---
title: "Discussion on \"Exposed .git Directory Leading to Source Code Disclosure and Hardcoded Credentials\" | Hashnode"
description: "Discussion on \"Exposed .git Directory Leading to Source Code Disclosure and Hardcoded Credentials\". During a web application assessment, I discovered an exposed .git directory that allowed me to download the application's entire source code. By extracting and analysing the git objects, I identified hardcoded credentials that granted admin-level acc..."
url: "https://hashnode.com/posts/git-gone-wrong-application-compromise-via-exposed-git-directory/6691482dc35aa735cf0f7c50"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Exposed .git Directory Leading to Source Code Disclosure and Hardcoded Credentials](https://cybersekler.com/git-gone-wrong-application-compromise-via-exposed-git-directory?utm_source=hashnode&utm_medium=feed)

During a web application assessment, I discovered an exposed .git directory that allowed me to download the application's entire source code. By extracting and analysing the git objects, I identified hardcoded credentials that granted admin-level acc...

Dec 16, 2025 · 2 min read · cybersekler.com  
Updated Jan 16  
Read the article

-   [#penetration-testing](https://hashnode.com/tag/penetration-testing)
-   [#pentesting](https://hashnode.com/tag/pentesting)
-   [#hacking](https://hashnode.com/tag/hacking)
-   [#application-security](https://hashnode.com/tag/application-security)
-   [#bugbounty](https://hashnode.com/tag/bugbounty)

## Written by

[Cyber Sekler](https://hashnode.com/@CyberSekler)

@CyberSekler · United Kingdom

  
[View profile](https://hashnode.com/@CyberSekler)

Penetration Tester | Ethical Hacker

## Responses

Markdown supported · ⌘↵ to post

No responses yet.