469 Commits

Author SHA1 Message Date
Soufiane Tahiri
a8e73cb425
Added actuator default paths
Added actuator paths
2020-10-23 10:51:19 +02:00
Daniel Miessler
233e092211 Updated Readme credits section. 2018-04-06 04:52:17 -07:00
Daniel Miessler
c104976b2f
Merge pull request #186 from craSH/master
Update missing credit in README.md
2018-03-25 04:50:28 -07:00
Ian Gallagher
85461bc9db Update missing credit in README.md
Add credits for a coworker's addition (#88)
2018-03-23 14:28:42 -07:00
Daniel Miessler
25323690ce
Merge pull request #185 from ryan-wendel/master
Update XSS-JHADDIX.txt
2018-03-23 12:05:55 -07:00
Daniel Miessler
40cf4dd5b7
Merge pull request #183 from g0tmi1k/structure
Structure Clean Up (v3) & Issue fixes (v2)!
2018-03-23 12:05:09 -07:00
Ryan Wendel
619f3afb71
Update XSS-JHADDIX.txt
Removed offensive term from wordlist.
2018-03-23 10:01:05 -06:00
g0tmi1k
3f79d071ce Quick move about 2018-03-21 17:47:29 +00:00
g0tmi1k
5278477235 Close #106 - XXE-Fuzzing / Grep PHP Auditing 2018-03-21 17:19:17 +00:00
g0tmi1k
c524f768bf Close #148 - More Lotus Domino
Source: https://github.com/danielmiessler/SecLists/issues/148
Source: 6300758c46/modules/auxiliary/scanner/lotus/lotus_domino_version.rb
Source: 583d0a5ade/domi_owned/fingerprint.py (L60-L72)
2018-03-21 17:07:45 +00:00
g0tmi1k
2ff356ee2a Add domi-owned
Source: https://github.com/coldfusion39/domi-owned
2018-03-21 17:04:37 +00:00
g0tmi1k
df9697d189 Add Domino-Hunter
Source: https://sourceforge.net/projects/dominohunter/
2018-03-21 16:59:57 +00:00
g0tmi1k
7a9a7c6c35 Close #135 - Default web roots (WIP!) 2018-03-21 16:50:02 +00:00
g0tmi1k
2b697209a8 Close #127 - Merge similar WebLogic files
Command:
cat Weblogic.fuzz.txt weblogic.txt | sed -e 's/^\///' -e 's/ $//' | sort -u | sed -e 's/^/\//' > /tmp/weblogic.txt; mv {/tmp/,}weblogic.txt
cat Websphere.fuzz.txt websphere.txt | sed -e 's/^\///' -e 's/ $//' | sort -u | sed -e 's/^/\//' > /tmp/websphere.txt; mv {/tmp/,}websphere.txt
2018-03-21 16:44:33 +00:00
g0tmi1k
d17ff06a30 Close #96 - Add HTTP Request/Response headers
Source: https://github.com/craSH/SecLists/commits/http-headers
2018-03-21 16:34:56 +00:00
g0tmi1k
401af588f6 Close #88 - Fuzzing List Integer fields
Source: https://github.com/arvinddoraiswamy/mywebappscripts/blob/master/FuzzLists/numeric_fields_only.txt
2018-03-21 16:30:38 +00:00
g0tmi1k
7b6b792312 Close #69 - Fix SQLi Polyglot
Source: https://labs.detectify.com/2013/05/29/the-ultimate-sql-injection-payload/

Source: https://twitter.com/SymbianSyMoh/status/707685783801454594
2018-03-21 16:29:03 +00:00
g0tmi1k
9ae73c2ceb Add "Big List of Naughty Strings"
Source: https://github.com/minimaxir/big-list-of-naughty-strings
2018-03-21 16:20:10 +00:00
g0tmi1k
bddd77825e Close #145 - Update Common_PHP_Filenames.txt (admin*.php) 2018-03-21 16:14:59 +00:00
g0tmi1k
0f7da0126e Close #147 - Add PHPSESSID in the list of session ids 2018-03-21 16:13:58 +00:00
g0tmi1k
26cf832f9d Close ##152 - PHP base64 filter file read (XXE_Fuzzing) 2018-03-21 16:13:09 +00:00
g0tmi1k
