The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fb55fdb4
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/Fred-Hunter/idle-magic fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX3p2aFdVR1ZxWXBkRHcxeFVnY3pTUXk5TEtQZlRldDAyclFMOA== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522e6da70c6
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/Fred-Hunter/idle-magic fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzX1JwazhEUm5kaUJHbkpsaFZ5NHhwWFFid1JRZGs0MTF2NW1oeg== [branch "main"] remote = origin merge = refs/heads/main
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522afc98ceb
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/Fred-Hunter/idle-magic fetch = +refs/heads/*:refs/remotes/origin/* [gc] auto = 0 [http "https://github.com/"] extraheader = AUTHORIZATION: basic eC1hY2Nlc3MtdG9rZW46Z2hzXzA3allKdVNQZVE1QXZrMXo2OHJjMHZmWkFKbUJGQTFkNDIzYw== [branch "main"] remote = origin merge = refs/heads/main
Open service 20.101.2.157:443 · magic.green-venator.com
2026-01-09 14:18
HTTP/1.1 200 OK
Content-Length: 2277
Connection: close
Content-Type: text/html
Date: Fri, 09 Jan 2026 14:19:47 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "87798747"
Last-Modified: Sat, 15 Nov 2025 20:08:33 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Edit
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Edit</title>
<link rel="stylesheet" href="styles.css">
<script type="module" src="scripts.js" defer></script>
</head>
<body>
<div class="game-container edit-page">
<div class="container">
<div id="enemy-info" class="enemy-info">
<h3 id="enemy-name">Enemy</h3>
<p id="enemy-hp">Max HP: --</p>
<p id="enemy-resistances"></p>
</div>
<div class="shop-container">
<h2>Spell Shop</h2>
<div class="currency-display">
<span>Currency: </span><span id="currency">Unknown</span>
</div>
<div class="shop-spells" id="shop-spells">
<!-- Spells will be dynamically generated from spell-definitions.js -->
</div>
<button class="terminal-btn" onclick="location.href='game.html'">Go to Game</button>
<button class="terminal-btn reset-btn" onclick="resetGame()">Reset Game</button>
</div>
<div class="bottom-half">
<div class="wand" id="wand1">
<div class="label">Wand 1</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
<div class="wand" id="wand2">
<div class="label">Wand 2</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
</div>
</div>
</div>
<button class="clear-storage-button" onclick="clearLocalStorage()">Clear Local Storage</button>
<!-- Tooltip -->
<div id="tooltip" class="tooltip hidden"></div>
<!-- Modal -->
<div id="modal" class="modal hidden">
<div class="modal-content">
<p>Not enough currency to buy this spell!</p>
<button onclick="closeModal()">OK</button>
</div>
</div>
</body>
</html>
Open service 20.101.2.157:443 · magic.green-venator.com
2026-01-02 19:09
HTTP/1.1 200 OK
Content-Length: 2277
Connection: close
Content-Type: text/html
Date: Fri, 02 Jan 2026 19:09:41 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "87798747"
Last-Modified: Sat, 15 Nov 2025 20:08:33 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Edit
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Edit</title>
<link rel="stylesheet" href="styles.css">
<script type="module" src="scripts.js" defer></script>
</head>
<body>
<div class="game-container edit-page">
<div class="container">
<div id="enemy-info" class="enemy-info">
<h3 id="enemy-name">Enemy</h3>
<p id="enemy-hp">Max HP: --</p>
<p id="enemy-resistances"></p>
</div>
<div class="shop-container">
<h2>Spell Shop</h2>
<div class="currency-display">
<span>Currency: </span><span id="currency">Unknown</span>
</div>
<div class="shop-spells" id="shop-spells">
<!-- Spells will be dynamically generated from spell-definitions.js -->
</div>
<button class="terminal-btn" onclick="location.href='game.html'">Go to Game</button>
<button class="terminal-btn reset-btn" onclick="resetGame()">Reset Game</button>
</div>
<div class="bottom-half">
<div class="wand" id="wand1">
<div class="label">Wand 1</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
<div class="wand" id="wand2">
<div class="label">Wand 2</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
</div>
</div>
</div>
<button class="clear-storage-button" onclick="clearLocalStorage()">Clear Local Storage</button>
<!-- Tooltip -->
<div id="tooltip" class="tooltip hidden"></div>
<!-- Modal -->
<div id="modal" class="modal hidden">
<div class="modal-content">
<p>Not enough currency to buy this spell!</p>
<button onclick="closeModal()">OK</button>
</div>
</div>
</body>
</html>
Open service 20.101.2.157:443 · magic.green-venator.com
2025-12-23 07:56
HTTP/1.1 200 OK
Content-Length: 2277
Connection: close
Content-Type: text/html
Date: Tue, 23 Dec 2025 07:56:25 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "87798747"
Last-Modified: Sat, 15 Nov 2025 20:08:33 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Edit
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Edit</title>
<link rel="stylesheet" href="styles.css">
