489 Commits

Author SHA1 Message Date
Ella Rose
bcd0e40c7e
created Public_Schools folder 2018-06-13 16:09:18 -04:00
Ella Rose
91503f7a31
made Colleges folder 2018-06-13 16:08:19 -04:00
Ella Rose
1902a293c6
Create .gitkeep 2018-06-13 16:07:01 -04:00
Ella Rose
d761f186d8
Delete .gitkeep 2018-06-13 16:06:37 -04:00
Ella Rose
91dda5624e
creating security_question_answers folder 2018-06-13 16:03:12 -04:00
g0tmi1k
70414208e1
Update README.md 2018-06-13 12:14:09 +01:00
g0tmi1k
4f1b4cbf64
Update CONTRIBUTING.md 2018-06-13 12:07:34 +01:00
g0tmi1k
055c59f756
Create CONTRIBUTING.md 2018-06-13 12:07:09 +01:00
g0tmi1k
7c705045d1
Create LICENSE 2018-06-13 12:04:57 +01:00
g0tmi1k
16037f5f16
Merge pull request #197 from g0tmi1k/zip
Add Zip-Traversal Payloads ("#ZipSlip")
2018-06-13 10:42:03 +01:00
g0tmi1k
baccc85625
Merge pull request #196 from brimstone/magic-hashes
Adding PHP Magic Hashes.
2018-06-13 10:41:42 +01:00
g0tmi1k
c4d0ec182a
Merge pull request #194 from ente3000/master
More ZIP bombs
2018-06-13 10:41:27 +01:00
g0tmi1k
b49285adb5
Merge pull request #190 from karsaini/master
Added numeric combinations
2018-06-13 10:40:32 +01:00
g0tmi1k
7f9bd7a3e8
Merge pull request #189 from craSH/master
Add three more proxy-related headers and examples
2018-06-13 10:40:20 +01:00
g0tmi1k
2faed8415e README clean up 2018-06-13 09:40:36 +01:00
g0tmi1k
8f27fd4cde Add Zip-Traversal Payload 2018-06-13 09:36:36 +01:00
Matt Robinson
aca4935063
Adding PHP Magic Hashes.
Taken from https://www.whitehatsec.com/blog/magic-hashes/
2018-05-28 07:53:48 -04:00
Eric Rösch
2b9c75b04f
Add 338 and zip-bomb ZIP bombs
338: https://www.reddit.com/r/hacking/comments/68pmn9/i_have_created_a_zip_bomb_that_is_only_338/
zip-bomb: https://github.com/harshjv/zip-bomb
2018-04-25 22:28:26 +02:00
Eric Rösch
3cae0aaa00
Add r and droste ZIP bombs
r: https://research.swtch.com/zip
droste: https://alf.nu/ZipQuine
2018-04-25 22:23:38 +02:00
Karan Saini
3911f92c82
Added numeric combinations
Text files of numeric combinations (with leading zeros) for use during enumeration
2018-04-08 00:54:51 +05:30
Daniel Miessler
233e092211 Updated Readme credits section. 2018-04-06 04:52:17 -07:00
Ian Gallagher
1db4e5257a Add three more proxy-related headers and examples
* Credit for these goes to Andres Tarasco Acuna, via his
random-ip-address-header Burp App.
* https://github.com/PortSwigger/random-ip-address-header
2018-03-29 11:44:37 -07:00
Daniel Miessler
c104976b2f
Merge pull request #186 from craSH/master
Update missing credit in README.md
2018-03-25 04:50:28 -07:00
Ian Gallagher
85461bc9db Update missing credit in README.md
Add credits for a coworker's addition (#88)
2018-03-23 14:28:42 -07:00
Daniel Miessler
25323690ce
Merge pull request #185 from ryan-wendel/master
Update XSS-JHADDIX.txt
2018-03-23 12:05:55 -07:00
Daniel Miessler
40cf4dd5b7
Merge pull request #183 from g0tmi1k/structure
Structure Clean Up (v3) & Issue fixes (v2)!
2018-03-23 12:05:09 -07:00
Ryan Wendel
619f3afb71
Update XSS-JHADDIX.txt
Removed offensive term from wordlist.
