git-exposure: Git Metadata Directory Exposure

日期: 2025-08-01 | 影响软件: Git | POC: 已公开

漏洞描述

Git Metadata Directory exposed.

PoC代码[已公开]

id: git-exposure

info:
  name: Git Metadata Directory Exposure
  author: tess
  severity: medium
  description: Git Metadata Directory exposed.
  metadata:
    verified: true
    max-request: 1
  tags: logs,git,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/.git/"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "403 Forbidden"
          - "You do not have permission to access /.git/"
        condition: and

      - type: status
        status:
          - 403
# digest: 4b0a00483046022100c7da8eef9748f7d32f083ee532db64b41ad65d1a8cb51774a87a972162263954022100ee5a31d6a40def1b3e6923d758105101f8c81e0b425003649d1be2bed52e3c06:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/exposures/logs/git-exposure.yaml

相关漏洞推荐