# Interesting path patterns — one per line, # lines are ignored # Leading / is added automatically if missing # Auth & accounts /login /admin /dashboard /register /logout /forgot-password /reset-password # APIs /api /api/v1 /api/v2 /graphql /swagger /swagger-ui /openapi /redoc # Sensitive files & dirs /.env /.git /.htaccess /.htpasswd /backup /config /secret /secrets /credentials /private # Dev & debug /debug /dev /test /staging /internal /actuator /metrics /healthz /status # CMS & frameworks /wp-admin /wp-login.php /phpmyadmin /adminer /cpanel # Common leaks /uploads /files /core /shell /cmd /exec