Debug Endpoints Scanner

Find exposed debug routes, admin panels, and development endpoints left in production.

How this scan works

Probe a curated path list: /.env, /.git/config, /debug, /_debug, /admin, /wp-admin, /phpinfo.php, /.well-known/, /api/debug, and source-map files (*.js.map) referenced from bundles
Flag any 200 response with recognizable framework debug output — stack traces, DEBUG=true banners