---

01. /.env (/.env.local, /.env.production, /.env.production.local, /.env.development, /.env.development.local, /.env.develop, /.env.dev, /.env.stage, /.env.staging, /.env.test)
02. /.env.bak (/.env.old, /.env.backup, /.env.save, /.env.orig, /.env~, /.env.swp, /.env.swo, /..env.swp)
03. /backend/.env (/api/.env, /app/.env, /server/.env, /www/.env, /html/.env)
04. /config/.env (/private/.env, /deploy/.env, /docker/.env, /shared/.env, /current/.env)
05. /.env.production.bak (/.env.local.bak, /.env.development.bak, /.env.prod, /.env.prod.bak)
06. /.env.example (/.env.sample, /.env.template, /.env.dist, /.env.defaults)

07. /.git/config (/.git/config.bak, /app/.git/config, /api/.git/config)
08. /.git/HEAD (/backend/.git/HEAD, /www/.git/HEAD, /source/.git/HEAD)
09. /.git/index (/.git/index.bak, /app/.git/index, /api/.git/index)
10. /.git/packed-refs (/.git/refs/heads/main, /.git/refs/heads/master, /.git/info/refs)
11. /.git/logs/HEAD (/.git/logs/refs/heads/main, /.git/logs/refs/heads/master)
12. /.svn/wc.db (/.svn/entries, /app/.svn/wc.db, /web/.svn/wc.db)
13. /.hg/hgrc (/.hg/store/00changelog.i, /.hg/dirstate, /.hg/requires)
14. /.bzr/branch/branch.conf (/.bzr/branch/last-revision, /.bzr/checkout/dirstate)

15. /.aws/credentials (/.aws/credentials.bak, /aws/credentials, /credentials)
16. /.aws/config (/.aws/config.bak, /aws/config)
17. /.boto (/.boto.bak, /boto.cfg, /boto.cfg.bak)
18. /service-account.json (/service_account.json, /serviceAccountKey.json, /firebase-adminsdk.json, /gcloud-key.json)
19. /credentials.json (/google-credentials.json, /gcp-credentials.json, /config/credentials.json)
20. /.azure/accessTokens.json (/.azure/msal_token_cache.json, /.azure/azureProfile.json)
21. /.docker/config.json (/docker/config.json, /.dockercfg)
22. /.kube/config (/kubeconfig, /kubeconfig.yaml, /admin.conf)
23. /.npmrc (/.npmrc.bak, /app/.npmrc, /backend/.npmrc)
24. /.pypirc (/.pypirc.bak, /pypirc)
25. /.netrc (/.netrc.bak, /_netrc)
26. /.git-credentials (/.git-credentials.bak, /.config/git/credentials)
27. /auth.json (/.composer/auth.json, /composer/auth.json, /auth.json.bak)
28. /.ssh/id_rsa (/.ssh/id_ed25519, /.ssh/id_ecdsa, /.ssh/id_dsa)
29. /id_rsa (/id_ed25519, /deploy.key, /deployment.key, /ssh_key)
30. /private.key (/server.key, /ssl/private.key, /certs/server.key, /jwtRS256.key)

