Merge pull request #315 from toxydose/master

Created Sitecore CMS wordlist + minor endpoint updates.

Sitecore CMS:  https://www.sitecore.com/

Sensitive endpoints: https://doc.sitecore.com/developers/90/platform-administration-and-architecture/en/deny-anonymous-users-access-to-a-folder.html

Sitecore docs:  
https://doc.sitecore.com/legacy-docs/SC72/sitecore-web-service-sc65-a4.pdf
https://doc.sitecore.com/SdnArchive/upload/sitecore7/75/sitecore_security_hardening_guide-sc75-usletter.pdf

Contains sensitive info
https://zellwk.com/blog/bower/

Discovery/Web-Content/CMS/sitecore

@@ -0,0 +1,16 @@
+/App_Config
+/App_Config/ConnectionStrings.config
+/sitecore/
+/sitecore/admin
+/sitecore/admin/login.aspx
+/sitecore/debug
+/sitecore/default.aspx
+/sitecore/login
+/sitecore/login.aspx
+/sitecore/login/default.aspx
+/sitecore/shell/WebService
+/sitecore/shell/webservice/service.asmx
+/sitecore/shell/webservice/service2.asmx
+/sitecore/shell/sitecore.version.xml
+/sitecore/service
+/sitecore/service/nolayout.aspx

Discovery/Web-Content/Logins.fuzz.txt

@@ -11,6 +11,8 @@
 /admin-login
 /admin-login/
 /admin/
+/admin/auth.inc
+/admin/auth.inc.php
 /administrator
 /administrator/
 /administrator.asp
@@ -23,6 +25,12 @@
 /administrator.py
 /administrator.rb
 /admnistrator.php3
+/auth
+/auth/
+/auth.inc
+/auth.inc.php
+/authentication
+/authentication/
 /backend
 /backend/
 /cgi-bin/sqwebmail?noframes=1
@@ -57,6 +65,9 @@
 /logon.pl
 /logon.py
 /logon.rb
+/?page=admin.auth.inc
+/?page=auth.inc
+/?page=auth.inc.php
 /signin
 /signin/
 /signin.php?ret=

Discovery/Web-Content/quickhits.txt

@@ -810,6 +810,7 @@
 /blog/wp-content/backup-db/
 /blog/wp-content/backups/
 /bot.txt
+/bower.json
 /buck.sql
 /build.gradle
 /build.local.xml