# RepoReaper | An Automated Tool Crafted To Meticulously Scan And Identify Exposed

**URL:** <https://onehack.st/t/reporeaper-an-automated-tool-crafted-to-meticulously-scan-and-identify-exposed/276900>\
**Category:** Tools & Scripts\
**Tags:** programming, hosting\
**Created:** [March 3, 2024, 2:56pm UTC](https://onehack.st/t/reporeaper-an-automated-tool-crafted-to-meticulously-scan-and-identify-exposed/276900 "2024-03-03T14:56:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [March 3, 2024, 2:56pm UTC](https://onehack.st/t/reporeaper-an-automated-tool-crafted-to-meticulously-scan-and-identify-exposed/276900/1 "2024-03-03T14:56:55Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/7/0/7055a72f3a4cbf3663263b519a21ca8b0a94f1ab.jpeg)

# RepoReaper

## Overview

RepoReaper is a precision tool designed to automate the identification of exposed `.git` repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible `.git` files. This enables rapid assessment and protection against information leaks, making RepoReaper an essential resource for security teams and web developers.

## Features

- Automated scanning of domains and subdomains for exposed `.git` repositories.
- Streamlines the detection of sensitive data exposures.
- User-friendly command-line interface.
- Ideal for security audits and Bug Bounty.

## Installation

Clone the repository and install the required dependencies:

git clone [https://github.com/YourUsername/RepoReaper.git](https://github.com/YourUsername/RepoReaper.git) cd RepoReaper pip install -r requirements.txt chmod +x RepoReaper.py

## Usage

RepoReaper is executed from the command line and will prompt for the path to a file containing a list of domains or subdomains to be scanned.

To start RepoReaper, simply run:

./RepoReaper.py or python3 RepoReaper.py

Upon execution, RepoReaper will ask for the path to the file containing the domains or subdomains: Enter the path of the file containing domains

Provide the path to your text file when prompted. The file should contain one domain or subdomain per line, like so:

[example.com](http://example.com) [subdomain.example.com](http://subdomain.example.com) [anotherdomain.com](http://anotherdomain.com)

RepoReaper will then proceed to scan the provided domains or subdomains for exposed .git repositories and report its findings. [![Repo_Reaper](https://private-user-images.githubusercontent.com/66072013/306257905-906163b5-1050-41c8-963d-9c0efdd0aba7.PNG?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.b3TT23gmsgPq_eDJhYCemA1FWF52bw23bOWOVf2yJ2c)](https://private-user-images.githubusercontent.com/66072013/306257905-906163b5-1050-41c8-963d-9c0efdd0aba7.PNG?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.b3TT23gmsgPq_eDJhYCemA1FWF52bw23bOWOVf2yJ2c)

# Disclaimer

This tool is intended for educational purposes and security research only. The user assumes all responsibility for any damages or misuse resulting from its use.

## GitHub:

> **[GitHub - chaudharyarjun/RepoReaper: RepoReaper is an automated tool crafted to...](https://github.com/chaudharyarjun/RepoReaper)**
>
> RepoReaper is an automated tool crafted to meticulously scan and identify exposed .git repositories within specified domains and their subdomains.