即使https，外面爬虫的还在想着侵入

approachai 2026-08-23 17:49 1

都在找env文件

cli-proxy-api       | [2026-08-23 02:48:25] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.bak"

cli-proxy-api       | [2026-08-23 02:48:28] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.backup"

cli-proxy-api       | [2026-08-23 02:48:28] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.old"

cli-proxy-api       | [2026-08-23 02:48:29] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.save"

cli-proxy-api       | [2026-08-23 02:48:30] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.local"

cli-proxy-api       | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.production"

cli-proxy-api       | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.production.local"

cli-proxy-api       | [2026-08-23 02:48:31] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.development"

cli-proxy-api       | [2026-08-23 02:48:32] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.prod"

cli-proxy-api       | [2026-08-23 02:48:32] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.dist"

cli-proxy-api       | [2026-08-23 02:48:34] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.staging"

cli-proxy-api       | [2026-08-23 02:48:35] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.testing"

cli-proxy-api       | [2026-08-23 02:48:37] [fc0e9be2] [info ] [gin_logger.go:97] 200 |       15.328s |  c| POST    "/v1/responses"

cli-proxy-api       | [2026-08-23 02:48:38] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/.env.example"

cli-proxy-api       | [2026-08-23 02:48:39] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/api/.env"

cli-proxy-api       | [2026-08-23 02:48:41] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/config/.env"

cli-proxy-api       | [2026-08-23 02:48:41] [--------] [warn ] [gin_logger.go:95] 404 |            0s |       127.0.0.1 | GET     "/public/.env"

最新回复 (4)

下班打卡 - 早退 08-23 17:51

1楼

这很明显不是爬虫，是在打野想捞 key
惊鱼 08-23 17:55

2楼

https只是通信协议，防不了爬虫也防不了打野
kamikaze 08-23 18:07

3楼

这与https无关，它寻找的是你接口的漏洞，而不是ssl套件的漏洞
nospicy 08-23 18:22

4楼

和https有啥关系，一个是协议，一个是目录扫描

* 帖子来源Linux.do

附近帖子