https://example.com/.git OR https://example.com/.git/head
It checks for /.git/config at each directory level and will report QID 150004 if found.
Thanks, Dave. I also see QID 13628 in Qualys Knowledge base. Does Qualys WAS look for this issue, or is it scanned by some other Qualys product?
QID 13628 is for a VM scan. It is not under the Web Application category, so is not part of the WAS scanning engine.
Retrieving data ...