admin/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2025-06-08 14:07:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,706 Commits 2 Branches 29 Tags
Commit Graph

224 Commits

Author SHA1 Message Date
Mo Langning
7e74555e17
Create file-ext-upper-cases.txt 2023-11-24 22:21:06 +08:00
Mo Langning
d51f55fd0f
Create file-ext-lower-cases.txt 2023-11-24 22:20:37 +08:00
Mo Langning
33365510aa
Create file-ext-all-cases.txt 2023-11-24 22:20:16 +08:00
Mo Langning
cb188b97f8
Renamed for better clarity 2023-11-24 21:56:56 +08:00
Mo Langning
b65c31a678
Create os-names-mutated.txt 2023-11-24 02:06:49 +08:00
Mo Langning
f587f37138
Update os-names.txt 
missed some
 2023-11-24 02:04:48 +08:00
Mo Langning
54ac8ca9e7
Delete Fuzzing/os-names-mutation.txt 2023-11-24 01:54:08 +08:00
Mo Langning
e7fb5669a4
Merge branch 'danielmiessler:master' into master 2023-11-24 01:49:09 +08:00
Mo Langning
51a20e05b6
changed some strings slightly 2023-11-24 01:47:28 +08:00
g0tmi1k
b9166519b5
Merge pull request #882 from sonatagreen/patch-1 
more human injection; new LLM section
 2023-11-23 17:43:32 +00:00
g0tmi1k
638ce8bd32
Merge pull request #897 from adilnbabras/master 
List of Files Extensions & Dutch Wordlists
 2023-11-23 17:36:35 +00:00
g0tmi1k
03002fbc27
Merge pull request #900 from nekonugget/master-1 
Create OMI-Agent-Linux.txt

Source: https://github.com/nekonugget/lfi-stuff/blob/main/OMI-Agent-Linux.txt
 2023-11-23 17:35:52 +00:00
g0tmi1k
0c8af0a18b
Merge pull request #901 from stefanman125/patch-1 
Update LFI-gracefulsecurity-linux.txt to include older SSH key format "ECDSA"
 2023-11-23 17:33:38 +00:00
g0tmi1k
7efd8d7d9b
Merge pull request #907 from righettod/add_oracle_sid 
Add a list of Oracle DB common SID.

Source: http://www.red-database-security.com/whitepaper/oracle_default_sid.html
 2023-11-23 17:28:13 +00:00
g0tmi1k
6e912c6116
Merge pull request #908 from ItsIgnacioPortal/i690 
feat(wordlists): Added LFI wordlist "LFI-linux-and-windows_by-1N3@CrowdShield.txt".

Source: ec37930af3
 2023-11-23 17:27:16 +00:00
g0tmi1k
6aff8b92e0
Merge pull request #912 from cosad3s/master 
Update HTML tags & HTTP verbs
 2023-11-23 17:24:04 +00:00
Mo Langning
1cdd4b9906
Update os-names-mutation.txt 2023-11-03 09:37:59 +08:00
Mo Langning
63b85cbdf1
Update os-names-mutation.txt 2023-11-03 09:33:14 +08:00
Mo Langning
31f04833aa
Os-names but with mutation 2023-11-03 09:29:09 +08:00
Mo Langning
764155f83f
Update os-names.txt 
stripped extra space
space
 2023-11-03 09:12:13 +08:00
Mo Langning
1588c54106
Create os-names.txt 2023-11-03 09:04:27 +08:00
Sébastien Copin
44e92240a7 Add HTTP versb TRACK and DEBUG 
Especially used in IIS servers.

Sources:
- https://nmap.org/nsedoc/scripts/http-aspnet-debug.html
- https://techcommunity.microsoft.com/t5/iis-support-blog/http-track-and-trace-verbs/ba-p/784482
 2023-10-17 12:39:22 +02:00
Ignacio J. Perez Portal
306339aff6 feat(wordlist): Added LFI-linux-and-windows_by-1N3@CrowdShield.txt 
This wordlist has duplicate lines removed, and normalized Windows paths
 2023-10-10 09:15:00 -03:00
Dominique RIGHETTO
55c4988410
Rename OracleSID.txt to OracleDB-SID.txt 2023-10-08 19:26:29 +02:00
Dominique RIGHETTO
f81a9803f8
Add file 2023-10-08 19:17:49 +02:00
Stefan
96940203b1
Update LFI-gracefulsecurity-linux.txt 
Includes older SSH key format "ECDSA"
 2023-09-06 14:21:17 -04:00
not main acc
e36dfa24fa
Create OMI-Agent-Linux.txt 
from (my mistaken) issue: https://github.com/danielmiessler/SecLists/issues/891#issuecomment-1679646712
 2023-08-20 23:57:17 +02:00
Adil Nadeem Babras
460b207a07
List of File Extensions 
Source: Wikipedia
 2023-08-16 03:38:18 +05:00
Sonata Green
635f59acdc
more human injection; new LLM section 
(1) more human injection strings
(2) added a section for attacks against LLMs
 2023-05-29 19:47:45 +00:00
g0tmi1k
afc5439c00
Merge pull request #870 from ivan-sincek/master 
Hexadecimal ASCII and Hexadecimal Unicode

