- approachai2026-08-234433
都在找env文件```
cli-proxy-api | [2026-08-23 02:48:25] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.bak"
cli-proxy-api | [2026-08-23 02:48:28] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.backup"
cli-proxy-api | [2026-08-23 02:48:28] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.old"
cli-proxy-api | [2026-08-23 02:48:29] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.save"
cli-proxy-api | [2026-08-23 02:48:30] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.local"
cli-proxy-api | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.production"
cli-proxy-api | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.production.local"
cli-proxy-api | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.development"
cli-proxy-api | [2026-08-23 02:48:32] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.prod"
cli-proxy-api | [2026-08-23 02:48:32] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.dist"
cli-proxy-api | [2026-08-23 02:48:34] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.staging"
cli-proxy-api | [2026-08-23 02:48:35] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.testing"
cli-proxy-api | [2026-08-23 02:48:37] [fc0e9be2] [info ] [gin_logger.go:97] 200 | 15.328s | c| POST "/v1/responses"
cli-proxy-api | [2026-08-23 02:48:38] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/.env.example"
cli-proxy-api | [2026-08-23 02:48:39] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/api/.env"
cli-proxy-api | [2026-08-23 02:48:41] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/config/.env"
cli-proxy-api | [2026-08-23 02:48:41] [--------] [warn ] [gin_logger.go:95] 404 | 0s | 127.0.0.1 | GET "/public/.env"主楼 - 下班打卡_-_早退2026-08-2329468
这很明显不是爬虫,是在打野想捞 key
- 惊鱼2026-08-2310515
https只是通信协议,防不了爬虫也防不了打野
- kamikaze2026-08-235307
这与https无关,它寻找的是你接口的漏洞,而不是ssl套件的漏洞
- nospicy2026-08-2321597
和https有啥关系,一个是协议,一个是目录扫描