ch0ic3/AllAboutBugBounty
1
0
Fork 0
mirror of https://github.com/daffainfo/AllAboutBugBounty.git synced 2024-12-18 18:36:12 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
ff38000ae4
AllAboutBugBounty/Exposed Source Code.md
Muhammad Daffa 1d466b1133
Added 2 tips in source code exposure
2021-03-05 13:53:08 +07:00

1.3 KiB
Raw Blame History

Exposed Source Code

Introduction

Source code intended to be kept server-side can sometimes end up being disclosed to users. Such code may contain sensitive information such as database passwords and secret keys, which may help malicious users formulate attacks against the application.

How to Find

  1. Exposed Git folder
https://site.com/.git

GIT folder

  1. Exposed Subversion folder
https://site.com/.svn

SVN folder

  1. Exposed Mercurial folder
https://site.com/.hg

HG folder

  1. Exposed Bazaar folder
http://target.com/.bzr

BZR folder

  1. Exposed Darcs folder
http://target.com/_darcs
  1. Exposed Bitkeeper folder
http://target.com/Bitkeeper

Reference: