DotGit: checking if .git is exposed in visited websites

by do son · January 22, 2022

DotGit

An extension for checking if .git is exposed in visited websites

Features

Check if a .git/.svn/.hg folder exists for each site you visit
Check if a .env file exists for each site you visit
Check if the site is open-source (github/gitlab)
Check if the site has security.txt
You will be notified when a folder is found
List of exposed sites found
Download the entire .git folder in zip format, even if the files are not listed on the site
View .git/config with one click
Options for: colors, notifications, and downloads

How the download works

There is a queue for downloads, with a maximum of simultaneous connections; if this number is exceeded, subsequent files are put on wait for X ms multiplied by the number of downloads already pending; the result of the multiplication cannot exceed the maximum wait

More info here

Note:

Downloading is an extra feature to DotGit, it is not meant to download large repositories (there are limits to the memory usable by extensions, and DotGit does everything in RAM)
Changing the download settings is recommended as by default the values are kept low to avoid problems for those who do not have a good connection or a good CPU, however, too high values could freeze the browser even on powerful computers
By default, svn, mercurial, and dotenv are disabled, to activate them just go to settings and turn them on