500 Commits

Author SHA1 Message Date
g0tmi1k
c196a6e62d
Close #200 - Attribution for @erose1337 2018-06-21 07:36:54 +01:00
g0tmi1k
a6abbd5298
Merge pull request #201 from PaulSec/master
Added CIRT default usernames/passwords from https://cirt.net/passwords
2018-06-21 07:31:42 +01:00
Paul A
02a285dee9 Added CIRT default usernames/passwords from https://cirt.net/passwords 2018-06-21 07:14:22 +02:00
g0tmi1k
6cb32c5e0e
Merge pull request #199 from g0tmi1k/fixes
Quick move about for #198
2018-06-19 08:00:56 +01:00
g0tmi1k
efe58d6323 Quick move about 2018-06-19 07:59:56 +01:00
g0tmi1k
e907d3acaf
Close #193 ~ Merge pull request #198 from erose1337/master
Security question answers
2018-06-19 07:47:32 +01:00
Ella Rose
ce1173819a
adding more lists 2018-06-13 16:19:21 -04:00
Ella Rose
de9b056e46
added list of public schools 2018-06-13 16:17:13 -04:00
Ella Rose
e7d7bc3036
added lists of college names 2018-06-13 16:15:01 -04:00
Ella Rose
b8c45bc25f
added private school names 2018-06-13 16:13:05 -04:00
Ella Rose
9c54aa2c77
Created Private_Schools folder 2018-06-13 16:09:40 -04:00
Ella Rose
bcd0e40c7e
created Public_Schools folder 2018-06-13 16:09:18 -04:00
Ella Rose
91503f7a31
made Colleges folder 2018-06-13 16:08:19 -04:00
Ella Rose
1902a293c6
Create .gitkeep 2018-06-13 16:07:01 -04:00
Ella Rose
d761f186d8
Delete .gitkeep 2018-06-13 16:06:37 -04:00
Ella Rose
91dda5624e
creating security_question_answers folder 2018-06-13 16:03:12 -04:00
g0tmi1k
70414208e1
Update README.md 2018-06-13 12:14:09 +01:00
g0tmi1k
4f1b4cbf64
Update CONTRIBUTING.md 2018-06-13 12:07:34 +01:00
g0tmi1k
055c59f756
Create CONTRIBUTING.md 2018-06-13 12:07:09 +01:00
g0tmi1k
7c705045d1
Create LICENSE 2018-06-13 12:04:57 +01:00
g0tmi1k
16037f5f16
Merge pull request #197 from g0tmi1k/zip
Add Zip-Traversal Payloads ("#ZipSlip")
2018-06-13 10:42:03 +01:00
g0tmi1k
baccc85625
Merge pull request #196 from brimstone/magic-hashes
Adding PHP Magic Hashes.
2018-06-13 10:41:42 +01:00
g0tmi1k
c4d0ec182a
Merge pull request #194 from ente3000/master
More ZIP bombs
2018-06-13 10:41:27 +01:00
g0tmi1k
b49285adb5
Merge pull request #190 from karsaini/master
Added numeric combinations
2018-06-13 10:40:32 +01:00
g0tmi1k
7f9bd7a3e8
Merge pull request #189 from craSH/master
Add three more proxy-related headers and examples
2018-06-13 10:40:20 +01:00
g0tmi1k
2faed8415e README clean up 2018-06-13 09:40:36 +01:00
g0tmi1k
8f27fd4cde Add Zip-Traversal Payload 2018-06-13 09:36:36 +01:00
Matt Robinson
aca4935063
Adding PHP Magic Hashes.
Taken from https://www.whitehatsec.com/blog/magic-hashes/
2018-05-28 07:53:48 -04:00
Eric Rösch
2b9c75b04f
Add 338 and zip-bomb ZIP bombs
338: https://www.reddit.com/r/hacking/comments/68pmn9/i_have_created_a_zip_bomb_that_is_only_338/
zip-bomb: https://github.com/harshjv/zip-bomb
2018-04-25 22:28:26 +02:00
Eric Rösch
3cae0aaa00
Add r and droste ZIP bombs
r: https://research.swtch.com/zip
droste: https://alf.nu/ZipQuine
2018-04-25 22:23:38 +02:00
Karan Saini
3911f92c82
Added numeric combinations
Text files of numeric combinations (with leading zeros) for use during enumeration
2018-04-08 00:54:51 +05:30
Daniel Miessler
233e092211 Updated Readme credits section. 2018-04-06 04:52:17 -07:00
Ian Gallagher
1db4e5257a Add three more proxy-related headers and examples
* Credit for these goes to Andres Tarasco Acuna, via his
random-ip-address-header Burp App.
