source-code-disclosure

git-dumper: How Exposed .git Directories Get Dumped and How to Stop It

git-dumper reconstructs an entire source tree from an exposed .git folder on a web server. Here is how the attack works and how to close the hole.