Security · Queued result
Vulnerability & Exposure Scan
Serious automated check for leaked .git/.env/configs, tokens, backups, dumps and known web exposures (Nuclei + path probes).
What it’s for
Find the mistakes that actually get companies breached: public Git repos, env files with API keys, SQL dumps, AWS credentials, Spring actuator env, backup archives.
How it works
We hit a curated list of sensitive paths (.git/HEAD, .env, dumps, phpinfo, actuator…) and run Nuclei with exposure templates (configs, files, backups, tokens, logs, APIs). Intrusive/DoS templates stay off. Consent required.
What you get
Critical/warning findings with evidence URLs, plain-language risk, and remediation. Score drops hard when real leaks are found.
We look at
- .git / source leaks
- .env & secrets
- Config dumps
- Token exposures
- SQL/backups
- Nuclei exposure templates
How to use
- 1 Enter an https URL you own or are authorized to test.
- 2 Accept the permission checkbox — unauthorized scanning can be illegal.
- 3 Wait for the queued job (can take 1–3 minutes).
- 4 Fix critical leaks first, then rotate any exposed secrets.