• approachai

    都在找env文件```
    cli-proxy-api | [2026-08-23 02:48:25] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.bak"
    cli-proxy-api | [2026-08-23 02:48:28] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.backup"
    cli-proxy-api | [2026-08-23 02:48:28] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.old"
    cli-proxy-api | [2026-08-23 02:48:29] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.save"
    cli-proxy-api | [2026-08-23 02:48:30] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.local"
    cli-proxy-api | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.production"
    cli-proxy-api | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.production.local"
    cli-proxy-api | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.development"
    cli-proxy-api | [2026-08-23 02:48:32] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.prod"
    cli-proxy-api | [2026-08-23 02:48:32] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.dist"
    cli-proxy-api | [2026-08-23 02:48:34] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.staging"
    cli-proxy-api | [2026-08-23 02:48:35] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.testing"
    cli-proxy-api | [2026-08-23 02:48:37] [fc0e9be2] [info ] [gin_logger.go:97] 200 | 15.328s | c| POST "/v1/responses"
    cli-proxy-api | [2026-08-23 02:48:38] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.example"
    cli-proxy-api | [2026-08-23 02:48:39] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/api/.env"
    cli-proxy-api | [2026-08-23 02:48:41] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/config/.env"
    cli-proxy-api | [2026-08-23 02:48:41] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/public/.env"

    主楼
  • 下班打卡_-_早退

    这很明显不是爬虫,是在打野想捞 key

    #1
  • 惊鱼

    https只是通信协议,防不了爬虫也防不了打野

    #2
  • kamikaze

    这与https无关,它寻找的是你接口的漏洞,而不是ssl套件的漏洞

    #3
  • nospicy

    和https有啥关系,一个是协议,一个是目录扫描

    #4

发表回复

登录后回复