fingerprint-mcp 0.1.0

package/dist/data/sensitive-paths.js

@@ -0,0 +1,1539 @@
+// sensitive-paths.ts — Categorized sensitive URL paths for web fingerprinting and exposure detection
+// Each path is annotated with a category, severity, and description.
+// ~250 entries covering admin panels, config files, debug endpoints, backups, VCS, dependencies, and more.
+export const SENSITIVE_PATHS = [
+    // ═══════════════════════════════════════════════════════════════════════
+    // ADMIN PANELS
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/admin/",
+        category: "admin",
+        severity: "high",
+        description: "Generic admin panel",
+    },
+    {
+        path: "/admin/login",
+        category: "admin",
+        severity: "high",
+        description: "Admin login page",
+    },
+    {
+        path: "/administrator/",
+        category: "admin",
+        severity: "high",
+        description: "Joomla / generic administrator panel",
+    },
+    {
+        path: "/wp-admin/",
+        category: "admin",
+        severity: "high",
+        description: "WordPress admin dashboard",
+    },
+    {
+        path: "/wp-login.php",
+        category: "admin",
+        severity: "high",
+        description: "WordPress login page",
+    },
+    {
+        path: "/manager/html",
+        category: "admin",
+        severity: "critical",
+        description: "Apache Tomcat Manager — allows WAR deployment",
+    },
+    {
+        path: "/manager/status",
+        category: "admin",
+        severity: "high",
+        description: "Apache Tomcat status page",
+    },
+    {
+        path: "/phpmyadmin/",
+        category: "admin",
+        severity: "critical",
+        description: "phpMyAdmin database management UI",
+    },
+    {
+        path: "/pma/",
+        category: "admin",
+        severity: "critical",
+        description: "phpMyAdmin shorthand alias",
+    },
+    {
+        path: "/adminer.php",
+        category: "admin",
+        severity: "critical",
+        description: "Adminer single-file database management",
+    },
+    {
+        path: "/adminer/",
+        category: "admin",
+        severity: "critical",
+        description: "Adminer directory installation",
+    },
+    {
+        path: "/cockpit/",
+        category: "admin",
+        severity: "high",
+        description: "Cockpit CMS or Linux Cockpit web console",
+    },
+    {
+        path: "/grafana/",
+        category: "admin",
+        severity: "high",
+        description: "Grafana monitoring dashboard",
+    },
+    {
+        path: "/grafana/login",
+        category: "admin",
+        severity: "high",
+        description: "Grafana login page",
+    },
+    {
+        path: "/kibana/",
+        category: "admin",
+        severity: "high",
+        description: "Kibana Elasticsearch dashboard",
+    },
+    {
+        path: "/portainer/",
+        category: "admin",
+        severity: "critical",
+        description: "Portainer Docker management UI",
+    },
+    {
+        path: "/jenkins/",
+        category: "admin",
+        severity: "critical",
+        description: "Jenkins CI/CD dashboard",
+    },
+    {
+        path: "/jenkins/script",
+        category: "admin",
+        severity: "critical",
+        description: "Jenkins Groovy script console — allows RCE",
+    },
+    {
+        path: "/cPanel",
+        category: "admin",
+        severity: "high",
+        description: "cPanel web hosting control panel",
+    },
+    {
+        path: "/_admin/",
+        category: "admin",
+        severity: "high",
+        description: "Hidden admin panel (underscore prefix)",
+    },
+    {
+        path: "/admin-console/",
+        category: "admin",
+        severity: "high",
+        description: "JBoss / WildFly admin console",
+    },
+    {
+        path: "/webmin/",
+        category: "admin",
+        severity: "critical",
+        description: "Webmin system administration interface",
+    },
+    {
+        path: "/solr/",
+        category: "admin",
+        severity: "high",
+        description: "Apache Solr admin interface",
+    },
+    {
+        path: "/flower/",
+        category: "admin",
+        severity: "medium",
+        description: "Celery Flower task monitoring",
+    },
+    {
+        path: "/mailhog/",
+        category: "admin",
+        severity: "medium",
+        description: "MailHog email testing UI",
+    },
+    {
+        path: "/roundcube/",
+        category: "admin",
+        severity: "high",
+        description: "Roundcube webmail interface",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // CONFIGURATION FILES
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/.env",
+        category: "config",
+        severity: "critical",
+        description: "Environment variables — often contains API keys, DB credentials",
+    },
+    {
+        path: "/.env.production",
+        category: "config",
+        severity: "critical",
+        description: "Production environment variables",
+    },
+    {
+        path: "/.env.staging",
+        category: "config",
+        severity: "critical",
+        description: "Staging environment variables",
+    },
+    {
+        path: "/.env.local",
+        category: "config",
+        severity: "critical",
