Site to check back-box vulnerabilities

Disabled in nginx: location ~ /\.(ht|svn|git|env) { deny all; }