admin/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-06-21 18:31:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(wordlist): Added IANA mime-types to "web-all-content-types.txt" (PR #1204)

Browse Source
This commit is contained in:
Clayton Ward 2025-05-25 23:24:29 -07:00 committed by GitHub
parent 8b8c7a8024
commit d719ee347c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 440 additions and 117 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Discovery/Web-Content/README.md
View File

@ -84,4 +84,13 @@ Use for: Fuzzing for common filepaths in webpages that use the **[GraphQL Query
## reverse-proxy-inconsistencies.txt
Use for: Detecting the backend admin/console interfaces and tomcat manager interfaces hiding behind reverse proxies by leveraging inconsistencies in how certain requests are handled.
See: [A fresh look on reverse proxy related attacks | acunetix.com | Aleksei Tiurin | 2019-01-22](https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/)
See: [A fresh look on reverse proxy related attacks | acunetix.com | Aleksei Tiurin | 2019-01-22](https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/)
## web-all-content-types.txt
Use for: Discovering allowed media types (aka MIME types, content types), typically for file uploads in web applications.
Note: List contains all lowercase values for consistency and to follow standard convention. According to RFC 2045, MIME types, subtypes, and parameter names are not case-sensitive. However, in the wild, some servers may accept uppercase values while rejecting lowercase equivalents.
Date updated: May 24, 2025
Official source: https://www.iana.org/assignments/media-types/media-types.xhtml

546
Discovery/Web-Content/web-all-content-types.txt
View File

File diff suppressed because it is too large Load Diff