1216 Commits

Author SHA1 Message Date
cbk914
83b091396c Updated cryptominers 2021-07-16 22:01:51 +02:00
cbk914
49c5e8c0c4 Updated cryptominers 2021-07-16 20:49:52 +02:00
Dominique RIGHETTO
ea3268e688
Add a dict with OAUTH/OIDC scopes.
See PR to extended description.
2021-07-16 14:33:26 +02:00
Syed Umar Arfeen
da169ef5d0
Added ga-google-analytics in wp-plugins.txt
From: https://wordpress.org/plugins/ga-google-analytics/

```
Plugin Name: GA Google Analytics
Plugin URI: https://perishablepress.com/google-analytics-plugin/
Description: Adds your Google Analytics Tracking Code to your WordPress site.
Tags: analytics, ga, google, google analytics, tracking, statistics, stats
Author: Jeff Starr
Author URI: https://plugin-planet.com/
Donate link: https://monzillamedia.com/donate.html
Contributors: specialk
Requires at least: 4.1
Tested up to: 5.3
Stable tag: 20191109
Version: 20191109
Requires PHP: 5.6.20
Text Domain: ga-google-analytics
Domain Path: /languages
License: GPL v2 or later
```
2021-07-16 16:38:36 +05:00
Gabriel
fb613f25bf
Add "-" and remove duplicate "_" entry
Fixes #612
2021-07-13 14:42:14 +01:00
7PH
43cbe32e24 Add waybackverify.txt filename to raft medium and large lists 2021-07-13 13:09:49 +02:00
cbk914
2a78823f25 Add cryptominers default passwords 2021-07-13 05:13:43 +02:00
Dominique RIGHETTO
2c97b1bea1
Add missing OAUTH2/OIDC endpoints
See https://righettod.eu.auth0.com/.well-known/openid-configuration
2021-07-05 14:17:15 +02:00
cbk914
9a871facf1
Merge branch 'danielmiessler:master' into master 2021-06-26 23:06:55 +02:00
realArcherL
852b6e45f1
A very new naming scheme
I have noticed a new naming convention surge in companies, having Graphql API endpoint as `example.com/je/graphql`. This is something I encountered while doing BBs on HackerOne.
2021-06-22 12:26:49 +05:30
Jake Craige
24cdcb35e8
Add port 3000 (Ruby on Rails) to common ports
This is the default port rails uses in a fresh installation, this is mentioned [on the command line docs here](https://guides.rubyonrails.org/command_line.html#bin-rails-server) and I also have a lot of experience with rails confirming this port is often used in practice
2021-06-17 21:19:19 -07:00
Dominique RIGHETTO
64117305d8
Add "UniqueId" http request header
Commonly found during web pentests.
2021-06-14 09:42:38 +02:00
g0tmi1k
03b4d2c22c
Merge pull request #619 from krvaibhaw/master
Update http-request-headers-fields-large.txt
2021-06-13 00:00:00 +01:00
g0tmi1k
9121b47c75
Merge pull request #618 from chacka0101/patch-6
Updates
2021-06-12 19:16:53 +01:00
g0tmi1k
0ff688e83c
Merge pull request #616 from chacka0101/patch-5
Insert F5 Default passwords products
2021-06-12 19:16:38 +01:00
g0tmi1k
034041bb6b
Merge pull request #615 from righettod/feature_add_shibboleth-sso
Add Shibboleth.sso Metadata endpoint

https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP
2021-06-12 19:16:16 +01:00
g0tmi1k
61fb2f1803
Merge pull request #613 from chacka0101/patch-4
Update with Sonatype Nexus Default Passwords:

https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
2021-06-12 19:15:52 +01:00
g0tmi1k
269a92f376
Merge pull request #610 from Annihilat0r/master
Add NoSQL payload
2021-06-12 19:14:48 +01:00
g0tmi1k
d53712ab5e
Merge pull request #609 from righettod/feature_add_oauth_endpoints
Add oauth and openid missing endpoints

https://connect2id.com/products/server/docs/api
https://docs.gitlab.com/ee/api/oauth2.html#retrieving-the-token-information
2021-06-12 19:14:15 +01:00
Vaibhaw
6c1044b617 Merge branch 'danielmiessler:master' into master 2021-06-10 15:35:56 +05:30
Vaibhaw
4bd0b23411
Update wordpress.fuzz.txt 2021-06-10 15:12:47 +05:30
Vaibhaw
ed37faca0b
Update wordpress.fuzz.txt 2021-06-10 15:11:27 +05:30
Vaibhaw
d4fcd6fb40
Update http-request-headers-fields-large.txt 2021-06-10 14:18:17 +05:30
Vaibhaw
a372e23d58
Update http-request-headers-fields-large.txt 2021-06-10 14:14:31 +05:30
CHackA0101
3be6e4e6e7
Updates
1034 - Hikvision Network Camera,admin,12345,https://www.hikvision.com/UploadFile/image/EN-user%20manual%20of%20%20network%20camera%20v3.0.0.pdf

689 - Dell Switch PowerConnect,admin,admin,https://www.192-168-0-1login.org/router/dell/switch-powerconnect/12568/

