ExposedGuard 제작자: 0xS0B
Checks whether the sites you visit publicly expose their .git directory, .env files, or references to them, and warns you or saves them for you incase you miss them on your pentest.
Android용 Firefox에서 이 확장 기능을 열려면 QR 코드를 스캔하세요
확장 메타 데이터
정보
ExposedGuard checks whether the websites you visit accidentally expose sensitive files to the public and warns you the moment it finds one.
Every time you load a page, ExposedGuard quietly probes the site for around 50 well-known file paths that developers frequently leave exposed by mistake: version control data (.git/HEAD, .git/config, .git/index, .svn/entries, .hg/), environment files (.env and its common variants like .env.production, .env.backup), credentials (.aws/credentials, .netrc, .htpasswd, SSH private keys, SFTP configs), leaked source backups (wp-config.php.bak, config.php~), backup archives (backup.zip, site.tar.gz), database dumps (db.sql, dump.sql), and debug leftovers (phpinfo.php, server-status, .DS_Store).
Unlike simple scanners, ExposedGuard validates every response, checking magic bytes, file signatures, and content patterns, so SPA catch-all routes and custom error pages don't produce false alarms. Probes run without cookies, detecting exactly what an anonymous visitor could access.
When something is found, a red badge counts the exposures on the toolbar icon, and you get a desktop notification. The popup shows each finding color-coded by severity with a content preview, lets you re-check a site manually, and keeps a history of all sites with findings. A built-in page scanner also spots references to .git and .env hidden in page source.
Privacy: ExposedGuard collects and transmits no data whatsoever. All checks happen locally, and findings never leave your browser.
Use responsibly: only probe sites you own or are authorized to test, and report exposures to the site owner.
Every time you load a page, ExposedGuard quietly probes the site for around 50 well-known file paths that developers frequently leave exposed by mistake: version control data (.git/HEAD, .git/config, .git/index, .svn/entries, .hg/), environment files (.env and its common variants like .env.production, .env.backup), credentials (.aws/credentials, .netrc, .htpasswd, SSH private keys, SFTP configs), leaked source backups (wp-config.php.bak, config.php~), backup archives (backup.zip, site.tar.gz), database dumps (db.sql, dump.sql), and debug leftovers (phpinfo.php, server-status, .DS_Store).
Unlike simple scanners, ExposedGuard validates every response, checking magic bytes, file signatures, and content patterns, so SPA catch-all routes and custom error pages don't produce false alarms. Probes run without cookies, detecting exactly what an anonymous visitor could access.
When something is found, a red badge counts the exposures on the toolbar icon, and you get a desktop notification. The popup shows each finding color-coded by severity with a content preview, lets you re-check a site manually, and keeps a history of all sites with findings. A built-in page scanner also spots references to .git and .env hidden in page source.
Privacy: ExposedGuard collects and transmits no data whatsoever. All checks happen locally, and findings never leave your browser.
Use responsibly: only probe sites you own or are authorized to test, and report exposures to the site owner.
리뷰어 0명이 0점으로 평가함
권한 및 데이터
필수 권한:
- 알림 표시
- 브라우저 탭에 접근
- 탐색 중 브라우저 활동에 접근
- 모든 웹사이트에서 사용자의 데이터에 접근
데이터 수집:
- 개발자는 이 확장 기능이 데이터 수집을 요구하지 않는다고 밝히고 있습니다.
추가 정보
- 부가 기능 링크
- 버전
- 1.2.1
- 크기
- 22.71 KB
- 최근 업데이트
- 한 달 전 (2026년 8월 28일)
- 관련 카테고리
- 버전 목록
- 모음집에 추가