---
id: 4026
title: "Reports from the Field: Part 2"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/exposures-configuration-files"
published_at: "2022-03-08T00:00:00Z"
tags: ["php", "web-security", "attack-chaining", "git-config", "source-code-exposure", "credential-recovery"]
phying_url: "https://phying.com/item/4026"
lang: en
---

# Reports from the Field: Part 2

## Summary

Four ways an exposed .git/config file can be exploited: rebuilding repository contents, recovering hardcoded credentials, and finding vulnerabilities like PHP eval() issues leading to shell access.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2022-03-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/exposures-configuration-files
- **Phying News:** https://phying.com/item/4026