Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> A tool to discover, one to download and one to extract git repositories.

Hasn't dvcs-ripper [1] been around for longer? It supports other VCSes as well.

Also, the article fails to mention that a simple `git clone` would usually work as well, although that tends to be blocked in similar CTF challenges.

[1] https://github.com/kost/dvcs-ripper



Hi, one of the authors here.

I knew about dvcs-ripper, but thought that implementing another variant might be fun and let me learn about git internals.

Does a simple `git clone` really work? I just tested it and it failed:

``` $> git clone http://x.domain.tld/ fatal: repository 'http://x.domain.tld/' not found

$> git clone http://x.domain.tld/.git/ fatal: repository 'http://x.domain.tld/.git/' not found ```

And yes, the post's background is a CTF challenge that blocked a simple `git clone`.


I remember, that it was the 9447 ctf in 2014. The challenges were bashful and tumorous. See: https://github.com/ctfs/write-ups-2014/tree/master/9447-ctf-...


Since about 2012: https://k0st.wordpress.com/2012/10/23/rip-or-pillage-dvcs-st...

Parts are even in metasploit.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: