URLs that scanners look for. Make sure not to have them, or secure them.

gistfile1.txt

/8agjp0goaqjbnu
/.env
/.env.local
/.env.production
/.env.development
/.env.dev
/.env.prod
/.env.test
/.env.staging
/.env.backup
/.env.save
/.env.old
/.env.bak
/.env.tmp
/.env.swp
/.env~
/.env.example
/.env.sample
/.env.dist
/.env.template
/.env.production.local
/.env.development.local
/.env.test.local
/.envrc
/.flaskenv
/env
/env.js
/env.json
/app/.env
/src/.env
/config/.env
/backend/.env
/frontend/.env
/api/.env
/server/.env
/client/.env
/web/.env
/public/.env
/private/.env
/var/.env
/docker-compose.yml
/docker-compose.yaml
/docker-compose.override.yml
/docker-compose.dev.yml
/docker-compose.prod.yml
/config.js
/config.json
/settings.js
/settings.json
/secrets.json
/credentials.json
/app.js
/main.js
/index.js
/server.js
/bundle.js
/app.bundle.js
/main.bundle.js
/vendor.js
/chunk.js
/static/js/main.js
/static/js/app.js
/static/js/bundle.js
/dist/main.js
/dist/app.js
/dist/bundle.js
/build/static/js/main.js
/assets/index.js
/assets/app.js
/_next/static/chunks/main.js
/_next/static/chunks/app.js
/js/app.js
/js/main.js
/settings.py
/config.py
/secrets.py
/config/secrets.yml
/config/master.key
/wp-config.php.bak
/wp-config.php.old
/wp-config.php.save
/wp-config.php.txt
/wp-config.php~
/config/app.php
/application.properties
/application.yml
/application.yaml
/application-dev.properties
/application-prod.properties
/appsettings.json
/appsettings.Development.json
/appsettings.Production.json
/config.yaml
/config.yml
/config.toml
/serverless.yml
/serverless.yaml
/config/production.json
/config/development.json
/config/default.json
/config/local.json
/conf/settings.json
/data/config.json
/actuator/env
/actuator/configprops
/api/config
/api/settings
/api/env
/backup/.env
/backups/.env
/old/.env
/temp/.env
/tmp/.env
/.streamlit/secrets.toml
/root/.streamlit/secrets.toml
/root/.aws/credentials
/home/ubuntu/.aws/credentials
/home/ec2-user/.aws/credentials
/home/node/.aws/credentials
/terraform.tfvars
/terraform.tfstate
/ecosystem.config.js
/secrets.yaml
/secrets.yml
/.secrets
/.env.vault
/.aws/credentials
/.aws/config
/.docker/config.json
/storage/framework/.env
/laravel/.env
/debug/vars
/.git/logs/HEAD
/.git/config
/.azure/credentials
/.azure/accessTokens.json
/.azure/azureProfile.json
/root/.azure/credentials
/root/.azure/accessTokens.json
/home/ubuntu/.azure/credentials
/home/node/.azure/credentials
/azure-credentials.json
/azure.json
/service-principal.json
/.gcp/credentials.json
/.gcp/service-account.json
/gcp-credentials.json
/gcp-service-account.json
/service-account.json
/google-credentials.json
/google-cloud-key.json
/firebase-adminsdk.json
/firebase-credentials.json
/root/.config/gcloud/application_default_credentials.json
/root/.config/gcloud/credentials.db
/home/ubuntu/.config/gcloud/application_default_credentials.json
/home/node/.config/gcloud/application_default_credentials.json
/app/credentials.json
/app/service-account.json
/config/gcp.json
/config/azure.json
/root/.config/hcloud/cli.toml
/home/ubuntu/.config/hcloud/cli.toml
/.hcloud.toml
/hcloud.yml
/root/.oci/config
/home/ubuntu/.oci/config
/.oci/config
/oci-config
/root/.ovh.conf
/home/ubuntu/.ovh.conf
/.ovh.conf
/ovh.conf
/root/.config/linode-cli
/home/ubuntu/.config/linode-cli
/.linode-cli
/root/.vultr-cli.yaml
/home/ubuntu/.vultr-cli.yaml
/.vultr-cli.yaml
/@fs/app/.env?raw??
/@fs/root/.env?raw??
/@fs/proc/self/environ?raw??
/@fs/.env?raw??
/@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw??
/@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw??
/@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw??
/@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??
/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw??
/@fs/../../../../../root/.env?raw??