+        description: "Local override environment variables",
+    },
+    {
+        path: "/.env.backup",
+        category: "config",
+        severity: "critical",
+        description: "Backup of environment variables file",
+    },
+    {
+        path: "/wp-config.php",
+        category: "config",
+        severity: "critical",
+        description: "WordPress configuration with DB credentials",
+    },
+    {
+        path: "/wp-config.php.bak",
+        category: "config",
+        severity: "critical",
+        description: "Backup of WordPress configuration",
+    },
+    {
+        path: "/wp-config.php.old",
+        category: "config",
+        severity: "critical",
+        description: "Old WordPress configuration backup",
+    },
+    {
+        path: "/wp-config.php~",
+        category: "config",
+        severity: "critical",
+        description: "Editor backup of WordPress configuration",
+    },
+    {
+        path: "/web.config",
+        category: "config",
+        severity: "high",
+        description: "IIS / ASP.NET web configuration",
+    },
+    {
+        path: "/config.php",
+        category: "config",
+        severity: "high",
+        description: "Generic PHP configuration file",
+    },
+    {
+        path: "/configuration.php",
+        category: "config",
+        severity: "high",
+        description: "Joomla configuration file",
+    },
+    {
+        path: "/config.inc.php",
+        category: "config",
+        severity: "high",
+        description: "PHP include configuration (phpMyAdmin, etc.)",
+    },
+    {
+        path: "/settings.py",
+        category: "config",
+        severity: "high",
+        description: "Django settings module",
+    },
+    {
+        path: "/local_settings.py",
+        category: "config",
+        severity: "critical",
+        description: "Django local settings with secrets",
+    },
+    {
+        path: "/application.yml",
+        category: "config",
+        severity: "high",
+        description: "Spring Boot application configuration",
+    },
+    {
+        path: "/application.properties",
+        category: "config",
+        severity: "high",
+        description: "Spring Boot properties configuration",
+    },
+    {
+        path: "/appsettings.json",
+        category: "config",
+        severity: "high",
+        description: "ASP.NET Core application settings",
+    },
+    {
+        path: "/appsettings.Development.json",
+        category: "config",
+        severity: "high",
+        description: "ASP.NET Core development settings",
+    },
+    {
+        path: "/config/database.yml",
+        category: "config",
+        severity: "critical",
+        description: "Rails database configuration",
+    },
+    {
+        path: "/config/secrets.yml",
+        category: "config",
+        severity: "critical",
+        description: "Rails secrets file",
+    },
+    {
+        path: "/config/master.key",
+        category: "config",
+        severity: "critical",
+        description: "Rails master encryption key",
+    },
+    {
+        path: "/conf/server.xml",
+        category: "config",
+        severity: "high",
+        description: "Tomcat server configuration",
+    },
+    {
+        path: "/WEB-INF/web.xml",
+        category: "config",
+        severity: "high",
+        description: "Java web application deployment descriptor",
+    },
+    {
+        path: "/crossdomain.xml",
+        category: "config",
+        severity: "medium",
+        description: "Flash cross-domain policy file",
+    },
+    {
+        path: "/phpinfo.php",
+        category: "config",
+        severity: "high",
+        description: "PHP configuration disclosure via phpinfo()",
+    },
+    {
+        path: "/info.php",
+        category: "config",
+        severity: "high",
+        description: "PHP info page (common alias)",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // DEBUG / MONITORING ENDPOINTS
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/actuator",
+        category: "debug",
+        severity: "high",
+        description: "Spring Boot Actuator root — lists available endpoints",
+    },
+    {
+        path: "/actuator/env",
+        category: "debug",
+        severity: "critical",
+        description: "Spring Boot environment variables and properties",
+    },
+    {
+        path: "/actuator/heapdump",
+        category: "debug",
+        severity: "critical",
+        description: "Spring Boot JVM heap dump — contains in-memory secrets",
+    },
+    {
+        path: "/actuator/mappings",
+        category: "debug",
+        severity: "high",
+        description: "Spring Boot request mapping list",
+    },
+    {
+        path: "/actuator/configprops",
+        category: "debug",
+        severity: "high",
+        description: "Spring Boot configuration properties",
+    },
+    {
+        path: "/actuator/beans",
+        category: "debug",
+        severity: "medium",
+        description: "Spring Boot bean registry",
+    },
+    {
+        path: "/actuator/health",
+        category: "debug",
+        severity: "low",
+        description: "Spring Boot health check endpoint",
+    },
+    {
+        path: "/actuator/info",
+        category: "debug",
