Attacks + Vulnerabilities

.git Directory Exposed

If a web application contains a .git directory, you can retrieve all its content using the command wget -r http://web.com/.git.

Afterward, you can examine the modifications by employing git diff.

git Dumper

GitHub - internetwache/GitTools: A repository with 3 tools for pwn'ing websites with .git repositories availableGitHub

$ ./gitdumper.sh -h
bash gitdumper.sh http://target.tld/.git/ dest-dir