domains / families / security / source-leak-hunt

source-leak-hunt

separate

Mass scan for exposed env files, backups, and git configs.

When to use

• After `skill_view(name='wp-mass-recon')` confirms a target is alive.
• Broad scanning across a batch of domains.
• When probing for credential exposure that enables deeper access.
• Complementing `skill_view(name='js-secrets-extraction')` for client-side secrets.

When not to use

• SPA catch-all false positives without filtering

Skill page

Source