+        severity: "low",
+        description: "Spring Boot application info",
+    },
+    {
+        path: "/actuator/threaddump",
+        category: "debug",
+        severity: "high",
+        description: "Spring Boot thread dump",
+    },
+    {
+        path: "/actuator/loggers",
+        category: "debug",
+        severity: "medium",
+        description: "Spring Boot logger levels — can be changed via POST",
+    },
+    {
+        path: "/actuator/prometheus",
+        category: "debug",
+        severity: "medium",
+        description: "Prometheus metrics endpoint",
+    },
+    {
+        path: "/debug/vars",
+        category: "debug",
+        severity: "high",
+        description: "Go expvar debug variables",
+    },
+    {
+        path: "/debug/pprof/",
+        category: "debug",
+        severity: "high",
+        description: "Go pprof profiling endpoint",
+    },
+    {
+        path: "/debug/pprof/goroutine",
+        category: "debug",
+        severity: "high",
+        description: "Go goroutine stack traces",
+    },
+    {
+        path: "/debug/pprof/heap",
+        category: "debug",
+        severity: "high",
+        description: "Go heap profile",
+    },
+    {
+        path: "/server-info",
+        category: "debug",
+        severity: "medium",
+        description: "Apache mod_info — server configuration details",
+    },
+    {
+        path: "/server-status",
+        category: "debug",
+        severity: "medium",
+        description: "Apache mod_status — active request details",
+    },
+    {
+        path: "/console",
+        category: "debug",
+        severity: "critical",
+        description: "Flask/Werkzeug interactive debug console or H2 console",
+    },
+    {
+        path: "/h2-console/",
+        category: "debug",
+        severity: "critical",
+        description: "H2 Database web console",
+    },
+    {
+        path: "/elmah.axd",
+        category: "debug",
+        severity: "high",
+        description: "ASP.NET ELMAH error log viewer",
+    },
+    {
+        path: "/_profiler/",
+        category: "debug",
+        severity: "high",
+        description: "Symfony web profiler toolbar",
+    },
+    {
+        path: "/_debugbar/",
+        category: "debug",
+        severity: "high",
+        description: "Laravel Debugbar endpoint",
+    },
+    {
+        path: "/telescope/",
+        category: "debug",
+        severity: "high",
+        description: "Laravel Telescope debug assistant",
+    },
+    {
+        path: "/ray",
+        category: "debug",
+        severity: "medium",
+        description: "Spatie Ray debugging tool endpoint",
+    },
+    {
+        path: "/metrics",
+        category: "debug",
+        severity: "medium",
+        description: "Prometheus / application metrics endpoint",
+    },
+    {
+        path: "/healthz",
+        category: "debug",
+        severity: "info",
+        description: "Kubernetes health check endpoint",
+    },
+    {
+        path: "/readyz",
+        category: "debug",
+        severity: "info",
+        description: "Kubernetes readiness probe",
+    },
+    {
+        path: "/livez",
+        category: "debug",
+        severity: "info",
+        description: "Kubernetes liveness probe",
+    },
+    {
+        path: "/_debug/",
+        category: "debug",
+        severity: "high",
+        description: "Generic debug endpoint",
+    },
+    {
+        path: "/trace",
+        category: "debug",
+        severity: "high",
+        description: "HTTP TRACE method echo (XST attack surface)",
+    },
+    {
+        path: "/status",
+        category: "debug",
+        severity: "low",
+        description: "Application status page",
+    },
+    {
+        path: "/stats",
+        category: "debug",
+        severity: "medium",
+        description: "Application statistics endpoint",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // BACKUP / DATABASE DUMPS
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/backup/",
+        category: "backup",
+        severity: "critical",
+        description: "Backup directory listing",
+    },
+    {
+        path: "/backups/",
+        category: "backup",
+        severity: "critical",
+        description: "Backups directory listing",
+    },
+    {
+        path: "/backup.zip",
+        category: "backup",
+        severity: "critical",
+        description: "Full site backup archive",
+    },
+    {
+        path: "/backup.tar.gz",
+        category: "backup",
+        severity: "critical",
+        description: "Full site backup tarball",
+    },
+    {
+        path: "/backup.sql",
+        category: "backup",
+        severity: "critical",
+        description: "Database SQL backup",
+    },
+    {
+        path: "/database.sql",
+        category: "backup",
+        severity: "critical",
+        description: "Database SQL dump",
+    },
+    {
+        path: "/db.sql",
+        category: "backup",
+        severity: "critical",
+        description: "Database SQL dump (short name)",
+    },
+    {
+        path: "/dump.sql",
+        category: "backup",
+        severity: "critical",
+        description: "Database SQL dump",
+    },
+    {
+        path: "/data.sql",
+        category: "backup",
+        severity: "critical",
