363 Commits

Author	SHA1	Message	Date
g0tmi1k	96fdca5ff7	Merge pull request #837 from righettod/add-server-js-extension ... Add React Server Components file extension Source: - https://blog.logrocket.com/what-you-need-to-know-about-react-server-components/ - https://blog.logrocket.com/react-server-components-nextjs-12/	2023-03-09 12:14:35 +00:00
g0tmi1k	916ba65a9f	Merge pull request #840 from its0x08/patch-1 ... Add new entries and sort list Source: https://github.com/ColdFusionX/CVE-2021-26086	2023-03-09 12:13:54 +00:00
g0tmi1k	66604e14fb	Merge pull request #846 from blaiddx64/master ... add **swagger-ui/ path (springfox) Source: https://github.com/springfox/springfox/issues/3362#issuecomment-719617233	2023-03-09 12:07:56 +00:00
Adam Katora	3f7ca8a35d	Add .hta to web-extensions.txt	2023-02-25 21:09:55 -05:00
blaidd	f06a8c5061	remove old invalid entries of swagger-ui	2023-02-11 03:55:38 -03:00
Blaidd	74da3d7c8c	add **swagger-ui/ path	2023-02-09 10:57:16 -03:00
0x08	2b4afcc59e	chore: Add new entries	2023-01-05 22:20:49 +03:00
Dominique RIGHETTO	5501ad52c3	Add server.js extension	2022-12-22 15:09:37 +00:00
Dominique RIGHETTO	aed62548a5	Reset to remote master state	2022-12-22 15:05:08 +00:00
Dominique RIGHETTO	ab0fba3838	Add .server.js extension	2022-12-21 19:15:32 +00:00
GitHub Action	8d45daf9fe	[Github Action] Updated combined_words.txt	2022-11-27 17:44:18 +00:00
Dominique RIGHETTO	506027e8a9	Enrich content	2022-11-27 18:43:11 +01:00
g0tmi1k	7575cbdf93	Merge pull request #828 from CountablyInfinite/master ... Added content discovery for Liferay DXP default portlets	2022-11-22 12:24:31 +00:00
g0tmi1k	88552f1608	Merge pull request #804 from 0xbuz3R/patch-1 ... Update js.txt	2022-11-22 12:16:37 +00:00
g0tmi1k	ca9d413d7e	Merge pull request #813 from abhishekmorla/master ... added new backupfiles in wordpress fuzz list Source: https://www.linkedin.com/feed/update/urn:li:activity:6979486318774923264/	2022-11-22 12:14:19 +00:00
g0tmi1k	8d52809a0a	Merge pull request #812 from tacticthreat/patch-1 ... Create hashicorp-consul-api.txt Source: HashiCorp documentation	2022-11-22 12:13:03 +00:00
g0tmi1k	e870061b86	Merge pull request #811 from tacticthreat/patch-2 ... Create salesforce-aura-objects.txt Source: Salesforces' documentation	2022-11-22 12:12:18 +00:00
g0tmi1k	4296f91216	Merge pull request #810 from gypsydiver/wp-plugins-update ... add site-editor and mail-masta to wp-plugins.fuzz.txt	2022-11-22 12:11:39 +00:00
g0tmi1k	517c44b24e	Merge pull request #808 from InTruder-Sec/master ... Added more API directories for web application enumeration	2022-11-22 12:10:51 +00:00
g0tmi1k	2ce0271683	Merge pull request #807 from righettod/feature_update_springboot ... [spring-boot.txt] Add new endpoints - https://docs.spring.io/spring-boot/docs/current/reference/html/application-properties.html#application-properties.actuator.management.server.base-path - https://docs.spring.io/spring-boot/docs/current/reference/html/actuator.html#actuator.endpoints	2022-11-22 12:09:25 +00:00
g0tmi1k	76d436287d	Merge pull request #805 from its0x08/patch-1 ... chore: Add WEB-INF list Source: - https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3 - https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml - https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java	2022-11-22 12:08:32 +00:00
g0tmi1k	ad20e71dbc	Merge pull request #801 from righettod/feature_adobe_aem ... [AdobeCQ-AEM.txt] Cleanup and enrichment. Source: - https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/getting-started/security-checklist.html#restrict-access - https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#testing-dispatcher-security	2022-11-22 12:05:49 +00:00
g0tmi1k	2752f1bf21	Merge pull request #746 from cyberpathogen2018/patch-1 ... Fixed typo on line 26 Source: https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/	2022-11-22 12:00:42 +00:00
