WordPress Sensitive File paths, add them in your worldlist

 


Surprise, a developer left a wp-config.php file exposed with the name "wp-config.php.orig" as a backup. It is always advisable to check the following file names:

/wp-config.php-backup /wp-config.php.orig

/.wp-config.php.swp

/wp-config-sample.php

/wp-config.inc

/wp-config.old

/wp-config.txt

/wp-config.php.txt

/wp-config.php.bak

/wp-config.php.old

/wp-config.php.dist

/wp-config.php.inc

/wp-config.php.swp

/wp-config.php.html

/wp-config-backup.txt

/wp-config.php.save

/wp-config.php~

/wp-config.php.original

/_wpeprivate/config.json

Comments