+        description: "Data export SQL file",
+    },
+    {
+        path: "/database.sql.gz",
+        category: "backup",
+        severity: "critical",
+        description: "Compressed database dump",
+    },
+    {
+        path: "/db.sql.gz",
+        category: "backup",
+        severity: "critical",
+        description: "Compressed database dump",
+    },
+    {
+        path: "/dump.sql.gz",
+        category: "backup",
+        severity: "critical",
+        description: "Compressed database dump",
+    },
+    {
+        path: "/site.tar.gz",
+        category: "backup",
+        severity: "critical",
+        description: "Full site archive",
+    },
+    {
+        path: "/www.zip",
+        category: "backup",
+        severity: "critical",
+        description: "Web root archive",
+    },
+    {
+        path: "/htdocs.tar.gz",
+        category: "backup",
+        severity: "critical",
+        description: "Apache htdocs archive",
+    },
+    {
+        path: "/.bak",
+        category: "backup",
+        severity: "high",
+        description: "Generic backup file at root",
+    },
+    {
+        path: "/database/",
+        category: "backup",
+        severity: "high",
+        description: "Database directory listing",
+    },
+    {
+        path: "/old/",
+        category: "backup",
+        severity: "medium",
+        description: "Old files directory",
+    },
+    {
+        path: "/temp/",
+        category: "backup",
+        severity: "medium",
+        description: "Temporary files directory",
+    },
+    {
+        path: "/tmp/",
+        category: "backup",
+        severity: "medium",
+        description: "Temporary files directory",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // VERSION CONTROL
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/.git/config",
+        category: "vcs",
+        severity: "critical",
+        description: "Git configuration — may expose remote URLs with credentials",
+    },
+    {
+        path: "/.git/HEAD",
+        category: "vcs",
+        severity: "high",
+        description: "Git HEAD reference — confirms .git exposure",
+    },
+    {
+        path: "/.git/index",
+        category: "vcs",
+        severity: "critical",
+        description: "Git index file — lists all tracked files",
+    },
+    {
+        path: "/.git/logs/HEAD",
+        category: "vcs",
+        severity: "high",
+        description: "Git reflog — commit history with messages",
+    },
+    {
+        path: "/.git/refs/heads/main",
+        category: "vcs",
+        severity: "high",
+        description: "Git main branch reference",
+    },
+    {
+        path: "/.git/refs/heads/master",
+        category: "vcs",
+        severity: "high",
+        description: "Git master branch reference",
+    },
+    {
+        path: "/.git/COMMIT_EDITMSG",
+        category: "vcs",
+        severity: "medium",
+        description: "Last Git commit message",
+    },
+    {
+        path: "/.git/description",
+        category: "vcs",
+        severity: "low",
+        description: "Git repository description",
+    },
+    {
+        path: "/.gitignore",
+        category: "vcs",
+        severity: "low",
+        description: "Git ignore rules — reveals project structure",
+    },
+    {
+        path: "/.svn/entries",
+        category: "vcs",
+        severity: "critical",
+        description: "Subversion entries — lists tracked paths",
+    },
+    {
+        path: "/.svn/wc.db",
+        category: "vcs",
+        severity: "critical",
+        description: "Subversion working copy database",
+    },
+    {
+        path: "/.hg/",
+        category: "vcs",
+        severity: "critical",
+        description: "Mercurial repository directory",
+    },
+    {
+        path: "/.hg/hgrc",
+        category: "vcs",
+        severity: "high",
+        description: "Mercurial configuration — may contain credentials",
+    },
+    {
+        path: "/.bzr/",
+        category: "vcs",
+        severity: "critical",
+        description: "Bazaar version control directory",
+    },
+    {
+        path: "/.bzr/branch/branch.conf",
+        category: "vcs",
+        severity: "high",
+        description: "Bazaar branch configuration",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // DEPENDENCY / PACKAGE FILES
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/package.json",
+        category: "dependency",
+        severity: "medium",
+        description: "Node.js package manifest — reveals dependencies and scripts",
+    },
+    {
+        path: "/package-lock.json",
+        category: "dependency",
+        severity: "low",
+        description: "Node.js locked dependency tree",
+    },
+    {
+        path: "/yarn.lock",
+        category: "dependency",
+        severity: "low",
+        description: "Yarn locked dependency tree",
+    },
+    {
+        path: "/pnpm-lock.yaml",
+        category: "dependency",
+        severity: "low",
+        description: "pnpm locked dependency tree",
+    },
+    {
+        path: "/bun.lockb",
+        category: "dependency",
+        severity: "low",
+        description: "Bun locked dependency tree (binary)",
+    },
+    {
+        path: "/composer.json",
+        category: "dependency",
