Description

This detector identifies exposed sensitive files on web servers that should not be publicly accessible. It attempts to access common sensitive file paths (configuration files, environment files, version control metadata) and validates if the responses contain actual sensitive content rather than soft-404 pages.

Detection Strategy

• Attempts to access a predefined list of sensitive file paths by making HTTP requests to these URLs

• Only reports vulnerabilities when the HTTP response returns a 200 status code

• Validates that the response content actually contains sensitive information using specific content validators for each file type, rejecting soft-404 HTML pages

• Creates vulnerability reports for each successfully accessed sensitive file that contains valid sensitive content