BugBountyHunter

Hey, i found that their are many important files leaking from server which should be generally 403 forbidden normal users. It's a server misconfiguration.

Steps:

1. Composer files are leaking from server.

• visit https://1b42ba552850-newrouge.a.firstbloodhackers.com/composer.json

    "require": {
        "monolog/monolog": "2.1.1"
    }
}

• visit https://1b42ba552850-newrouge.a.firstbloodhackers.com/composer.phar , leaks server php archive files.

• visit https://1b42ba552850-newrouge.a.firstbloodhackers.com/composer.lock leaks libraries used.

• Visit https://1b42ba552850-newrouge.a.firstbloodhackers.com/.gitignore and
• Visit https://1b42ba552850-newrouge.a.firstbloodhackers.com/.gitattributes files leaking

These files should not be exposed to everyone.

Thank you

newrouge