Git files hidden in plain sight 🫥 – Tyler Cipriani
Posted by jpluimers on 2026/11/05
Infinite magic awaits the intrepid developer willing to abuse git plumbing. After all, git is just a database with a terrible interface.
From [Wayback/Archive] Git files hidden in plain sight 🫥 – Tyler Cipriani
I wonder how various endpoint security solutions handle this (:
Via:
- [Wayback/Archive] Kris: “https://tylercipriani.com/blog…” – chaos.social
How to mangle a git repo to contain invisible files with invisible refs, so that you can pull an empty repo and then have data.
- [Wayback/Archive] chrysn: “@liketechnik @isotopp It’s a g…” – chaos.social
I prefer to see that as a corollary to “git is really just a hash based digraph store” and “every graph store can be abused as a bad database”.
–jeroen
Leave a Comment