snag.page

Every check ยท Exposed files

docker-compose.yml

exposure/docker-compose

What it checks

/docker-compose.yml

Why it matters

It describes the site's services, and may hold passwords.

How to fix it

  1. Remove it from the web root, or block it in the web server.
  2. Change any password it holds.

Check a site for this and everything else: snag.page. More on exposed files: Exposed files Keys in scripts Git repository Environment files wp-config.php copies Database dumps AWS and npm credentials Private SSH keys Editor upload settings Spring Boot actuator Terraform state Git credentials Kubernetes config phpinfo() pages Debug panels Subversion and Mercurial Backup archives Password files PHP error logs Laravel logs ELMAH error logs Database admin pages Apache server-status Go's pprof Directory listings .DS_Store files WordPress users