The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: high
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a652249c832f5
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://WappCoZa@bitbucket.org/WappProjects/app.git fetch = +refs/heads/*:refs/remotes/origin/* [branch "master"] remote = origin merge = refs/heads/master [branch "feature/http-to-https"] remote = origin merge = refs/heads/feature/http-to-https
Open service 54.155.248.214:443 ยท www.build.digitaldrawingroom.co.za
2026-01-09 05:16
HTTP/1.1 401
Date: Fri, 09 Jan 2026 05:16:57 GMT
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Poynt-Request-Id: e4a28af3-abc1-4f73-b97e-727b41f65abf
X-Request-Id: e4a28af3-abc1-4f73-b97e-727b41f65abf
Poynt-Build-Info: 1.4.494-2025-12-10T02:31:40Z
Instance-Id: poynt-fargate/91dbec50b5f846319a7b2dd9a64b1a24
Poynt-Error-Code: INVALID_ACCESS_TOKEN
{"code":"INVALID_ACCESS_TOKEN","httpStatus":401,"message":"Access token is missing or invalid.","developerMessage":"authorization header must carry access token.","requestId":"e4a28af3-abc1-4f73-b97e-727b41f65abf"}