1203 - IBM Storwize V7000,superuser,passw0rd,https://www.ibm.com/docs/en/flashsystem-7x00/7.8.1?topic=problem-procedure-resetting-superuser-password

2348 - SolarWinds,admin,<BLANK>,
2021-06-09 20:49:26 -06:00
cbk914
cd20324f79 Merge branch 'danielmiessler:master' into master 2021-06-09 13:09:19 +02:00
CHackA0101
d0fba77aee
Insert F5 Default passwords products
892 - F5 BIG-IP Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
893 - F5 BIG-IP command line,root,default,https://support.f5.com/csp/article/K13148,
894 -F5 BIG-IQ Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
895 -F5 BIG-IQ command line,root,default,,https://support.f5.com/csp/article/K13148,
896 -F5 FirePass Administrative Console,admin,admin,https://support.f5.com/csp/article/K13148,
897 -F5 FirePass Maintenance Console,maintenance,n/a,https://support.f5.com/csp/article/K13148,
2021-06-07 10:43:20 -06:00
Dominique RIGHETTO
3eeb4e5292
Add Shibboleth.sso Metadata endpoint
Source: https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP
2021-06-07 15:43:03 +02:00
CHackA0101
fc2d2ff14d
Update with Sonatype Nexus Default Passwords:
1568 - Sonatype Nexus Repository Manager,admin,admin123,https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
1569 - Sonatype Nexus Repository Manager,nexus,nexus,
2021-06-02 16:09:40 -06:00
Annihilat0r
495c8a6c3f
Add NoSQL payload 2021-05-29 13:21:29 +03:00
Dominique RIGHETTO
864faed87f
Add "oauth/token/info" endpoint
See https://docs.gitlab.com/ee/api/oauth2.html#retrieving-the-token-information
2021-05-28 15:44:59 +02:00
Dominique RIGHETTO
56e23b6436
Add openid endpoints and metadata
See https://connect2id.com/products/server/docs/api
2021-05-28 15:20:54 +02:00
Dominique RIGHETTO
0e471e3faf
Add oauth endpoints
See https://auth0.com/docs/protocols/protocol-oauth2#endpoints
2021-05-28 15:11:32 +02:00
g0tmi1k
96f8c3f40d
Merge pull request #607 from g0tmi1k/release
2021.2 Release
2021.2
2021-05-25 17:51:32 +01:00
g0t mi1k
da13de867f 2021.2 Release 2021-05-25 17:50:24 +01:00
g0tmi1k
664dd4c648
Merge pull request #603 from shelld3v/patch-9
More endpoints from Assetnote wordlist

https://wordlists-cdn.assetnote.io/data/automated/httparchive_apiroutes_2021_04_28.txt
2021-05-25 17:44:52 +01:00
g0tmi1k
8c35abaa4c
Merge pull request #599 from drwetter/patch-5
Add balancer for apache

https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html
2021-05-25 17:36:38 +01:00
g0tmi1k
3ce65b30e3
Merge pull request #594 from righettod/master
Add security.txt at the root
2021-05-25 17:35:52 +01:00
g0tmi1k
e52d55d4ad
Merge pull request #584 from Splint3r7/master
Update Ruby on Rails wordlists
2021-05-25 17:33:55 +01:00
g0tmi1k
22b96249fd
Merge pull request #600 from renanhsilva/master
Update wordpress.fuzz.txt
2021-05-25 17:33:30 +01:00
g0tmi1k
44c288e17a
Merge pull request #601 from shelld3v/patch-8
Better wordlist
2021-05-25 17:32:54 +01:00
g0tmi1k
23fca5f452
Merge pull request #604 from cmaruti/patch-2
Update http-request-headers-fields-large.txt
2021-05-25 17:29:24 +01:00
g0tmi1k
2a13b61382
Merge pull request #605 from hectorgrecco/patch-2
Add "cms" word to list
2021-05-25 17:29:14 +01:00
g0tmi1k
dbb1a70871
Merge pull request #606 from chacka0101/patch-3
Update default-passwords.csv

Source: https://www.seeddms.org/index.php?id=2
2021-05-25 16:58:45 +01:00
CHackA0101
2b447c7d19
Update default-passwords.csv
2240	SeedDMS		admin		admin		https://www.seeddms.org/index.php?id=2

POC:
https://demo.seeddms.org/out/out.Login.php
User ID: admin
Password: admin
2021-05-17 16:43:21 -06:00
cbk914
cb4febae37 Merge branch 'danielmiessler:master' into master 2021-05-11 16:10:42 +02:00
Hector Grecco
725eeb4a4d
Add "cms" word to list 2021-05-05 10:51:29 -03:00
Cristiano Maruti
43d82277e3
Update http-request-headers-fields-large.txt 2021-05-05 15:37:04 +02:00
shelld3v
096fcd8906
More endpoints from Assetnote wordlist 2021-05-05 13:35:40 +07:00
Thanasis Mitragkas
7eab0af4e4
Add Base64 Encoded tomcat-betterdefaultpasslist 2021-05-01 20:43:44 +03:00