hannob / snallygaster

Tool to scan for secret files on HTTP servers
BSD Zero Clause License
2.07k stars 228 forks source link

suggestion: adding check for .sql.gz files #63

Closed security-companion closed 3 years ago

security-companion commented 3 years ago

Hi, on my webspace I found backup files with ending .sql.gz files. Perhaps it would be worth also checking for this.

hannob commented 3 years ago

I'm not sure what exactly you're asking for. The sql_dump test checks for a variety of SQL backup files, including e.g. backup.sql.gz, dump.sql.gz and many more.

Which ones would you like to see that aren't covered yet?

security-companion commented 3 years ago

oh sorry, I hadn't seen that part of the code.