May 2017
Intermediate to advanced
416 pages
21h 33m
English
The Nmap options -p80 --script http-git tell Nmap to initiate the NSE script http-git when a web server is detected on port 80 (-p80). The script attempts to access the /.git/ folder to obtain information, such as repository description, remotes, and last commit message. Depending on the purpose of the repository, we will find different types of information stored there. This issue could be very critical depending on the information stored as attackers can obtain source code of applications, internal details, and even credentials.
Read now
Unlock full access