Exposed File Checker

Probes a domain for commonly misconfigured, publicly reachable paths — .env files, exposed .git directories, credential files, backups, and admin/debug endpoints — using a soft-404 baseline check to avoid false positives on servers that return 200 for everything.