Every check ยท Exposed files
Kubernetes config
What it checks
/.kube/config
Why it matters
It holds a cluster's address and the credentials to control it.
How to fix it
- Delete the file from the server.
- Revoke the certificate or token in it, and make new ones.
- Check the cluster's audit log for what was done with them.
Check a site for this and everything else: snag.page. More on exposed files: Exposed files Keys in scripts Git repository Environment files wp-config.php copies Database dumps AWS and npm credentials Private SSH keys Editor upload settings Spring Boot actuator Terraform state Git credentials phpinfo() pages Debug panels Subversion and Mercurial Backup archives Password files PHP error logs Laravel logs ELMAH error logs Database admin pages Apache server-status Go's pprof docker-compose.yml Directory listings .DS_Store files WordPress users