https://blog.sudarshana.io/blog/from-git-disclosure-to-remote-code-execution-and-more