What is Git daemon?
Git daemon serves repositories over the git protocol, often used for fast read-only distribution.
Common security issues
Anonymous repository access exposing source code
Secrets in history: keys, tokens, config files, old credentials
Overly broad export settings exposing unintended repos
Internal project disclosure that speeds up exploitation elsewhere
Enumeration
Detect Git daemon, list refs, and find exposed repos with credentials
Git Repository Enumeration
Exploitation
Clone repos and mine Git history for secrets and credentials