The name of the tool says it all, download exposed websites with an exposed /.git
#easy install
pip install git-dumper
pip install -r requirements.txt
#usage
python3 git_dumper.py http://targeg.com/.git ~/my_website_dir
######
if the repository you are downloading is controlled by an attacker,
this could lead to remote code execution on your machine.
######