1. find open repo
cat hosts | httpx -follow-redirects -title -path /repos?visibility=public -match-string "repository-container" -threads 9500
2. check if it vulnerable in response
''is not a valid ref and may not be"
3. hack it
cat hosts | httpx -follow-redirects -title -path /repos?visibility=public -match-string "repository-container" -threads 9500
2. check if it vulnerable in response
''is not a valid ref and may not be"
3. hack it