1863878864 Close #153 - Update ApacheTomcat.fuzz.txt 2018-03-21 16:10:27 +00:00
g0tmi1k
71d636f115 Close #164 - Include common default cloud users (Usernames) 2018-03-21 16:05:36 +00:00
g0tmi1k
1e13b9dc15 Close #177 - Update apache.txt (Add php.ini) 2018-03-21 16:03:59 +00:00
g0tmi1k
b6163f2af6 Quick rename 2018-03-21 16:02:59 +00:00
Daniel Miessler
befbd5b20d
Merge pull request #168 from tomcodes/master
Add gitlab related urls to quickhits.txt
2018-03-19 19:14:58 -07:00
Daniel Miessler
5b3d3c520f
Merge pull request #182 from CyDoor/patch-1
phpinfo without <?php
2018-03-19 19:11:29 -07:00
Daniel Miessler
18de4b67eb Added gitignore file. 2018-03-20 09:41:54 +08:00
Daniel Miessler
74d9d3259d Merge drama. 2018-03-20 09:40:26 +08:00
Daniel Miessler
d9db11404e Added gitignore. 2018-03-20 09:37:41 +08:00
CyDoor
b89342db33
phpinfo without <?php
phpinfo without <?php
2018-03-08 02:33:19 +01:00
Daniel Miessler
5c9217fe8e
Merge pull request #180 from g0tmi1k/structure
Structure Clean Up (v2) & Issue fixes!
1.3
2018-03-07 08:02:31 -08:00
g0tmi1k
d2282eee97 Added ] in (Fix #131) 2018-03-07 11:46:03 +00:00
g0tmi1k
3c303a12e7 Removed leading spaces (Fix #137) 2018-03-07 11:45:26 +00:00
g0tmi1k
3043259a0a Removed domains & duplicates (Fix #138) 2018-03-07 11:42:24 +00:00
g0tmi1k
58fadb9d32 Removed duplicate lines (Start of fix: #138) 2018-03-07 11:15:09 +00:00
g0tmi1k
14318bd32b Fixed 10-million-password-list-top-1000000.txt with control character (Fix #139)
Command: find . -type f -print -exec sh -c 'cat -v -n {} | grep "\^C4"' \;'
2018-03-07 10:59:34 +00:00
g0tmi1k
9f965c5c84 Added 42.zip (Zip Bomb) (Fix #140)
Source: http://www.unforgettable.dk/
2018-03-07 10:44:20 +00:00
g0tmi1k
208d2e430d Added betterdefaultpasslist (Fix #143)
Source: https://github.com/govolution/betterdefaultpasslist
2018-03-07 10:42:27 +00:00
g0tmi1k
cd38a43352 4 Digit PIN (Fix #169)
Source: http://jemore.free.fr/wordpress/wp-content/pin_codes_sorted_by_frequency.zip
2018-03-07 10:35:51 +00:00
g0tmi1k
4489327009 Worst Passwords 2017 - SpashData (Fix #173)
Source: https://13639-presscdn-0-80-pagely.netdna-ssl.com/wp-content/uploads/2017/12/Top-100-Worst-Passwords-of-2017a.pdf
2018-03-07 10:24:22 +00:00
g0tmi1k
ec7a327edb Remove trace of 'merged.tar.gz' (Fix for #172) 2018-03-07 09:44:42 +00:00
g0tmi1k
7611257a60 Quick rename of files 2018-03-05 11:03:11 +00:00
g0tmi1k
934a28d094 Removed duplicate file
`<N/A>,<N/A>,H4!b5at+kWls-8yh4Guq,Troll from: https://mostsecure.pw/`
2018-03-05 10:31:42 +00:00
g0tmi1k
4f84b3c29b Renamed folders to be the 'full' names 2018-03-05 10:31:16 +00:00
g0tmi1k
cb93d0d0b5 README.md clean up 2018-03-05 10:30:50 +00:00
g0tmi1k
08f12147a3 Add "-" to split up words, moved files since PR accepted
- PRs: #122, #123, #125, #126, #136, #146, #149, #162, #174, #176
2018-03-05 10:30:27 +00:00
g0tmi1k
47afcb61e2 Removed duplicate files 2018-03-05 10:04:37 +00:00
g0tmi1k
f86d5b809d Add .gitignore file 2018-03-05 10:04:17 +00:00
g0tmi1k
7018c294f5 Set file permissions 2018-03-05 10:01:10 +00:00