The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226f9e6235
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = /home/ubuntu/repositories/academy.git fetch = +refs/heads/master:refs/remotes/origin/master
Open service 104.110.240.91:443 ยท theacademy.goodbysilverstein.com
2026-01-23 07:58
HTTP/1.1 200 OK X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=UTF-8 Expires: Fri, 23 Jan 2026 07:58:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 23 Jan 2026 07:58:08 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: PHPSESSID=5gmi1o2uooi4a067iirf6ejdvv; path=/ Akamai-GRN: 0.a7f06e68.1769155087.ed8d5ce