A fast, extensible scanner for detecting exposed configuration files and debug endpoints
(e.g..env,.git,phpinfo(), Laravel debug pages) that may leak sensitive credentials.
-
Env File Detection
Scans for publicly accessible.envfiles and extracts key/value pairs. -
Git Directory Discovery
Detects exposed.gitrepositories and allows you to download or parse.git/config. -
PHP Info Scraping
Crawls forphpinfo()pages and parses out SMTP, database, and other configuration details. -
Laravel Debug Mode Finder
Identifies Laravel “Whoops” debug pages and extracts credentials from the HTML tables. -
Multi-Host Support
Feed it a list of domains/URLs; it will scan them all, in sequence or in parallel.