<script type="module" src="scripts.js" defer></script>
</head>
<body>
<div class="game-container edit-page">
<div class="container">
<div id="enemy-info" class="enemy-info">
<h3 id="enemy-name">Enemy</h3>
<p id="enemy-hp">Max HP: --</p>
<p id="enemy-resistances"></p>
</div>
<div class="shop-container">
<h2>Spell Shop</h2>
<div class="currency-display">
<span>Currency: </span><span id="currency">Unknown</span>
</div>
<div class="shop-spells" id="shop-spells">
<!-- Spells will be dynamically generated from spell-definitions.js -->
</div>
<button class="terminal-btn" onclick="location.href='game.html'">Go to Game</button>
<button class="terminal-btn reset-btn" onclick="resetGame()">Reset Game</button>
</div>
<div class="bottom-half">
<div class="wand" id="wand1">
<div class="label">Wand 1</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
<div class="wand" id="wand2">
<div class="label">Wand 2</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
</div>
</div>
</div>
<button class="clear-storage-button" onclick="clearLocalStorage()">Clear Local Storage</button>
<!-- Tooltip -->
<div id="tooltip" class="tooltip hidden"></div>
<!-- Modal -->
<div id="modal" class="modal hidden">
<div class="modal-content">
<p>Not enough currency to buy this spell!</p>
<button onclick="closeModal()">OK</button>
</div>
</div>
</body>
</html>
Open service 20.101.2.157:443 · magic.green-venator.com
2025-12-21 05:01
HTTP/1.1 200 OK
Content-Length: 2277
Connection: close
Content-Type: text/html
Date: Sun, 21 Dec 2025 05:01:44 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "87798747"
Last-Modified: Sat, 15 Nov 2025 20:08:33 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Edit
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Edit</title>
<link rel="stylesheet" href="styles.css">
<script type="module" src="scripts.js" defer></script>
</head>
<body>
<div class="game-container edit-page">
<div class="container">
<div id="enemy-info" class="enemy-info">
<h3 id="enemy-name">Enemy</h3>
<p id="enemy-hp">Max HP: --</p>
<p id="enemy-resistances"></p>
</div>
<div class="shop-container">
<h2>Spell Shop</h2>
<div class="currency-display">
<span>Currency: </span><span id="currency">Unknown</span>
</div>
<div class="shop-spells" id="shop-spells">
<!-- Spells will be dynamically generated from spell-definitions.js -->
</div>
<button class="terminal-btn" onclick="location.href='game.html'">Go to Game</button>
<button class="terminal-btn reset-btn" onclick="resetGame()">Reset Game</button>
</div>
<div class="bottom-half">
<div class="wand" id="wand1">
<div class="label">Wand 1</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
<div class="wand" id="wand2">
<div class="label">Wand 2</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
</div>
</div>
</div>
<button class="clear-storage-button" onclick="clearLocalStorage()">Clear Local Storage</button>
<!-- Tooltip -->
<div id="tooltip" class="tooltip hidden"></div>
<!-- Modal -->
<div id="modal" class="modal hidden">
<div class="modal-content">
<p>Not enough currency to buy this spell!</p>
<button onclick="closeModal()">OK</button>
</div>
</div>
</body>
</html>
Open service 20.101.2.157:443 · magic.green-venator.com
2025-12-19 06:19
HTTP/1.1 200 OK
Content-Length: 2277
Connection: close
Content-Type: text/html
Date: Fri, 19 Dec 2025 06:19:19 GMT
Cache-Control: public, must-revalidate, max-age=30
ETag: "87798747"
Last-Modified: Sat, 15 Nov 2025 20:08:33 GMT
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: off
Page title: Edit
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Edit</title>
<link rel="stylesheet" href="styles.css">
<script type="module" src="scripts.js" defer></script>
</head>
<body>
<div class="game-container edit-page">
<div class="container">
<div id="enemy-info" class="enemy-info">
<h3 id="enemy-name">Enemy</h3>
<p id="enemy-hp">Max HP: --</p>
<p id="enemy-resistances"></p>
</div>
<div class="shop-container">
<h2>Spell Shop</h2>
<div class="currency-display">
<span>Currency: </span><span id="currency">Unknown</span>
</div>
<div class="shop-spells" id="shop-spells">
<!-- Spells will be dynamically generated from spell-definitions.js -->
</div>
<button class="terminal-btn" onclick="location.href='game.html'">Go to Game</button>
<button class="terminal-btn reset-btn" onclick="resetGame()">Reset Game</button>
</div>
<div class="bottom-half">
<div class="wand" id="wand1">
<div class="label">Wand 1</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
<div class="wand" id="wand2">
<div class="label">Wand 2</div>
<button class="add-slot-button">
+
<span class="slot-cost">50</span>
</button>
</div>
</div>
</div>
</div>
<button class="clear-storage-button" onclick="clearLocalStorage()">Clear Local Storage</button>
<!-- Tooltip -->
<div id="tooltip" class="tooltip hidden"></div>
<!-- Modal -->
<div id="modal" class="modal hidden">
<div class="modal-content">
<p>Not enough currency to buy this spell!</p>
<button onclick="closeModal()">OK</button>
</div>
</div>
</body>
</html>