Common Files
#TheFutureIsBright #BugBounty #bugbountytips BrokenCrystals by https://brightsec.com
Common Files - Tries to find common files that shouldn’t be publicly exposed (such as “phpinfo”, “.htaccess”, “ssh-key.priv”, etc…). The application contains .htacess and Nginx.conf files under the client's root directory and additional files can be added by placing them under the public/public directory and running a build of the client.
Lab: https://brokencrystals.com
Wordlists: https://github.com/Bo0oM/fuzz.txt/blo...
Tool: https://github.com/ffuf/ffuf