31 Commits

Author SHA1 Message Date
Maksym Vatsyk
4e153fbc56
fix typo 2024-03-19 15:53:23 +01:00
Maksym Vatsyk
6e4f0e08a8
Add more paths with alternating separators 2024-03-19 15:52:52 +01:00
adeadfed
d72aadd8ce add more valid windows paths 2024-03-12 21:04:56 +01:00
adeadfed
3c78d52e15 Add new dictionary for Windows LFI fuzzing 2024-03-05 15:11:59 +01:00
g0tmi1k
03002fbc27
Merge pull request #900 from nekonugget/master-1
Create OMI-Agent-Linux.txt

Source: https://github.com/nekonugget/lfi-stuff/blob/main/OMI-Agent-Linux.txt
2023-11-23 17:35:52 +00:00
g0tmi1k
0c8af0a18b
Merge pull request #901 from stefanman125/patch-1
Update LFI-gracefulsecurity-linux.txt to include older SSH key format "ECDSA"
2023-11-23 17:33:38 +00:00
Ignacio J. Perez Portal
306339aff6 feat(wordlist): Added LFI-linux-and-windows_by-1N3@CrowdShield.txt
This wordlist has duplicate lines removed, and normalized Windows paths
2023-10-10 09:15:00 -03:00
Stefan
96940203b1
Update LFI-gracefulsecurity-linux.txt
Includes older SSH key format "ECDSA"
2023-09-06 14:21:17 -04:00
not main acc
e36dfa24fa
Create OMI-Agent-Linux.txt
from (my mistaken) issue: https://github.com/danielmiessler/SecLists/issues/891#issuecomment-1679646712
2023-08-20 23:57:17 +02:00
ClutchTech
fb4298a4cb Update LFI-gracefulsecurity-linux.txt 2023-04-23 22:00:00 -04:00
Miguel Gómez
ec227174cd
Update LFI-Jhaddix.txt
Double URL-encode '../' with %252e%252e%252f
2022-09-27 16:36:41 -05:00
Taleb Qasem
b5116c1031
Update LFI-gracefulsecurity-windows.txt
Added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Windows).
2022-08-02 16:25:02 +06:00
g0tmi1k
b49003fdbc
Merge pull request #785 from nicholas-long/master
Create list of files in that could go in /etc for fuzzing
2022-08-02 07:22:22 +01:00
Taleb Qasem
294ee04ad3
Update LFI-gracefulsecurity-linux.txt
Removed 3 duplicates (/etc/passwd, /etc/mod, and /etc/php4/apache2/php.ini). Then added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Linux).
2022-07-27 21:16:50 +06:00
Nicholas Long
ca4f454d13 update auto commit message, rename wordlist and references to it, title case in markdown headings 2022-07-25 16:26:11 +00:00
nicholas-long
5850a8a1fb update autogenerated files 2022-07-12 23:27:17 +00:00
nicholas-long
3c181f15fe all files installed into etc by all deb packages from the debian and ubuntu apt repositories 2022-06-28 00:57:39 -05:00
indigo-sadland
694b4873eb
Nginx merge slashes path traversal vulnerability payload 2022-04-18 00:26:27 -07:00
indigo-sadland
46671534b5
unicode encoded lfi payload 2022-04-16 19:26:33 +03:00
indigo-sadland
6117632c0d
unicode encoded lfi payload 2022-04-16 19:05:01 +03:00
indigo-sadland
c49917ce1a
unicode encoded lfi payload 2022-04-16 18:58:45 +03:00
indigo-sadland
ce75be351d
unicode encoded lfi payload 2022-04-16 18:50:38 +03:00
Alex G
66e5827639
Add master.mdf MSSQL path to Windows LFI 2021-02-19 22:42:27 +01:00
g0tmi1k
d76b8f6691
Merge pull request #452 from noraj/patch-1
Create LFI-gracefulsecurity-windows.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/
2020-06-12 09:57:44 +01:00
Alexandre ZANNI
7dd955a544
Create LFI-gracefulsecurity-linux.txt 2020-06-11 16:49:45 +02:00
Alexandre ZANNI
6945f3e779
Create LFI-gracefulsecurity-windows.txt 2020-06-11 16:48:39 +02:00
Karim Kanso
607c3293b4 strip trailing whitespace 2020-05-27 14:26:51 +01:00
kegan
54ac7074da
add nested traversal strings for /etc/passwd 2020-05-18 18:12:12 -05:00
Antoine Guilbaud
13b1f18901 add a common windows lfi path 2020-04-15 12:49:42 +02:00
g0tmi1k
a65f6bd665 Close #291 - Fix encoding issues
$ for x in $( find . -type f ); do iconv -f utf-8 -t utf-8 -c ${x} | sed '/^$/d' > tmp; mv tmp ${x}; done
2019-05-08 11:04:00 +01:00
g0tmi1k
3f2c0d33d2 Quick clean up of locations 2019-04-10 13:22:39 +01:00