+        severity: "medium",
+        description: "PHP Composer package manifest",
+    },
+    {
+        path: "/composer.lock",
+        category: "dependency",
+        severity: "low",
+        description: "PHP Composer locked dependencies",
+    },
+    {
+        path: "/requirements.txt",
+        category: "dependency",
+        severity: "medium",
+        description: "Python pip requirements",
+    },
+    {
+        path: "/Pipfile",
+        category: "dependency",
+        severity: "medium",
+        description: "Python Pipenv dependency file",
+    },
+    {
+        path: "/Pipfile.lock",
+        category: "dependency",
+        severity: "low",
+        description: "Python Pipenv locked dependencies",
+    },
+    {
+        path: "/poetry.lock",
+        category: "dependency",
+        severity: "low",
+        description: "Python Poetry locked dependencies",
+    },
+    {
+        path: "/pyproject.toml",
+        category: "dependency",
+        severity: "medium",
+        description: "Python project configuration (PEP 518)",
+    },
+    {
+        path: "/go.mod",
+        category: "dependency",
+        severity: "medium",
+        description: "Go module dependency file",
+    },
+    {
+        path: "/go.sum",
+        category: "dependency",
+        severity: "low",
+        description: "Go module checksum file",
+    },
+    {
+        path: "/Gemfile",
+        category: "dependency",
+        severity: "medium",
+        description: "Ruby Bundler dependency file",
+    },
+    {
+        path: "/Gemfile.lock",
+        category: "dependency",
+        severity: "low",
+        description: "Ruby Bundler locked dependencies",
+    },
+    {
+        path: "/pom.xml",
+        category: "dependency",
+        severity: "medium",
+        description: "Maven project configuration",
+    },
+    {
+        path: "/build.gradle",
+        category: "dependency",
+        severity: "medium",
+        description: "Gradle build configuration",
+    },
+    {
+        path: "/build.gradle.kts",
+        category: "dependency",
+        severity: "medium",
+        description: "Gradle Kotlin DSL build configuration",
+    },
+    {
+        path: "/Cargo.toml",
+        category: "dependency",
+        severity: "medium",
+        description: "Rust Cargo package manifest",
+    },
+    {
+        path: "/Cargo.lock",
+        category: "dependency",
+        severity: "low",
+        description: "Rust Cargo locked dependencies",
+    },
+    {
+        path: "/mix.exs",
+        category: "dependency",
+        severity: "medium",
+        description: "Elixir Mix project configuration",
+    },
+    {
+        path: "/pubspec.yaml",
+        category: "dependency",
+        severity: "medium",
+        description: "Dart/Flutter package manifest",
+    },
+    {
+        path: "/cabal.project",
+        category: "dependency",
+        severity: "medium",
+        description: "Haskell Cabal project file",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // WELL-KNOWN PATHS
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/.well-known/security.txt",
+        category: "well-known",
+        severity: "info",
+        description: "Security contact information (RFC 9116)",
+    },
+    {
+        path: "/security.txt",
+        category: "well-known",
+        severity: "info",
+        description: "Security contact information (legacy path)",
+    },
+    {
+        path: "/.well-known/openid-configuration",
+        category: "well-known",
+        severity: "medium",
+        description: "OpenID Connect provider configuration",
+    },
+    {
+        path: "/.well-known/oauth-authorization-server",
+        category: "well-known",
+        severity: "medium",
+        description: "OAuth 2.0 authorization server metadata",
+    },
+    {
+        path: "/.well-known/apple-app-site-association",
+        category: "well-known",
+        severity: "info",
+        description: "Apple Universal Links configuration",
+    },
+    {
+        path: "/.well-known/assetlinks.json",
+        category: "well-known",
+        severity: "info",
+        description: "Android App Links digital asset links",
+    },
+    {
+        path: "/.well-known/change-password",
+        category: "well-known",
+        severity: "info",
+        description: "Password change redirect endpoint",
+    },
+    {
+        path: "/.well-known/jwks.json",
+        category: "well-known",
+        severity: "medium",
+        description: "JSON Web Key Set — public keys for JWT verification",
+    },
+    {
+        path: "/.well-known/matrix/client",
+        category: "well-known",
+        severity: "info",
+        description: "Matrix client server discovery",
+    },
+    {
+        path: "/.well-known/nodeinfo",
+        category: "well-known",
+        severity: "info",
+        description: "NodeInfo for federated social networks (Mastodon, etc.)",
+    },
+    {
+        path: "/.well-known/webfinger",
+        category: "well-known",
+        severity: "info",
+        description: "WebFinger protocol endpoint",
+    },
+    {
+        path: "/robots.txt",
+        category: "well-known",
+        severity: "info",
+        description: "Search engine crawl directives — reveals hidden paths",
