Free Exposed Files Scanner
Check for publicly accessible sensitive files like .env, .git, and backup files.
✓ No signup required ✓ Instant results ✓ 100% free
Common Exposed Files to Watch For
🔑 .env Files
Environment files contain database passwords, API keys, and other secrets.
📁 .git Directory
Git repositories can expose your entire source code and commit history.
⚙️ Config Files
Configuration files like wp-config.php contain database credentials.
💾 Backup Files
SQL dumps and backup files can contain entire database contents.
📝 Log Files
Error logs may expose system paths, queries, and sensitive debug info.
🔍 phpinfo Files
PHP info pages reveal server configuration and installed modules.