{
  "port": 9418,
  "protocol": "tcp",
  "service": "Git protocol (git daemon)",
  "oneLiner": "git:// — anonymous, unauthenticated, unencrypted Git clones.",
  "whatItIs": "git daemon serves the Git pack transfer protocol on 9418, the transport behind git:// URLs; the registration is Linus Torvalds' own, from 2005. It is the fastest way to publish read-only repositories because it does no authentication and no encryption at all, and by default it will only export repositories explicitly marked with git-daemon-export-ok. GitHub disabled git:// entirely in 2022 because an unauthenticated transport gives a network attacker the ability to alter the code you clone.",
  "exposure": {
    "verdict": "careful",
    "note": "Read-only public mirrors are the design intent, but there is no integrity protection on the wire — prefer HTTPS or SSH, and never enable the receive-pack (push) service, which would let anyone write to your repositories."
  },
  "checkCommand": "git -c protocol.version=1 ls-remote git://TARGET/repo.git",
  "links": [
    {
      "title": "git-daemon documentation (default port 9418)",
      "url": "https://git-scm.com/docs/git-daemon",
      "kind": "official-docs"
    },
    {
      "title": "git/git",
      "url": "https://github.com/git/git",
      "kind": "github"
    },
    {
      "title": "IANA port registry — 9418 (git)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9418",
      "kind": "iana"
    }
  ]
}