How a ‘.git’ file Leads to Zendesk Panel Takeover

بِسْمِ اللَّهِ الرَّحْمَـٰنِ الرَّحِيمِ

Greetings, hackers! In my recent Pentest Engagement at BugSwagger, join me as I discovered the ‘.git’ path that let me take over the Zendesk panel of the admin.

Introduction

This short writeup highlights a critical vulnerability discovered in a git repository. The vulnerability allows unauthorized actors to retrieve the entire source codebase using a simple command and have full access to the Zendesk Panel.

Using the command below we can dump the .git file using the goop tool:

The downloaded source code contains a file named: zendesk_functions.php that house sensitive credentials in plain text :

To confirm those credentials I go to https://www.zendesk.com/login/ to log in with those creds and as you can see below we have full admin panel access without any restrictions.