The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [scm]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
5
votes
1answer
97 views

What could an attacker do on a server where Source Control Management (SCM) files are accessible?

I'm testing some servers with OpenVAS and I run into some SCM files that are remotely accessible: .git/config .git//info/exclude .git/description .git/HEAD that contains refs/heads/master and .git/...
0
votes
2answers
70 views

Why Software Configuration Management tools (SCMs) authenticate only client instead of server?

I've noted that probably all of the 4 popular Software Configuration Management Tools (SCMs), ie.: Puppet, Ansible, Chef, Salt use only clients' authentication instead of the server authentication – ...
0
votes
1answer
113 views

How can I download an exposed mercurial directory?

I have a client with an open .hg directory. For example, the URL http://example.com/.hg/dirstate shows a plain text config file. They have not enabled directory listing, so http://example.com/.hg/ ...