A cli script analyze the content of a remote git repository, or a local index file.
Install the package with pip
pip3 install git+https://github.com/wahlflo/RemoteGitRepoAnalyzer
Type remoteGitRepoAnalyzer --help to view the help.
usage: remoteGitRepoAnalyzer INPUT ACTION [OPTIONS]...
A cli script analyze the content of a remote git repo or a local index file
optional arguments:
-u URL, --url URL INPUT: URL to remote git repository
-i FILE_PATH, --index FILE_PATH
INPUT: Path to local index file
-h, --help prints the help text
-s, --structure ACTION: prints out all checked in files in the repo
-e, --file_extensions
ACTION: prints out all file_extensions of files in the repo
--files ACTION: prints out important files in the repo (with -v all files)
--gitignore ACTION: Shows the gitignore file
--config ACTION: Shows the config file
--assessment ACTION: Analyzes the content of the repo to find interesting files or configs (default action)
--logs ACTION: Shows the commit logs of the current branch
--useragent USERAGENT
OPTION: overrides the default user agent
--store OPTION: store the files which have been downloaded
-v, --verbose OPTION: verbose mode, shows also unimportant files etc.
remoteGitRepoAnalyzer -u https://example.com:443/.git/config --assessment
[+] analyze the config file: "https://example.com:443/.git/config"
[!] The remote certificate is not trusted
[+] analyze the index file: "https://example.com:443/.git/index"
[!] The remote certificate is not trusted
[+] analyze the README.md file: "https://example.com:443/README.md"
[!] The remote certificate is not trusted
[!] The URL "https://rootca-s.allianz.com:443/README.md" could not be downloaded
[+] analyze the gitignore file: "https://example.com:443/.gitignore"
[!] The remote certificate is not trusted
[+] found 7 findings.
############################################################
[*] URL of the repository origin: gitlab.example.com:Hak/test_repo.git
[!] username and password are included in the config file: bob:SecurePassword
[!] interesting file found: config/certificate.key
[+] the phrase "confidential" occurred in the README.md file: https://example.com:443/README.md
remoteGitRepoAnalyzer -u https://example.com:443/.git/config --structure
REPOSITORY
|-- .gitignore
|-- config.conf
|-- README.md
|-- .idea/
| |-- dapi_web.iml
| |-- modules.xml
| |-- vcs.xml
| |-- workspace.xml
|-- source/
| |-- composer.json
remoteGitRepoAnalyzer -u https://example.com:443/.git/config --logs
0000000000000000000000000000000000000000 8ba16761840bff3124eda5f33361cbed3b29a688 root <root@asdkljasd.(none)> 25.03.2019 18:53 +0000 clone: from https://github.com/userabc/abcde.git
8ba16761840bff3124eda5f33361cbed3b29a688 23af0ef2483f53ae2d2d6b9b947f29e3a679dc68 root <root@asdkljasd.(none)> 25.03.2019 21:55 +0000 commit: removed credentials from repository