OWASP Hidden file found when using Cloudflare

Website, Application, Performance Security
1

Hello everyone,
When I attach my domain to Cloudflare and turn on “Proxy” to using ssl, I just OWASP ZAP to scan for vulnerabilities and get this warning:

Hidden file found (2)
GET https://mydomain.com/._darcs
GET https://mydomain.com/BitKeeper

Has anyone encountered this situation? Please give me advice.

3

Hi,

If this didn’t happen before you proxied the record, that sounds like a false positive to me. There’s nothing Cloudflare does to make these two files exist.

I’d recommend double-checking that these files don’t exist on your web server, and trying to access those two URLs with your browser. If that doesn’t work, it’s most likely a false positive (try re-running the scan, too).

3 Likes
4

Thank you, I’ll check, my mistake, misconfigured nginx :slight_smile:

1 Like
5

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.