HexBrain

curl · Report #2915426

Git repository found

N/Astatus
highseverity
10upvotes
7 Jul 2025disclosed

How it was found

Summary:

Hello team , When i research I found domain vuln to downliad git repository and i will explain that.

Steps To Reproduce:

  1. Add DotGit extention on your browser
  2. Now try to access to that domain https://curl.dev/
  3. You will show that extention is alert and can download that bucket.

Impact

Summary:

The exposure of the /.git directory can lead to unauthorized access to sensitive information, such as source code, configuration files, and potentially secrets or credentials stored in the repository.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original