+    },
+    {
+        path: "/sitemap.xml",
+        category: "well-known",
+        severity: "info",
+        description: "Site map — reveals URL structure",
+    },
+    {
+        path: "/humans.txt",
+        category: "well-known",
+        severity: "info",
+        description: "Team / contributor credits file",
+    },
+    {
+        path: "/favicon.ico",
+        category: "well-known",
+        severity: "info",
+        description: "Favicon — hash can identify default CMS/framework installs",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // API DOCUMENTATION
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/swagger.json",
+        category: "api-docs",
+        severity: "medium",
+        description: "Swagger / OpenAPI 2.0 specification (JSON)",
+    },
+    {
+        path: "/swagger.yaml",
+        category: "api-docs",
+        severity: "medium",
+        description: "Swagger / OpenAPI 2.0 specification (YAML)",
+    },
+    {
+        path: "/openapi.json",
+        category: "api-docs",
+        severity: "medium",
+        description: "OpenAPI 3.x specification (JSON)",
+    },
+    {
+        path: "/openapi.yaml",
+        category: "api-docs",
+        severity: "medium",
+        description: "OpenAPI 3.x specification (YAML)",
+    },
+    {
+        path: "/api-docs",
+        category: "api-docs",
+        severity: "medium",
+        description: "Generic API documentation endpoint",
+    },
+    {
+        path: "/api-docs/",
+        category: "api-docs",
+        severity: "medium",
+        description: "API documentation directory",
+    },
+    {
+        path: "/swagger-ui.html",
+        category: "api-docs",
+        severity: "medium",
+        description: "Swagger UI interactive API explorer",
+    },
+    {
+        path: "/swagger-ui/",
+        category: "api-docs",
+        severity: "medium",
+        description: "Swagger UI directory",
+    },
+    {
+        path: "/swagger-resources",
+        category: "api-docs",
+        severity: "medium",
+        description: "Spring Swagger resource listing",
+    },
+    {
+        path: "/v2/api-docs",
+        category: "api-docs",
+        severity: "medium",
+        description: "Swagger v2 API docs (Spring default)",
+    },
+    {
+        path: "/v3/api-docs",
+        category: "api-docs",
+        severity: "medium",
+        description: "OpenAPI v3 API docs (Spring default)",
+    },
+    {
+        path: "/graphql",
+        category: "api-docs",
+        severity: "medium",
+        description: "GraphQL API endpoint",
+    },
+    {
+        path: "/graphiql",
+        category: "api-docs",
+        severity: "high",
+        description: "GraphiQL interactive IDE — allows arbitrary queries",
+    },
+    {
+        path: "/playground",
+        category: "api-docs",
+        severity: "high",
+        description: "GraphQL Playground interactive IDE",
+    },
+    {
+        path: "/altair",
+        category: "api-docs",
+        severity: "high",
+        description: "Altair GraphQL client",
+    },
+    {
+        path: "/_catalog",
+        category: "api-docs",
+        severity: "high",
+        description: "Docker Registry v2 image catalog",
+    },
+    {
+        path: "/v2/_catalog",
+        category: "api-docs",
+        severity: "high",
+        description: "Docker Registry v2 image catalog (versioned path)",
+    },
+    {
+        path: "/api/v1/",
+        category: "api-docs",
+        severity: "low",
+        description: "REST API v1 root",
+    },
+    {
+        path: "/api/v2/",
+        category: "api-docs",
+        severity: "low",
+        description: "REST API v2 root",
+    },
+    {
+        path: "/redoc",
+        category: "api-docs",
+        severity: "medium",
+        description: "ReDoc API documentation viewer",
+    },
+    {
+        path: "/docs",
+        category: "api-docs",
+        severity: "medium",
+        description: "FastAPI / generic API documentation",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // CLOUD METADATA
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/latest/meta-data/",
+        category: "cloud",
+        severity: "critical",
+        description: "AWS EC2 Instance Metadata Service (IMDSv1)",
+    },
+    {
+        path: "/latest/meta-data/iam/security-credentials/",
+        category: "cloud",
+        severity: "critical",
+        description: "AWS IAM role temporary credentials via IMDS",
+    },
+    {
+        path: "/latest/user-data/",
+        category: "cloud",
+        severity: "critical",
+        description: "AWS EC2 user data script (may contain secrets)",
+    },
+    {
+        path: "/latest/dynamic/instance-identity/document",
+        category: "cloud",
+        severity: "high",
+        description: "AWS instance identity document",
+    },
+    {
+        path: "/.aws/credentials",
+        category: "cloud",
+        severity: "critical",
+        description: "AWS CLI credentials file",
+    },
+    {
+        path: "/.aws/config",
+        category: "cloud",
+        severity: "high",
+        description: "AWS CLI configuration",
+    },
+    {
+        path: "/computeMetadata/v1/",
+        category: "cloud",
