173 Commits

Author	SHA1	Message	Date
toxydose	3251b35d54	update login endpoints	2019-04-10 15:54:03 +03:00
toxydose	6aa736a75a	ShoreTel Connect login page GHDB-ID:5172	2019-04-10 15:47:27 +03:00
toxydose	94cc83dbda	add endpoints without trailing slashes	2019-04-10 15:42:15 +03:00
g0tmi1k	611ba969ec	Move location	2019-04-10 13:31:17 +01:00
g0tmi1k	12751dbbf0	Fix #288 - Add graphql ... Source: https://graphql.org/learn/serving-over-http/	2019-04-10 13:18:25 +01:00
g0tmi1k	ed69bd3738	Merge pull request #282 from drwetter/master ... Suggestion to avoid license files to be added per accident	2019-03-19 09:30:26 +00:00
Dirk Wetter	9da980c4da	Suggestion to avoid license files to be added per accident ... Some license files carry the extension .txt which requires a thorough look to distinguish them from payloads with the same extension.	2019-03-19 10:20:36 +01:00
Zawadi Done	eca7232058	Update IIS.fuzz.txt ... https://twitter.com/mrr0y4l3/status/1106602488495525888?s=12	2019-03-18 20:00:54 +01:00
Dirk	cea5abf93d	Adding more springboot entrypoints	2019-03-17 11:47:50 +01:00
g0tmi1k	6830bbe052	Merge pull request #278 from tkisason/patch-1 ... Update spring-boot.txt Source: https://www.veracode.com/blog/research/exploiting-spring-boot-actuators	2019-03-16 20:31:21 +00:00
ArgentEnergy	7fa417a3d5	Added more AEM paths.	2019-03-15 21:43:31 -03:00
ArgentEnergy	ae88fbed37	Added Swagger paths.	2019-03-15 21:18:17 -03:00
Tonimir Kisasondi	eaccabd89a	Update spring-boot.txt	2019-03-15 22:37:48 +01:00
Tonimir Kisasondi	61b92c599d	Update spring-boot.txt ... Added some other paths according to: https://www.veracode.com/blog/research/exploiting-spring-boot-actuators	2019-03-15 22:26:08 +01:00
Liam Somerville	9ddb20063b	Add "admin"	2019-02-22 12:02:05 -07:00
SolomonSklash	9d29d64635	Fixed typo in file name. ... sortedcombied-knock-dnsrecon-fierce-reconng.txt -> sortedcombined-knock-dnsrecon-fierce-reconng.txt	2019-02-19 10:36:10 -06:00
Andrei Conache	807b08a7eb	add /admin-console directory	2019-02-08 17:16:37 +01:00
g0tmi1k	72d9141eb4	Update secretkeywords.txt ... As requested ~ https://github.com/danielmiessler/SecLists/pull/267#issuecomment-458900997	2019-01-30 11:12:02 +00:00
g0tmi1k	a0c2048867	Merge pull request #267 from nsonaniya2010/master ... new secret keywords added Source: 55899c0ee0/SubDomainizer.py (L174)	2019-01-30 10:52:00 +00:00
Neeraj Edwards	e3cf286b8d	Merge branch 'master' into master	2019-01-30 15:58:29 +05:30
Neeraj Sonaniya	0460f9de6f	new secret keywords added	2019-01-30 15:50:09 +05:30
root	f4470cdea6	guly: added shubs lists	2019-01-29 14:48:59 +01:00
g0tmi1k	8f3802fd51	Merge pull request #262 from g0tmi1k/websphere ... Fix #255 - Add more wps	2019-01-07 15:55:58 +00:00
g0tmi1k	758842d94f	Fix #255 - Add more wps	2019-01-07 15:55:10 +00:00
g0tmi1k	5e1dc9cc79	Fix #259 - Recover from bad merge	2019-01-07 15:40:56 +00:00
Daniel Miessler	778b16115f	Added https://github.com/g0tmi1k to the project leaders list.	2018-12-31 11:53:56 -08:00
