Unverified50% confidenceFactExact time
暴露的.git目录可被攻击者利用git clone或专用工具（如GitTools）完整重建项目源码
1
Sources
50%
Confidence
Long-term
Relevance
7/9/2026
First Seen
Sources
OSINT工具自动发现域名暴露文件：原理、应用与合规边界
hackernewshackernews7/5/2026
Related Claims
UnverifiedGitHub等平台对恢复码进行哈希后存储而非明文存储，即便数据库泄露也无法直接获取有效恢复码72% similarUnverifiedSecurity researchers disclosed an attack method targeting GitHub AI agents, codenamed GitLost, which tricks the GitHub AI assistant into leaking the contents of private code repositories through prompt injection.71% similarUnverifiedThe Repo Prompt tool can accept a GitHub link and help convert the code structure of an open-source project into structured prompts understandable by agents.70% similarUnverifiedCodex App's code rollback operates based on Git change records, where each conversation's code modifications generate corresponding Git records, and a revert operation can be performed on any record.69% similarVerifiedEven after deleting a file containing sensitive information and recommitting, the complete file content is still retained in Git's history and can be found via the git log and git show commands.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/330972API
curl https://kongchang.com/api/v1/knowledge/claims/330972MCP
get_claim(id=330972)