/static/api/

• ../
• leak-files.php
• whoami.php