2018-03-23 10:01:05 -06:00
g0tmi1k
3f79d071ce Quick move about 2018-03-21 17:47:29 +00:00
g0tmi1k
5278477235 Close #106 - XXE-Fuzzing / Grep PHP Auditing 2018-03-21 17:19:17 +00:00
g0tmi1k
c524f768bf Close #148 - More Lotus Domino
Source: https://github.com/danielmiessler/SecLists/issues/148
Source: 6300758c46/modules/auxiliary/scanner/lotus/lotus_domino_version.rb
Source: 583d0a5ade/domi_owned/fingerprint.py (L60-L72)
2018-03-21 17:07:45 +00:00
g0tmi1k
2ff356ee2a Add domi-owned
Source: https://github.com/coldfusion39/domi-owned
2018-03-21 17:04:37 +00:00
g0tmi1k
df9697d189 Add Domino-Hunter
Source: https://sourceforge.net/projects/dominohunter/
2018-03-21 16:59:57 +00:00
g0tmi1k
7a9a7c6c35 Close #135 - Default web roots (WIP!) 2018-03-21 16:50:02 +00:00
g0tmi1k
2b697209a8 Close #127 - Merge similar WebLogic files
Command:
cat Weblogic.fuzz.txt weblogic.txt | sed -e 's/^\///' -e 's/ $//' | sort -u | sed -e 's/^/\//' > /tmp/weblogic.txt; mv {/tmp/,}weblogic.txt
cat Websphere.fuzz.txt websphere.txt | sed -e 's/^\///' -e 's/ $//' | sort -u | sed -e 's/^/\//' > /tmp/websphere.txt; mv {/tmp/,}websphere.txt
2018-03-21 16:44:33 +00:00
g0tmi1k
d17ff06a30 Close #96 - Add HTTP Request/Response headers
Source: https://github.com/craSH/SecLists/commits/http-headers
2018-03-21 16:34:56 +00:00
g0tmi1k
401af588f6 Close #88 - Fuzzing List Integer fields
Source: https://github.com/arvinddoraiswamy/mywebappscripts/blob/master/FuzzLists/numeric_fields_only.txt
2018-03-21 16:30:38 +00:00
g0tmi1k
7b6b792312 Close #69 - Fix SQLi Polyglot
Source: https://labs.detectify.com/2013/05/29/the-ultimate-sql-injection-payload/

Source: https://twitter.com/SymbianSyMoh/status/707685783801454594
2018-03-21 16:29:03 +00:00
g0tmi1k
9ae73c2ceb Add "Big List of Naughty Strings"
Source: https://github.com/minimaxir/big-list-of-naughty-strings
2018-03-21 16:20:10 +00:00
g0tmi1k
bddd77825e Close #145 - Update Common_PHP_Filenames.txt (admin*.php) 2018-03-21 16:14:59 +00:00
g0tmi1k
0f7da0126e Close #147 - Add PHPSESSID in the list of session ids 2018-03-21 16:13:58 +00:00
g0tmi1k
26cf832f9d Close ##152 - PHP base64 filter file read (XXE_Fuzzing) 2018-03-21 16:13:09 +00:00
g0tmi1k
1863878864 Close #153 - Update ApacheTomcat.fuzz.txt 2018-03-21 16:10:27 +00:00
g0tmi1k
71d636f115 Close #164 - Include common default cloud users (Usernames) 2018-03-21 16:05:36 +00:00
g0tmi1k
1e13b9dc15 Close #177 - Update apache.txt (Add php.ini) 2018-03-21 16:03:59 +00:00
g0tmi1k
b6163f2af6 Quick rename 2018-03-21 16:02:59 +00:00
Daniel Miessler
befbd5b20d
Merge pull request #168 from tomcodes/master
Add gitlab related urls to quickhits.txt
2018-03-19 19:14:58 -07:00
Daniel Miessler
5b3d3c520f
Merge pull request #182 from CyDoor/patch-1
phpinfo without <?php
2018-03-19 19:11:29 -07:00
Daniel Miessler
18de4b67eb Added gitignore file. 2018-03-20 09:41:54 +08:00
Daniel Miessler
74d9d3259d Merge drama. 2018-03-20 09:40:26 +08:00
Daniel Miessler
d9db11404e Added gitignore. 2018-03-20 09:37:41 +08:00