How can I download an exposed mercurial directory?
I have a client with an open .hg directory. For example, the URL http://example.com/.hg/dirstate shows a plain text config file. They have not enabled directory listing, so http://example.com/.hg/ gives a 403 Forbidden page.
… Continue reading How can I download an exposed mercurial directory?