security through obscurity is a terrible idea - the problem is still there, and a determined attacker will find it anyway

https://www.findmycat.io (no personal experience, just aware of it)