Exposed .git Directory Leading to Source Code Disclosure and Hardcoded Credentials
During a web application assessment, I discovered an exposed .git directory that allowed me to download the application's entire source code. By extracting and analysing the git objects, I identified hardcoded credentials that granted admin-level acc...
Dec 16, 20252 min read226