+        severity: "critical",
+        description: "GCP instance metadata endpoint",
+    },
+    {
+        path: "/computeMetadata/v1/instance/service-accounts/default/token",
+        category: "cloud",
+        severity: "critical",
+        description: "GCP service account access token via metadata",
+    },
+    {
+        path: "/computeMetadata/v1/project/project-id",
+        category: "cloud",
+        severity: "high",
+        description: "GCP project ID via metadata",
+    },
+    {
+        path: "/metadata/instance",
+        category: "cloud",
+        severity: "critical",
+        description: "Azure Instance Metadata Service",
+    },
+    {
+        path: "/metadata/instance/compute",
+        category: "cloud",
+        severity: "high",
+        description: "Azure VM compute metadata",
+    },
+    {
+        path: "/metadata/instance/network",
+        category: "cloud",
+        severity: "high",
+        description: "Azure VM network metadata",
+    },
+    {
+        path: "/.azure/",
+        category: "cloud",
+        severity: "high",
+        description: "Azure CLI configuration directory",
+    },
+    {
+        path: "/.gcloud/",
+        category: "cloud",
+        severity: "high",
+        description: "Google Cloud CLI configuration directory",
+    },
+    {
+        path: "/opc/v1/instance/",
+        category: "cloud",
+        severity: "critical",
+        description: "Oracle Cloud instance metadata",
+    },
+    {
+        path: "/metadata/v1.json",
+        category: "cloud",
+        severity: "critical",
+        description: "DigitalOcean droplet metadata",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // CI/CD CONFIGURATION
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/Jenkinsfile",
+        category: "ci-cd",
+        severity: "high",
+        description: "Jenkins pipeline definition",
+    },
+    {
+        path: "/.github/workflows/",
+        category: "ci-cd",
+        severity: "medium",
+        description: "GitHub Actions workflow directory",
+    },
+    {
+        path: "/.github/workflows/ci.yml",
+        category: "ci-cd",
+        severity: "medium",
+        description: "GitHub Actions CI workflow",
+    },
+    {
+        path: "/.github/workflows/deploy.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "GitHub Actions deployment workflow",
+    },
+    {
+        path: "/.gitlab-ci.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "GitLab CI/CD pipeline configuration",
+    },
+    {
+        path: "/.circleci/config.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "CircleCI pipeline configuration",
+    },
+    {
+        path: "/.travis.yml",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Travis CI configuration",
+    },
+    {
+        path: "/Dockerfile",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Docker image build instructions",
+    },
+    {
+        path: "/docker-compose.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Docker Compose service definitions — may contain credentials",
+    },
+    {
+        path: "/docker-compose.override.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Docker Compose override — may contain dev credentials",
+    },
+    {
+        path: "/docker-compose.prod.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Docker Compose production configuration",
+    },
+    {
+        path: "/.drone.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Drone CI pipeline configuration",
+    },
+    {
+        path: "/bitbucket-pipelines.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Bitbucket Pipelines configuration",
+    },
+    {
+        path: "/azure-pipelines.yml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Azure DevOps pipeline configuration",
+    },
+    {
+        path: "/Procfile",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Heroku process definitions",
+    },
+    {
+        path: "/app.yaml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Google App Engine configuration",
+    },
+    {
+        path: "/vercel.json",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Vercel deployment configuration",
+    },
+    {
+        path: "/netlify.toml",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Netlify deployment configuration",
+    },
+    {
+        path: "/fly.toml",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Fly.io deployment configuration",
+    },
+    {
+        path: "/render.yaml",
+        category: "ci-cd",
+        severity: "medium",
+        description: "Render deployment blueprint",
+    },
+    {
+        path: "/terraform.tfstate",
+        category: "ci-cd",
+        severity: "critical",
+        description: "Terraform state file — contains infrastructure secrets",
+    },
+    {
+        path: "/terraform.tfvars",
+        category: "ci-cd",
+        severity: "critical",
+        description: "Terraform variable values — may contain secrets",
+    },
+    {
+        path: "/.terraform/",
+        category: "ci-cd",
+        severity: "high",
+        description: "Terraform working directory",
+    },
+    {
+        path: "/pulumi.yaml",
+        category: "ci-cd",
+        severity: "high",
+        description: "Pulumi infrastructure configuration",
+    },
