Unverified50% confidenceFactExact time
暴露文件的常见高危类型包括备份文件（.sql/.bak/backup.zip）、配置文件（.env/config.php/.git/config）、日志文件、版本控制目录和临时调试文件
1
Sources
50%
Confidence
Long-term
Relevance
7/8/2026
First Seen
Sources
OSINT工具自动发现域名暴露文件：原理、应用与合规边界
hackernewshackernews7/5/2026
Related Claims
UnverifiedConfiguration files excluded by .gitignore, local database files, and other files not tracked by Git still face risks when using 'Bypass Permissions' mode.65% similarUnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.65% similarUnverified浏览器内核中最常见的安全漏洞类型包括内存安全漏洞（缓冲区溢出、释放后使用UAF）、类型混淆漏洞和竞态条件漏洞64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/309283API
curl https://kongchang.com/api/v1/knowledge/claims/309283MCP
get_claim(id=309283)