Domain git.rtolife.com
Poland
Software information
Apache
tcp/443
-
Git configuration and history exposed
The following URL (usually
/.git/config) is publicly accessible and is leaking source code and repository configuration.First seen 2024-08-23 19:20-
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522f087ba5b[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [branch "master"] [branch "master"] remote = origin merge = refs/heads/master [remote "origin"] url = ssh://admin@git.confnet.pl:9222/proj.erp/erp.www.git fetch = +refs/heads/*:refs/remotes/origin/* [pull] rebase = false
Found on 2024-08-23 19:20318 Bytes
-
-
Open service 57.128.240.80:443 ยท git.rtolife.com
2026-01-09 03:58
HTTP/1.1 200 OK Date: Fri, 09 Jan 2026 03:58:42 GMT Server: Apache Cache-Control: max-age=0, private, must-revalidate, no-transform Content-Type: text/html; charset=utf-8 X-Frame-Options: SAMEORIGIN Set-Cookie: i_like_gitea=686bdd31e17010b4; Path=/; HttpOnly; Secure; SameSite=Lax Set-Cookie: _csrf=qasaZmn9c4tQTrd5W0DSHXctwpE6MTc2NzkzMTEyMjAzMTY1NDE5OA; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Page title: Gitea: RTOLife <!DOCTYPE html> <html lang="en-US" data-theme="gitea-auto"> <head> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Gitea: RTOLife</title> <link rel="manifest" href="data:application/json;base64,eyJuYW1lIjoiR2l0ZWE6IFJUT0xpZmUiLCJzaG9ydF9uYW1lIjoiR2l0ZWE6IFJUT0xpZmUiLCJzdGFydF91cmwiOiJodHRwczovL2dpdC5ydG9saWZlLmNvbS8iLCJpY29ucyI6W3sic3JjIjoiaHR0cHM6Ly9naXQucnRvbGlmZS5jb20vYXNzZXRzL2ltZy9sb2dvLnBuZyIsInR5cGUiOiJpbWFnZS9wbmciLCJzaXplcyI6IjUxMng1MTIifSx7InNyYyI6Imh0dHBzOi8vZ2l0LnJ0b2xpZmUuY29tL2Fzc2V0cy9pbWcvbG9nby5zdmciLCJ0eXBlIjoiaW1hZ2Uvc3ZnK3htbCIsInNpemVzIjoiNTEyeDUxMiJ9XX0="> <meta name="author" content="Gitea - Git with a cup of tea"> <meta name="description" content="Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go"> <meta name="keywords" content="go,git,self-hosted,gitea"> <meta name="referrer" content="no-referrer"> <link rel="icon" href="/assets/img/favicon.svg" type="image/svg+xml"> <link rel="alternate icon" href="/assets/img/favicon.png" type="image/png"> <meta property="og:title" content="Gitea: RTOLife"> <meta property="og:type" content="website"> <meta property="og:image" content="/assets/img/logo.png"> <meta property="og:url" content="https://git.rtolife.com/"> <meta property="og:description" content="Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go"> <meta property="og:site_name" content="Gitea: RTOLife"> <link rel="stylesheet" href="/assets/css/index.css?v=1.25.2"> <link rel="stylesheet" href="/assets/css/theme-gitea-auto.css?v=1.25.2"> <script> window.addEventListener('error', function(e) {window._globalHandlerErrors=window._globalHandlerErrors||[]; window._globalHandlerErrors.push(e);}); window.addEventListener('unhandledrejection', function(e) {window._globalHandlerErrors=window._globalHandlerErrors||[]; window._globalHandlerErrors.push(e);}); window.config = { appUrl: 'https:\/\/git.rtolife.com\/', appSubUrl: '', assetVersionEncoded: encodeURIComponent('1.25.2'), assetUrlPrefix: '\/assets', runModeIsProd: true , customEmojis: {"codeberg":":codeberg:","git":":git:","gitea":":gitea:","github":":github:","gitlab":":gitlab:","gogs":":gogs:"}, csrfToken: 'qasaZmn9c4tQTrd5W0DSHXctwpE6MTc2NzkzMTEyMjAzMTY1NDE5OA', pageData: {}, notificationSettings: {"EventSourceUpdateTime":10000,"MaxTimeout":60000,"MinTimeout":10000,"TimeoutStep":10000}, enableTimeTracking: true , mermaidMaxSourceCharacters: 50000 , i18n: { copy_success: "Copied!", copy_error: "Copy failed", error_occurred: "An error occurred", remove_label_str: "Remove item \"%s\"", modal_confirm: "Confirm", modal_cancel: "Cancel", more_items: "More items", }, }; window.config.pageData = window.config.pageData || {}; </script> <script src="/assets/js/index.js?v=1.25.2" onerror="alert('Failed to load asset files from ' + this.src + '. Please make sure the asset files can be accessed.')"></script> </head> <body hx-headers='{"x-csrf-token": "qasaZmn9c4tQTrd5W0DSHXctwpE6MTc2NzkzMTEyMjAzMTY1NDE5OA"}' hx-swap="outerHTML" hx-ext="morph" hx-push-url="false"> <div class="full height"> <noscript>This website requires JavaScript.</noscript> <nav id="navbar" aria-label="Navigation Bar"> <div class="navbar-left"> <a class="item" id="navbar-logo" href="/" aria-label="Home"> <img width="30" height="30" src="/assets/img/logo.svg" alt="Logo" aria-hidden="true"> </a> <div class="ui secondary menu navbar-mobile-right only-mobile"> <button class="item ui icon mini button tw-m-0" id="navbar-expand-toggle" aria-label="Navigation Menu"><svg viewBox="0 0 16 16" class="svg octicon-three-bars" aria-hidden="true" width="16" height="16"><path d="M1 2.75A.75.75 0 0 1 1.75 2h12.5a.75.75 0 0 1 0 1.5H1.75A.75.75 0 0 1 1 2.75m0 5A.75.75 0 0 1 1.75 7h12.5a.75.75 0 0 1 0 1.5H1.75A.75.75 0 0 1 1 7.75M1.75 12h12.5a.75.75 0 0 1 0 1.5H1.75a.75.75 0 0 1 0-1.5"/></svg></button> </div> <a class="item" href="/explore/repos">Explore</a> <a class="itFound 2026-01-09 by HttpPluginCreate report