domains / families / security / insecure-source-code-management

insecure-source-code-management

separate

Source control and artifact exposure (.git, .svn, .hg, backups, .env). Use when recon finds VCS paths, 403 on hidden dirs, or backup/config leaks during authorized testing.

When to use

Source control exposure
Artifact exposure
VCS path detection
403 on hidden dirs
Backup leaks
Config leaks
Git exposure
SVN exposure

When not to use

Unauthorized testing
Exfiltrating real data beyond scope

Skill page

Source

Repository	Path
yaklang/hack-skills	`skills/insecure-source-code-management/SKILL.md`