ์ƒ๋‹น ๋ถ€๋ถ„์„ ๋ณต๊ตฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

๊ต์œก์šฉ/์นจํˆฌ ํ…Œ์ŠคํŠธ์šฉ์œผ๋กœ๋งŒ ์‚ฌ์šฉํ•˜์‹ญ์‹œ์˜ค.

์ž์„ธํ•œ ์ •๋ณด๋Š” https://liam-galvin.co.uk/security/2020/09/26/leaking-git-repos-from-misconfigured-sites.html์—์„œ ํ™•์ธํ•˜์„ธ์š”.

Demo Gif

์„ค์น˜

root@kitploit:~
curl -s "https://raw.githubusercontent.com/liamg/gitjacker/master/scripts/install.sh" | bash

...๋˜๋Š” ๋ฏธ๋ฆฌ ์ปดํŒŒ์ผ๋œ ๋ฐ”์ด๋„ˆ๋ฆฌ๋ฅผ ๋ฐ›์œผ์„ธ์š”.

Gitjacker๋ฅผ ์‚ฌ์šฉํ•˜๋ ค๋ฉด git์ด ์„ค์น˜๋˜์–ด ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

๋‰ด์Šค์—์„œ

  • 20/06/21: Console 58 - ๊ฐœ๋ฐœ์ž๋ฅผ ์œ„ํ•œ ํˆด๊ณผ ๋ฒ ํƒ€ ๋ฆด๋ฆฌ์Šค๋ฅผ ์†Œ๊ฐœํ•˜๋Š” ๋ฉ‹์ง„ ๋‰ด์Šค๋ ˆํ„ฐ.
  • 19/10/20: ZDNet ๊ธฐ์‚ฌ - ์˜จ๋ผ์ธ์— ๋…ธ์ถœ๋œ .git ํด๋”๋ฅผ ์ฐพ์„ ์ˆ˜ ์žˆ๋Š” ์ƒˆ๋กœ์šด Gitjacker ๋„๊ตฌ
๋„๊ตฌ ๋‹ค์šด๋กœ๋“œ