* https://github.com/PortSwigger/random-ip-address-header
2018-03-29 11:44:37 -07:00
Daniel Miessler
c104976b2f
Merge pull request #186 from craSH/master
Update missing credit in README.md
2018-03-25 04:50:28 -07:00
Ian Gallagher
85461bc9db Update missing credit in README.md
Add credits for a coworker's addition (#88)
2018-03-23 14:28:42 -07:00
Daniel Miessler
25323690ce
Merge pull request #185 from ryan-wendel/master
Update XSS-JHADDIX.txt
2018-03-23 12:05:55 -07:00
Daniel Miessler
40cf4dd5b7
Merge pull request #183 from g0tmi1k/structure
Structure Clean Up (v3) & Issue fixes (v2)!
2018-03-23 12:05:09 -07:00
Ryan Wendel
619f3afb71
Update XSS-JHADDIX.txt
Removed offensive term from wordlist.
2018-03-23 10:01:05 -06:00
g0tmi1k
3f79d071ce Quick move about 2018-03-21 17:47:29 +00:00
g0tmi1k
5278477235 Close #106 - XXE-Fuzzing / Grep PHP Auditing 2018-03-21 17:19:17 +00:00
g0tmi1k
c524f768bf Close #148 - More Lotus Domino
Source: https://github.com/danielmiessler/SecLists/issues/148
Source: 6300758c46/modules/auxiliary/scanner/lotus/lotus_domino_version.rb
Source: 583d0a5ade/domi_owned/fingerprint.py (L60-L72)
2018-03-21 17:07:45 +00:00
g0tmi1k
2ff356ee2a Add domi-owned
Source: https://github.com/coldfusion39/domi-owned
2018-03-21 17:04:37 +00:00
g0tmi1k
df9697d189 Add Domino-Hunter
Source: https://sourceforge.net/projects/dominohunter/
2018-03-21 16:59:57 +00:00
g0tmi1k
7a9a7c6c35 Close #135 - Default web roots (WIP!) 2018-03-21 16:50:02 +00:00
g0tmi1k
2b697209a8 Close #127 - Merge similar WebLogic files
Command:
cat Weblogic.fuzz.txt weblogic.txt | sed -e 's/^\///' -e 's/ $//' | sort -u | sed -e 's/^/\//' > /tmp/weblogic.txt; mv {/tmp/,}weblogic.txt
cat Websphere.fuzz.txt websphere.txt | sed -e 's/^\///' -e 's/ $//' | sort -u | sed -e 's/^/\//' > /tmp/websphere.txt; mv {/tmp/,}websphere.txt
2018-03-21 16:44:33 +00:00
g0tmi1k
d17ff06a30 Close #96 - Add HTTP Request/Response headers
Source: https://github.com/craSH/SecLists/commits/http-headers
2018-03-21 16:34:56 +00:00
g0tmi1k
401af588f6 Close #88 - Fuzzing List Integer fields
Source: https://github.com/arvinddoraiswamy/mywebappscripts/blob/master/FuzzLists/numeric_fields_only.txt
2018-03-21 16:30:38 +00:00
g0tmi1k
7b6b792312 Close #69 - Fix SQLi Polyglot
Source: https://labs.detectify.com/2013/05/29/the-ultimate-sql-injection-payload/

Source: https://twitter.com/SymbianSyMoh/status/707685783801454594
2018-03-21 16:29:03 +00:00
g0tmi1k
9ae73c2ceb Add "Big List of Naughty Strings"
Source: https://github.com/minimaxir/big-list-of-naughty-strings
2018-03-21 16:20:10 +00:00
g0tmi1k
bddd77825e Close #145 - Update Common_PHP_Filenames.txt (admin*.php) 2018-03-21 16:14:59 +00:00