g0tmi1k	f9c1ec678c	Merge pull request #253 from toxydose/master ... Merge and delete vordlists, add login.html to Logins.fuzz.txt	2018-12-11 11:33:42 +00:00
g0tmi1k	3e30797df9	Merge pull request #254 from g0tmi1k/snmp ... Made OneSixtyOne happy with SNMP	2018-12-11 11:25:22 +00:00
g0tmi1k	4fb16b1ad3	Made OneSixtyOne happy with SNMP ... Source: https://github.com/trailofbits/onesixtyone/issues/1	2018-12-11 11:22:26 +00:00
toxydose	5e043e22ba	merged FatwireCMS.fuzz.txt fatwire.txt	2018-12-11 04:32:05 +02:00
toxydose	24c955345f	contains the same, and less than FatwireCMS.fuzz.txt	2018-12-11 04:12:44 +02:00
toxydose	4bda908742	merged two domino endpoints files	2018-12-11 04:01:38 +02:00
toxydose	82671ffafc	add login.html endpoint	2018-12-11 02:27:08 +02:00
toxydose	dd08d4aacb	merged two IIS wordlists, deleted file.	2018-12-08 17:22:44 +02:00
toxydose	c638cb3055	File containing the same strings that are included to jboss.txt	2018-12-08 17:05:37 +02:00
toxydose	6aedd5e95d	deleted duplicate file vignette.txt that duplicates Vignette.fuzz.txt but do not contains slashes	2018-12-08 17:01:56 +02:00
toxydose	1182e89d55	delete file containing duplicate entries from netware.txt	2018-12-08 16:58:00 +02:00
toxydose	ea352ed2ce	- sorted alphabetically ... - removed duplicates - merged unique with "ColdFusion.fuzz2.txt" - deleted "ColdFusion.fuzz2.txt"	2018-12-07 16:22:34 +02:00
toxydose	412153b437	add Atlassian Confluence login endpoints ... Reference: https://confluence.atlassian.com/doc/customizing-the-login-page-163938553.html	2018-12-06 00:56:47 +02:00
Neeraj Sonaniya	f21a6dfc0a	List Addition - A list of secret related keywords should be added	2018-12-03 15:07:32 +05:30
toxydose	277b243d61	add slashes. Some servers are redirecting from folders without slashes to folders with slashes in the end of URI, and 302 is returned instead of 200	2018-12-02 02:39:55 +02:00
toxydose	aac5204f75	add clientaccesspolicy.xml and crossdomain.xml files which are usually contains unsafe wildcarded configurations.	2018-12-02 02:23:41 +02:00
tomcodes	613af9601e	Add HashiCorp Vault GUI default URL to quickhits.txt	2018-11-21 16:11:47 +01:00
tomcodes	ff8406d36b	Add sonar-project.properties file to quickhits.txt	2018-11-21 15:54:22 +01:00
tomcodes	214a277412	Add AWS CodeDeploy appspec.yml file to quickhits.txt	2018-11-21 15:21:42 +01:00
Alexander Bridges	a53dae2a76	Add /wp-json/wp/v2/users ... Add /wp-json/wp/v2/users WP REST API endpoint which exposes sensitive information - list of all WP users, which could be used for brute-force attacks.	2018-10-31 23:27:00 +02:00
Alexander Bridges	dbfa5e2b1e	Add some WP rest API endpoints ... reference: http://v2.wp-api.org/	2018-10-31 23:19:31 +02:00
Alexander Bridges	85cc7eeadf	Added cpanel login page ... reference: https://www.webhostinghub.com/help/learn/cpanel/getting-started/how-to-login-to-cpanel	2018-10-30 01:00:31 +02:00
g0tmi1k	3327ec8b40	Merge pull request #229 from drwetter/patch-1 ... Correct 1 typo in typo3 login ;-)	2018-10-23 12:53:05 +01:00
Dirk Wetter	e8b1df5f84	Correct 1 typo in typo3 login ... /typo3/in is IMHO not the login.	2018-10-23 13:50:09 +02:00