Hacking Git Directories
How to reconstruct source code from an exposed .git directory
When attacking an application, obtaining the application’s source code can be extremely helpful for constructing an exploit. This is because some bugs, like SQL injections, are way easier to find using static code analysis compared to black-box testing.