The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Additionally the GIT credentials are present and could give unauthorized access to source code repository of private projects.
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c1c8cd01ce
[init] defaultBranch = none [fetch] recurseSubmodules = false [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-65_Rv3ssAnFu2pUW2sh26HB@gitlab.com/4TU/switch.exploit.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884029ffc42c1bda96353
[init] defaultBranch = none [fetch] recurseSubmodules = false [transfer] bundleURI = true [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:glcbt-65_y2Pyus1tGyN6jeNoWUxp@gitlab.com/4TU/switch.exploit.git fetch = +refs/heads/*:refs/remotes/origin/* [lfs] repositoryformatversion = 0
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c819ad80dfa
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_ygFH5NSRhjKmkkE-y1Vs@gitlab.com/4TU/switch.exploit.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c819ac61403
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:64_dQF9YtEAKhNGLWeiuGrd@gitlab.com/4TU/switch.exploit.git fetch = +refs/heads/*:refs/remotes/origin/*
Severity: critical
Fingerprint: 2580fa947178c88c8f88f4f64b143e4f192660cba91884022e566c81ec5de4e2
[init] defaultBranch = none [fetch] recurseSubmodules = false [core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://gitlab-ci-token:RMhySbz8Xg61YXvyx-jH@gitlab.com/4TU/switch.exploit.git fetch = +refs/heads/*:refs/remotes/origin/*
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-11 21:04
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Sun, 11 Jan 2026 21:14:09 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KEQDZ7P9QJ0FYZHFZQDGPF06
Date: Sun, 11 Jan 2026 21:04:09 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-10 21:03
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Sat, 10 Jan 2026 21:13:48 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KEMVHVK8W4SCWEQ4RVY0FWNS
Date: Sat, 10 Jan 2026 21:03:48 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-09 21:10
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Fri, 09 Jan 2026 21:20:39 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KEJ9HPS9G3EAGHGN21K3M4WG
Date: Fri, 09 Jan 2026 21:10:39 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-08 21:15
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Thu, 08 Jan 2026 21:25:12 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KEFQD9M1R4VSAN8J5Q8X4T0Q
Date: Thu, 08 Jan 2026 21:15:12 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-07 21:08
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Wed, 07 Jan 2026 21:18:27 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KED4M839E95WJ0ST4M2H103S
Date: Wed, 07 Jan 2026 21:08:27 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-06 21:03
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Tue, 06 Jan 2026 21:13:52 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KEAHZ3WXPDZC33PS4N4THPXS
Date: Tue, 06 Jan 2026 21:03:52 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-03 21:15
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Sat, 03 Jan 2026 21:25:13 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KE2VDRBJJ2TM3VS5EK7T1R32
Date: Sat, 03 Jan 2026 21:15:13 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-02 21:19
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Fri, 02 Jan 2026 21:29:09 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KE0987R3Z7E2ECSEGAS31AZJ
Date: Fri, 02 Jan 2026 21:19:09 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2026-01-01 21:22
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Thu, 01 Jan 2026 21:32:38 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KDXQ1W75KQ5YPH2R7HKANZAP
Date: Thu, 01 Jan 2026 21:22:38 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2025-12-31 21:24
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Wed, 31 Dec 2025 21:34:39 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KDV4RVQ8Q2WYXF82ANK4AV4J
Date: Wed, 31 Dec 2025 21:24:39 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2025-12-30 21:25
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Tue, 30 Dec 2025 21:35:30 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KDRJDPZPHK177G15PHVHV2WT
Date: Tue, 30 Dec 2025 21:25:30 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2025-12-22 23:37
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Mon, 22 Dec 2025 23:47:24 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KD46SEZRKVW56SA6F10A2HTQ
Date: Mon, 22 Dec 2025 23:37:24 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>
Open service 35.185.44.232:443 · switch.exploit.fortheusers.org
2025-12-20 05:42
HTTP/1.1 200 OK
Cache-Control: max-age=600
Content-Length: 393
Content-Type: text/html; charset=utf-8
Etag: "726f6a5883d364f374c1e29bca26b5c4954725057bd4e975afc148bcbc3a0bd4"
Expires: Sat, 20 Dec 2025 05:52:09 UTC
Last-Modified: Mon, 04 Mar 2024 00:03:48 GMT
Permissions-Policy: interest-cohort=()
Vary: Origin
X-Request-Id: 01KCX4F6100PSJKY1RAPEBB7NK
Date: Sat, 20 Dec 2025 05:42:09 GMT
Connection: close
Page title: Web Fusee Launcher
<!doctype html>
<html>
<head>
<title>Web Fusee Launcher</title>
<meta http-equiv="refresh" content="0; url=https://webrcm.github.io" />
</head>
<body>
Web Fusee is available at <a href="https://webrcm.github.io">webrcm.github.io</a>. You should be automatically redirected.
<script>
window.location.href = "https://webrcm.github.io";
</script>
</body>
</html>