GITEST

Quick Install

One-liner — requires curl, tar, and an internet connection. After setup, run /gidom for domain recon or /gitest for full exploitation.

curl -fsSL https://github.com/GiorMalik/gitest/archive/main.tar.gz | tar xz && bash gitest-main/setup.sh

Installation & Quick Start

Get GITEST installed and run your first scan.

Step-by-Step

Clone the repository:

code
git clone https://github.com/GiorMalik/gitest.git

Enter the project directory:

code
cd gitest

Make the installer executable:

code
chmod +x setup.sh

Run the installer:

code
./setup.sh

What Setup Does

  1. Verify dependencies — checks for curl, python3; auto-installs jq if missing
  2. Install GITEST command — copies gitest.md to the OpenCode commands directory
  3. Install GiDom command — copies gidom.md for domain recon + auth bridge
  4. Create SCAN directory — prepares the output structure

Quick Start

code
/gidom https://target.com             # 13-phase domain recon + auth
/gitest https://target.com            # Full exploitation (auto-imports gidom)

Run Your First Scan

Open OpenCode and run:

code
/gidom https://example.com         # 13-phase domain recon + auth
/gitest https://example.com        # Full exploitation (auto-imports gidom)

Both /gidom and /gitest are OpenCode slash commands — they do not work in a regular terminal. Open your OpenCode session and type them there.

What Happens?

  1. Recon — Subdomain discovery, port scanning, technology detection
  2. OSINT — Email harvesting, data leak detection
  3. Vulnerability Detection — Automated scanning with 250+ playbooks
  4. Exploitation — CVSS-scored exploitation verification
  5. Reporting — Comprehensive markdown report

View Results

List the scan output directory:

code
ls -la SCAN/targets/example.com/

Read the generated report:

code
cat SCAN/targets/example.com/reports/report-*.md

Manual Configuration

Override the scan output directory:

code
export GITEST_SCAN_DIR=/custom/path

Then run the installer:

code
./setup.sh

Dependencies

Required:

  • OpenCode CLI
  • bash, curl, jq, python3

Recommended (auto-detected at runtime):

  • nmap, nuclei — network and vulnerability scanning
  • ffuf, dalfox — web fuzzing and XSS detection
  • sqlmap — SQL injection automation
  • subfinder, httpx — subdomain discovery

Verify Installation

Inside OpenCode, type:

code
/gidom https://target.example.com      # Domain recon + auth
/gitest https://target.example.com     # Full exploitation

Both commands are installed as OpenCode slash commands. GiDom handles recon and auth, while GITEST handles the full exploitation pipeline with automatic bridge import.

Uninstall

Remove both GITEST and GiDom commands and scan data:

code
cd gitest && bash uninstall.sh

This removes:

  • gitest.md and gidom.md from the OpenCode commands directory
  • The ~/SCAN output directory (prompts for confirmation before deleting scan results)

To also remove the cloned repository:

code
rm -rf gitest
Previous← IntroductionNextRequirements →