Twitter wordlist suggestions

People are finding it in wild.

PS: env.js can also contain sensitive information.

/assets/env.js
/env.js
/static/.env
/assets/.env
/.env

These path can contain critical data.

/ui/
/ui/repos/tree/General/

app/config/config.local.neon

If you encounter the default IIS Windows window, do not forget to check /haproxy and /netdata

also check about IIS short file name disclosure.

Last updated 1 year ago