+    // ═══════════════════════════════════════════════════════════════════════
+    // SECRETS / CREDENTIALS
+    // ═══════════════════════════════════════════════════════════════════════
+    {
+        path: "/.npmrc",
+        category: "secrets",
+        severity: "critical",
+        description: "npm configuration — may contain auth tokens",
+    },
+    {
+        path: "/.yarnrc",
+        category: "secrets",
+        severity: "high",
+        description: "Yarn configuration — may contain auth tokens",
+    },
+    {
+        path: "/.pypirc",
+        category: "secrets",
+        severity: "critical",
+        description: "PyPI credentials for package publishing",
+    },
+    {
+        path: "/.docker/config.json",
+        category: "secrets",
+        severity: "critical",
+        description: "Docker registry authentication configuration",
+    },
+    {
+        path: "/id_rsa",
+        category: "secrets",
+        severity: "critical",
+        description: "RSA private key (unprotected path)",
+    },
+    {
+        path: "/id_rsa.pub",
+        category: "secrets",
+        severity: "medium",
+        description: "RSA public key",
+    },
+    {
+        path: "/id_ed25519",
+        category: "secrets",
+        severity: "critical",
+        description: "Ed25519 private key (unprotected path)",
+    },
+    {
+        path: "/.ssh/authorized_keys",
+        category: "secrets",
+        severity: "critical",
+        description: "SSH authorized keys — reveals allowed public keys",
+    },
+    {
+        path: "/.ssh/id_rsa",
+        category: "secrets",
+        severity: "critical",
+        description: "SSH RSA private key",
+    },
+    {
+        path: "/.ssh/known_hosts",
+        category: "secrets",
+        severity: "medium",
+        description: "SSH known hosts — reveals connected servers",
+    },
+    {
+        path: "/.htpasswd",
+        category: "secrets",
+        severity: "critical",
+        description: "Apache HTTP Basic auth password hashes",
+    },
+    {
+        path: "/.htaccess",
+        category: "secrets",
+        severity: "high",
+        description: "Apache directory configuration — may reveal rewrite rules",
+    },
+    {
+        path: "/.netrc",
+        category: "secrets",
+        severity: "critical",
+        description: "FTP/machine credentials in plaintext",
+    },
+    {
+        path: "/.pgpass",
+        category: "secrets",
+        severity: "critical",
+        description: "PostgreSQL password file",
+    },
+    {
+        path: "/.my.cnf",
+        category: "secrets",
+        severity: "critical",
+        description: "MySQL client configuration with credentials",
+    },
+    {
+        path: "/.mysql_history",
+        category: "secrets",
+        severity: "high",
+        description: "MySQL command history — may contain queries with credentials",
+    },
+    {
+        path: "/.bash_history",
+        category: "secrets",
+        severity: "high",
+        description: "Bash command history — may reveal secrets in CLI args",
+    },
+    {
+        path: "/.zsh_history",
+        category: "secrets",
+        severity: "high",
+        description: "Zsh command history",
+    },
+    {
+        path: "/keystore.jks",
+        category: "secrets",
+        severity: "critical",
+        description: "Java KeyStore file",
+    },
+    {
+        path: "/truststore.jks",
+        category: "secrets",
+        severity: "high",
+        description: "Java TrustStore file",
+    },
+    {
+        path: "/.p12",
+        category: "secrets",
+        severity: "critical",
+        description: "PKCS#12 certificate bundle with private key",
+    },
+    {
+        path: "/server.key",
+        category: "secrets",
+        severity: "critical",
+        description: "TLS/SSL private key",
+    },
+    {
+        path: "/server.pem",
+        category: "secrets",
+        severity: "critical",
+        description: "TLS/SSL certificate (may include private key)",
+    },
+    {
+        path: "/private.key",
+        category: "secrets",
+        severity: "critical",
+        description: "Generic private key file",
+    },
+    {
+        path: "/.gnupg/",
+        category: "secrets",
+        severity: "critical",
+        description: "GPG keyring directory",
+    },
+    {
+        path: "/.kube/config",
+        category: "secrets",
+        severity: "critical",
+        description: "Kubernetes kubeconfig with cluster credentials",
+    },
+    {
+        path: "/wp-content/debug.log",
+        category: "secrets",
+        severity: "high",
+        description: "WordPress debug log — may contain errors with credentials",
+    },
+    {
+        path: "/storage/logs/laravel.log",
+        category: "secrets",
+        severity: "high",
+        description: "Laravel application log — may contain stack traces with secrets",
+    },
+    {
+        path: "/error.log",
+        category: "secrets",
+        severity: "medium",
+        description: "Generic error log file",
+    },
+    {
+        path: "/access.log",
+        category: "secrets",
+        severity: "medium",
+        description: "HTTP access log — reveals URL patterns and IPs",
+    },
+];
+//# sourceMappingURL=sensitive-paths.js.map