ExposedGuard szerző: 0xS0B
Checks whether the sites you visit publicly expose their .git directory, .env files, or references to them, and warns you or saves them for you incase you miss them on your pentest.
Elérhető a Firefox for Android™-banElérhető a Firefox for Android™-ban
Olvassa le a QR-kódot, hogy megnyissa ezt a kiegészítőt a Firefox for Androidban
Kiegészítő metaadatai
A kiegészítő névjegye
ExposedGuard checks whether the websites you visit accidentally expose sensitive files to the public and warns you the moment it finds one.
Every time you load a page, ExposedGuard quietly probes the site for around 50 well-known file paths that developers frequently leave exposed by mistake: version control data (.git/HEAD, .git/config, .git/index, .svn/entries, .hg/), environment files (.env and its common variants like .env.production, .env.backup), credentials (.aws/credentials, .netrc, .htpasswd, SSH private keys, SFTP configs), leaked source backups (wp-config.php.bak, config.php~), backup archives (backup.zip, site.tar.gz), database dumps (db.sql, dump.sql), and debug leftovers (phpinfo.php, server-status, .DS_Store).
Unlike simple scanners, ExposedGuard validates every response, checking magic bytes, file signatures, and content patterns, so SPA catch-all routes and custom error pages don't produce false alarms. Probes run without cookies, detecting exactly what an anonymous visitor could access.
When something is found, a red badge counts the exposures on the toolbar icon, and you get a desktop notification. The popup shows each finding color-coded by severity with a content preview, lets you re-check a site manually, and keeps a history of all sites with findings. A built-in page scanner also spots references to .git and .env hidden in page source.
Privacy: ExposedGuard collects and transmits no data whatsoever. All checks happen locally, and findings never leave your browser.
Use responsibly: only probe sites you own or are authorized to test, and report exposures to the site owner.
Every time you load a page, ExposedGuard quietly probes the site for around 50 well-known file paths that developers frequently leave exposed by mistake: version control data (.git/HEAD, .git/config, .git/index, .svn/entries, .hg/), environment files (.env and its common variants like .env.production, .env.backup), credentials (.aws/credentials, .netrc, .htpasswd, SSH private keys, SFTP configs), leaked source backups (wp-config.php.bak, config.php~), backup archives (backup.zip, site.tar.gz), database dumps (db.sql, dump.sql), and debug leftovers (phpinfo.php, server-status, .DS_Store).
Unlike simple scanners, ExposedGuard validates every response, checking magic bytes, file signatures, and content patterns, so SPA catch-all routes and custom error pages don't produce false alarms. Probes run without cookies, detecting exactly what an anonymous visitor could access.
When something is found, a red badge counts the exposures on the toolbar icon, and you get a desktop notification. The popup shows each finding color-coded by severity with a content preview, lets you re-check a site manually, and keeps a history of all sites with findings. A built-in page scanner also spots references to .git and .env hidden in page source.
Privacy: ExposedGuard collects and transmits no data whatsoever. All checks happen locally, and findings never leave your browser.
Use responsibly: only probe sites you own or are authorized to test, and report exposures to the site owner.
Értékelés 0 szerkesztő által: 0
Engedélyek és adatok
Szükséges engedélyek:
- Értesítések megjelenítése
- Böngészőlapok elérése
- Böngészőtevékenység elérése navigáláskor
- Az adatai elérése az összes webhelyhez
Adatgyűjtés:
- A fejlesztő szerint ez a kiegészítő nem igényel adatgyűjtést.
További információk
- Kiegészítő hivatkozásai
- Verzió
- 1.2.1
- Méret
- 22,71 kB
- Legutóbb frissítve
- 5 napja (2026. aug. 28.)
- Kapcsolódó kategóriák
- Verziótörténet
- Gyűjteményhez adás