CountablyInfinite	59ca9892ba	added content discovery for liferay dxp portlets	2022-11-17 20:19:41 +01:00
RR	aacc4cd2c1	Removed duplicate entries ... applied unique to the wordlist removing any duplicates from list	2022-10-20 11:31:56 -04:00
RR	69388e96f9	Update hashicorp-consul-api.txt ... removed two comment lines	2022-10-03 14:54:49 -04:00
RR	5c356da2f6	Update salesforce-aura-objects.txt ... removed comment lines	2022-10-03 13:24:28 -04:00
abhishekmorla	6f8c6e9226	added new backupfiles in wordpress fuzz list	2022-09-25 23:08:54 +05:30
RR	4bc885b5dd	Create salesforce-aura-objects.txt	2022-09-15 14:44:34 -04:00
RR	960a60fa44	Create hashicorp-consul-api.txt	2022-09-15 14:41:28 -04:00
Fernando Mendoza	62a7e2bf18	add site-editor and mail-masta	2022-09-15 04:06:39 +02:00
0x08	9aa9cbe8d8	chore: Add entry to the README.md	2022-09-11 20:29:45 +03:00
Deep Dhakate	e987cfe049	Update README.md	2022-09-09 16:51:28 +05:30
Deep Dhakate	d923f12bc2	Update README.md	2022-09-08 13:08:14 +05:30
Deep Dhakate	ec1bc6a782	Add files via upload	2022-09-08 13:05:55 +05:30
Dominique RIGHETTO	94f9cd4103	Add missing ones from last doc versions	2022-09-05 18:29:15 +02:00
Dominique RIGHETTO	390477fdc5	Add endpoints	2022-09-05 18:19:14 +02:00
0x08	a8b1094090	chore: Add WEB-INF list ... ## Add `WEB-INF` list. Used to test LFI on j2ee webapps. ### Reference: - [https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3](https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3) - [https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml](https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml) - [https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java](https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java)	2022-08-30 22:26:05 +03:00
d3xt4r	5ef677051c	Update js.txt	2022-08-27 01:14:03 +05:30
Dominique RIGHETTO	dadb6f6ebc	Cleanup and enhancement	2022-08-08 18:28:59 +02:00
Rodolfo Tavares	2a5e2b03a9	Spring Boot RCE involving JMX enabled ... Extracted from https://github.com/pyn3rd/Spring-Boot-Vulnerability#0x05-spring-boot-rce-involving-jmx-enabled	2022-08-03 12:18:24 -03:00
GitHub Action	ef791ad197	[Github Action] Updated combined_directories.txt	2022-08-02 09:54:34 +00:00
g0tmi1k	507b65ef47	Merge pull request #701 from chashtag/master ... Added more PHP web shells	2022-08-02 07:15:37 +01:00
g0tmi1k	4b2f826fed	Merge pull request #713 from TheQmaks/master ... ISPSystem BillManager - list of api endpoints for hostings penetration tests Source: https://docs.ispsystem.com/billmanager/developer-section/billmanager-api	2022-08-02 06:57:38 +01:00
g0tmi1k	593324addc	Merge pull request #767 from shelld3v/patch-10 ... Update dirsearch.txt	2022-08-02 06:45:45 +01:00
GitHub Action	1ef4dcb96e	[Github Action] Updated combined_words.txt	2022-08-02 05:34:58 +00:00
g0tmi1k	ce9f9588b7	Merge pull request #776 from ItsIgnacioPortal/fVersioning-systems ... raft-small-words.txt: Added more source code versioning systems Source: https://nitter.kavin.rocks/intigriti/status/1533050946212839424	2022-08-02 06:33:45 +01:00
g0tmi1k	ddd078f4ab	Merge pull request #781 from J-GainSec/patch-1 ... Create top-apk-params.txt Source: https://gist.github.com/nullenc0de/be4d0ac216ee4fecab5493555089b28d https://twitter.com/nullenc0de/status/1425973675715612672 https://gist.github.com/nullenc0de/e9d1f2a8a0a38c9bfcb5bdb9fc7191ea	2022-08-02 06:28:30 +01:00
g0tmi1k	b949a69cca	Merge pull request #782 from J-GainSec/patch-2 ... Create sharepoint.txt Source: https://github.com/GainSec/TreeHouse-Wordlists/blob/master/Microsoft%20SharePoint.txt	2022-08-02 06:26:49 +01:00
g0tmi1k	baa6e8599b	Merge pull request #783 from J-GainSec/patch-3 ... Create iis-systemweb.txt Source: https://github.com/GainSec/TreeHouse-Wordlists/blob/master/IIS_Systemweb_fuzz-WL.txt	2022-08-02 06:25:56 +01:00