How I found a .env file and can access the whole server of mysql

Hello

Today I will tell you How I found a .env file in website

so Let’s started

First we need to install a extension called DotGit

You can install it via chrome extensions store

Once you have successfully install it you will see the icon into the extension tab

Now you just have open your target and if there is any git directory it will pop a message

You can simply click on pop message and redirect to git exposure directory

it also collect and save them so you can download them via the extension

once you have visited the webpage you will find some sensitive I found this

From this I have username and password of the mysql server so I can access it but I didn’t access as this can be out of scope

after this I report it to security team and I get acknowledgement from from them

Thank you for reading

Connect me on social Media via : https://linktr.ee/jeetpal2007