Questions tagged [scm]
The scm tag has no summary.
3 questions
5 votes
1 answer
985 views
What could an attacker do on a server where Source Control Management (SCM) files are accessible?
I'm testing some servers with OpenVAS and I run into some SCM files that are remotely accessible: .git/config .git//info/exclude .git/description .git/HEAD that contains refs/heads/master and .git/...
- 53
0 votes
1 answer
448 views
How can I download an exposed mercurial directory?
I have a client with an open .hg directory. For example, the URL http://example.com/.hg/dirstate shows a plain text config file. They have not enabled directory listing, so http://example.com/.hg/ ...
- 35.6k