From owner-dev-commits-ports-main@freebsd.org Fri May 7 03:44:09 2021 Return-Path: Delivered-To: dev-commits-ports-main@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id F39A86361FD; Fri, 7 May 2021 03:44:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4FbxBw6Pxdz3NkC; Fri, 7 May 2021 03:44:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id C0230246F7; Fri, 7 May 2021 03:44:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 1473i8mQ092272; Fri, 7 May 2021 03:44:08 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 1473i8un092271; Fri, 7 May 2021 03:44:08 GMT (envelope-from git) Date: Fri, 7 May 2021 03:44:08 GMT Message-Id: <202105070344.1473i8un092271@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Yuri Victorovich Subject: git: c6bfc1a00217 - main - New port: security/gitjacker: Leak git repositories from misconfigured websites MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: yuri X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: c6bfc1a002178b1c26623aa58775edd22b5b20dd Auto-Submitted: auto-generated X-BeenThere: dev-commits-ports-main@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Commits to the main branch of the FreeBSD ports repository List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 May 2021 03:44:09 -0000 The branch main has been updated by yuri: URL: https://cgit.FreeBSD.org/ports/commit/?id=c6bfc1a002178b1c26623aa58775edd22b5b20dd commit c6bfc1a002178b1c26623aa58775edd22b5b20dd Author: Yuri Victorovich AuthorDate: 2021-05-07 03:27:53 +0000 Commit: Yuri Victorovich CommitDate: 2021-05-07 03:44:02 +0000 New port: security/gitjacker: Leak git repositories from misconfigured websites --- security/Makefile | 1 + security/gitjacker/Makefile | 19 +++++++++++++++++++ security/gitjacker/distinfo | 5 +++++ security/gitjacker/pkg-descr | 8 ++++++++ 4 files changed, 33 insertions(+) diff --git a/security/Makefile b/security/Makefile index 3459b62abf2b..3b7a39ce0043 100644 --- a/security/Makefile +++ b/security/Makefile @@ -173,6 +173,7 @@ SUBDIR += git-crypt SUBDIR += git-remote-gcrypt SUBDIR += git-secret + SUBDIR += gitjacker SUBDIR += gnome-keyring SUBDIR += gnome-keyring-sharp SUBDIR += gnome-ssh-askpass diff --git a/security/gitjacker/Makefile b/security/gitjacker/Makefile new file mode 100644 index 000000000000..972d2697b7c2 --- /dev/null +++ b/security/gitjacker/Makefile @@ -0,0 +1,19 @@ +PORTNAME= gitjacker +DISTVERSIONPREFIX= v +DISTVERSION= 0.1.0 +CATEGORIES= security + +MAINTAINER= yuri@FreeBSD.org +COMMENT= Leak git repositories from misconfigured websites + +LICENSE= PD +LICENSE_FILE= ${WRKSRC}/LICENSE + +USES= go:modules + +GO_MODULE= github.com/liamg/gitjacker +GO_TARGET= ./cmd/${PORTNAME} + +PLIST_FILES= bin/${PORTNAME} + +.include diff --git a/security/gitjacker/distinfo b/security/gitjacker/distinfo new file mode 100644 index 000000000000..6d6c6bfe902e --- /dev/null +++ b/security/gitjacker/distinfo @@ -0,0 +1,5 @@ +TIMESTAMP = 1620355103 +SHA256 (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.mod) = b3db6be3fc30d6f4246b98b62a9a1aaeeb4baf56813250be44bc31d1346faebf +SIZE (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.mod) = 341 +SHA256 (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.zip) = 850de0ee593d0292c248275b1bd3aec2ec98f6336329aab516087544a1f345dc +SIZE (go/security_gitjacker/gitjacker-v0.1.0/v0.1.0.zip) = 239095 diff --git a/security/gitjacker/pkg-descr b/security/gitjacker/pkg-descr new file mode 100644 index 000000000000..889db1202ee6 --- /dev/null +++ b/security/gitjacker/pkg-descr @@ -0,0 +1,8 @@ +Gitjacker downloads git repositories and extracts their contents from sites +where the .git directory has been mistakenly uploaded. It will still manage +to recover a significant portion of a repository even where directory listings +are disabled. + +For educational/penetration testing use only. + +WWW: https://github.com/liamg/gitjacker