Source: https://github.com/ivan-sincek/amounts
 2023-05-16 07:51:53 +01:00
ClutchTech
fb4298a4cb Update LFI-gracefulsecurity-linux.txt 2023-04-23 22:00:00 -04:00
Ivan Šincek
2121ac1bbb Hexadecimal ASCII and Hexadecimal Unicode 
Added few more representations of numerical values.
 2023-04-18 13:44:57 +02:00
Sébastien Copin
18120d94f2 Add PHP magic methods list 
See: https://www.php.net/manual/en/language.oop5.magic.php
 2023-02-21 21:01:07 +01:00
g0tmi1k
cd30475c1a
Merge pull request #824 from cosad3s/master 
fuzz-Bo0oM.txt: "WAF friendly" version
 2022-11-22 12:22:36 +00:00
Sébastien Copin
db6c286085 fuzz-Bo0oM.txt: "WAF friendly" version 
sed  -r '/(passwd|.htaccess|.asa|.ini|var\/log|%252e%252e|%2e%2e|^\..+)/d' ./fuzz-Bo0oM.txt > ./fuzz-Bo0oM-friendly.txt

Tested against Akamai. For less "Access Denied" issues.
 2022-11-01 16:54:15 +01:00
Miguel Gómez
ec227174cd
Update LFI-Jhaddix.txt 
Double URL-encode '../' with %252e%252e%252f
 2022-09-27 16:36:41 -05:00
Taleb Qasem
b5116c1031
Update LFI-gracefulsecurity-windows.txt 
Added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Windows).
 2022-08-02 16:25:02 +06:00
g0tmi1k
b49003fdbc
Merge pull request #785 from nicholas-long/master 
Create list of files in that could go in /etc for fuzzing
 2022-08-02 07:22:22 +01:00
g0tmi1k
7c82ca12db
Merge pull request #702 from TheTechromancer/master 
Added devops extensions - .test, .qa., etc. to Fuzzing/extensions-Bo0oM.txt
 2022-08-02 06:59:33 +01:00
g0tmi1k
4c29963899
Merge pull request #706 from D3vil0per/patch-1 
Create country-codes.txt

Source: https://www.iso.org/obp/ui/#search
 2022-08-02 06:59:08 +01:00
g0tmi1k
c0be11b9e4
Merge pull request #769 from ivan-sincek/master 
Fuzz amounts, quantities, or any other numerical values.

Source: https://research.nccgroup.com/wp-content/uploads/2020/07/common_security_issues_in_financially-orientated_web.pdf

https://github.com/ivan-sincek/amounts
 2022-08-02 06:43:14 +01:00
g0tmi1k
3217b9b8f2
Merge pull request #774 from bigshika/envIds 
Add common Environment identifiers
 2022-08-02 06:39:31 +01:00
Taleb Qasem
294ee04ad3
Update LFI-gracefulsecurity-linux.txt 
Removed 3 duplicates (/etc/passwd, /etc/mod, and /etc/php4/apache2/php.ini). Then added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Linux).
 2022-07-27 21:16:50 +06:00
Nicholas Long
ca4f454d13 update auto commit message, rename wordlist and references to it, title case in markdown headings 2022-07-25 16:26:11 +00:00
nicholas-long
5850a8a1fb update autogenerated files 2022-07-12 23:27:17 +00:00
nicholas-long
3c181f15fe all files installed into etc by all deb packages from the debian and ubuntu apt repositories 2022-06-28 00:57:39 -05:00
Sana O
795bd9e37b Add sandbox, sb and stage 2022-06-27 12:31:20 +12:00
Sana O
f1613446e9 Add common 2 letter environment abbreviations 2022-06-23 14:48:28 +12:00
root
28152a11f3 Added README 2022-06-21 08:05:20 +02:00
root
1753648b46 More Wordlists Added 2nd 2022-06-20 23:54:15 +02:00