---
title: Hunt: web requests for /.claude/ paths, now being probed after the settings.local.json secrets research | ctxsec
url: https://ctxsec.com/items/hunt-isc-web-honeypots-requests-for-claude-directory-settings-local
description: "SANS ISC says its web honeypots saw requests for the .claude directory this weekend for the first time, after Apiiro reported Claude Code storing approved commands with secrets in .claude/settings.local.json and over a thousand such files appearing on GitHub. If a web root ever contains a project checkout, that file can be fetched directly."
status: "hunt idea based on SANS ISC web-honeypot observation (Stormcast, Nov 9) and Apiiro research; not a vendor-published detection"
published: 2026-11-09
---

> SANS ISC says its web honeypots saw requests for the .claude directory this weekend for the first time, after Apiiro reported Claude Code storing approved commands with secrets in .claude/settings.local.json and over a thousand such files appearing on GitHub. If a web root ever contains a project checkout, that file can be fetched directly.

[← Threat Hunting](/hunting) · [markdown](/items/hunt-isc-web-honeypots-requests-for-claude-directory-settings-local.md)

hunt idea based on SANS ISC web-honeypot observation (Stormcast, Nov 9) and Apiiro research; not a vendor-published detection

2026-11-09

### Hunt: web requests for /.claude/ paths, now being probed after the settings.local.json secrets research

- **Web and CDN logs:** requests for `/.claude/`, `/.claude/settings.local.json` or `/.claude/settings.json`, especially from scanners that also ask for `/.env` or `/.git/config`. A 200 response is an incident: rotate whatever that file contained.
- **Prevention:** deny dot-directories at the web server, and keep `.claude/settings.local.json` out of git and out of deploy artifacts.
- See our [Apiiro item](/items/apiiro-claude-code-dont-ask-again-settings-local-json-secrets-github) for the underlying issue.

Sources: [SANS Stormcast, Nov 9](https://isc.sans.edu/podcastdetail/10170) · [Apiiro: coding agents leaking secrets on GitHub](https://apiiro.com/blog/coding-agents-leaking-secrets-github-dont-ask-again)