31. /config.json (/config.prod.json, /config.production.json, /config.local.json, /config/config.json)
32. /config.yaml (/config.yml, /config.prod.yaml, /config.production.yml, /config.local.yml)
33. /config.ini (/config.ini.bak, /config/database.ini, /database.ini)
34. /settings.json (/settings.production.json, /settings.local.json, /config/settings.json)
35. /secrets.json (/secrets.yaml, /secrets.yml, /config/secrets.json, /config/secrets.yml)
36. /database.yml (/config/database.yml, /config/database.yml.bak, /database.yaml)
37. /config/master.key (/config/master.key.bak, /master.key)
38. /wp-config.php.bak (/wp-config.php.old, /wp-config.php.save, /wp-config.php~, /wp-config.bak, /wp-config.txt)
39. /configuration.php.bak (/configuration.php.old, /configuration.php~, /configuration.txt)
40. /sites/default/settings.php.bak (/sites/default/settings.php.old, /sites/default/settings.local.php.bak)
41. /app/etc/env.php.bak (/app/etc/env.php.old, /app/etc/local.xml, /app/etc/local.xml.bak)
42. /config.php.bak (/config.php.old, /config.php.save, /config.php~, /config.inc.php.bak)
43. /settings.py (/settings.py.bak, /config/settings.py, /project/settings.py, /app/settings.py)
44. /local_settings.py (/local_settings.py.bak, /config/local_settings.py)
45. /appsettings.json (/appsettings.Production.json, /appsettings.Development.json, /appsettings.Staging.json)
46. /web.config.bak (/web.config.old, /web.config.save, /Web.config.bak, /web.config.zip)
47. /application.properties (/application-prod.properties, /application-dev.properties, /config/application.properties)
48. /application.yml (/application.yaml, /application-prod.yml, /application-dev.yml, /config/application.yml)
49. /bootstrap.yml (/bootstrap.yaml, /bootstrap.properties, /bootstrap-prod.yml)
50. /WEB-INF/web.xml (/WEB-INF/classes/application.properties, /WEB-INF/classes/application.yml)
51. /META-INF/context.xml (/META-INF/persistence.xml, /WEB-INF/classes/META-INF/persistence.xml)
52. /docker-compose.yml (/docker-compose.yaml, /docker-compose.prod.yml, /compose.yml, /compose.yaml)
53. /terraform.tfstate (/terraform.tfstate.backup, /terraform.tfstate.bak, /infra/terraform.tfstate)
54. /terraform.tfvars (/terraform.tfvars.json, /prod.tfvars, /production.tfvars, /secrets.auto.tfvars)
55. /ansible/group_vars/all.yml (/group_vars/all.yml, /group_vars/production.yml, /host_vars/localhost.yml)

56. /backup.sql (/backup.sql.gz, /backup.sql.zip, /backup.sql.bz2, /backup.sql.xz)
57. /dump.sql (/dump.sql.gz, /dump.sql.zip, /dump.sql.bz2)
58. /database.sql (/database.sql.gz, /db.sql, /db.sql.gz, /db_backup.sql)
59. /mysql.sql (/mysql.sql.gz, /mysqldump.sql, /mysqldump.sql.gz)
60. /postgres.sql (/postgres.sql.gz, /postgres.dump, /database.dump, /backup.dump)
61. /db.sqlite3 (/db.sqlite3.bak, /db.sqlite, /database.sqlite, /database.sqlite3, /app.db)
62. /database/database.sqlite (/storage/database.sqlite, /data/database.sqlite, /data/app.db)
63. /dump.rdb (/redis/dump.rdb, /data/dump.rdb, /backup/dump.rdb)
64. /appendonly.aof (/redis/appendonly.aof, /data/appendonly.aof)
65. /backup.zip (/backup.tar.gz, /backup.tgz, /backup.tar, /backup.7z, /backup.rar)
66. /www.zip (/www.tar.gz, /wwwroot.zip, /html.zip, /public_html.zip, /htdocs.zip)
67. /site.zip (/site.tar.gz, /website.zip, /web.zip, /portal.zip)
68. /source.zip (/source.tar.gz, /src.zip, /app.zip, /project.zip)
69. /backups/backup.zip (/backup/backup.zip, /backups/db.sql, /backup/database.sql.gz)
70. /.htpasswd (/.htpasswd.bak, /.htpasswd.old, /conf/.htpasswd, /config/.htpasswd)

71. /actuator/env (/env, /manage/env, /management/env)
72. /actuator/configprops (/configprops, /manage/configprops, /management/configprops)
73. /actuator/heapdump (/heapdump, /manage/heapdump, /management/heapdump)
74. /actuator/logfile (/logfile, /manage/logfile, /management/logfile)
75. /debug/pprof/heap (/debug/pprof/allocs, /debug/pprof/goroutine?debug=2)
76. /phpinfo.php (/info.php, /php_info.php, /test.php, /i.php)
77. /storage/logs/laravel.log (/storage/logs/laravel.log.1, /storage/logs/laravel.log.old)
78. /app/logs/prod.log (/var/log/prod.log, /var/log/dev.log, /app/logs/dev.log)
79. /logs/error.log (/error.log, /log/error.log, /logs/debug.log, /debug.log)
80. /elmah.axd (/ELMAH.axd, /elmah, /elmah.axd/rss)