RSSAmplifier

Sorcery Blog · Nov 23, 2020

Exposed .git Folder and How To Remediate it

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

Discovery Usually we find this when directory bruteforce returns positive results from the following urls: http://site.com/.git/ http://site.com/.git/config http://site.com/.git/HEAD http://site.com/.git/index Many times the .git/ may be 403 (due to directory listing being disabled) but the files within it are downloadable. A lot of the git files are at known paths and the rest can be worked out…

Read on /posts/git-directory-exposure/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.