Home·Features·Sensitive path example
Sensitive path example
Sensitive paths · Demo shop·Routelint·
After the crawl, Routelint requests a short wordlist on the verified host. /debug is not linked from the page. It still answers.
- Route
- GET /debug
- Identity
- Anonymous probe
- Status
- 200
- Severity
- HIGH
{ "db": "postgres://internal:[REDACTED]@10.0.0.5:5432/shop", "jwt": "[REDACTED_JWT]", "stack": "Error: boom" }The same host also answers /actuator/env with that body. The probe is a GET inside the verified host.