892 Commits

Author SHA1 Message Date
Dominique RIGHETTO
e790c509b8
Ass html folder 2020-05-23 11:34:37 +02:00
g0tmi1k
a8df2a72c2
Merge pull request #431 from pbafe/master
Create Django.txt
2020-05-13 14:27:21 +01:00
pbafe
888cdaa13a
Create Django.txt
Updated on April 20th, the contents include all the files of Django between version 3.0.5 and 2.1
2020-05-09 10:53:35 +02:00
g0tmi1k
86c6e6314f
Merge pull request #430 from cnotin/patch-1
Add .well-known entries

Source: 
- https://gist.github.com/quickbreach/3bddfdf193b3d988b0e07d07dbac0da0
- https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
- https://mercure.rocks/spec#discovery
2020-05-08 12:07:45 +01:00
g0tmi1k
47e882f5d9
Merge pull request #405 from soufianetahiri/patch-1
add swagger path
2020-05-08 12:06:57 +01:00
Clément Notin
123be76ca1
Add .well-known entries 2020-05-08 01:14:12 +02:00
g0tmi1k
442e31098e
Merge pull request #428 from g0tmi1k/misc
Add top domains + 2020.2 release
2020.2
2020-05-04 10:23:05 +01:00
g0t mi1k
7bc157fd55 2020.2 release 2020-05-04 10:22:21 +01:00
g0t mi1k
ff36e7e79f Add alexa domains
Source: https://support.alexa.com/hc/en-us/articles/200461990-Can-I-get-a-list-of-top-sites-from-an-API-
https://asciinema.org/a/9dwog4uqepaghpvyeginwckpn
2020-05-04 10:18:55 +01:00
g0t mi1k
fe8a8830c4 Add majestic domains
Source: https://blog.majestic.com/development/majestic-million-csv-daily/

$ wget http://downloads.majestic.com/majestic_million.csv
$ zip top-domains-majestic.csv.zip majestic_million.csv
2020-05-04 10:16:48 +01:00
g0t mi1k
cd715ee89c Update credit URLs 2020-05-04 10:10:52 +01:00
g0tmi1k
15b1fa3a65
Merge pull request #426 from righettod/master
Add the expression for the "doT.js" and the "dust.js" template engines

Source:

- https://github.com/epinna/tplmap/tree/master/plugins/engines
- https://olado.github.io/doT/index.html
- http://www.dustjs.com/
2020-05-04 10:07:21 +01:00
Dominique RIGHETTO
984af30974
Add the expression for the Dust engine 2020-05-03 10:52:17 +02:00
Dominique RIGHETTO
aecd8036ca
Add the expression for the doT engine 2020-05-03 10:30:48 +02:00
g0tmi1k
09d5a27cf7
Merge pull request #421 from storenth/master
Update the fuzz-Bo0oM.txt with more ';'

Source: https://twitter.com/11xuxx/status/1247496768054591489
2020-04-29 17:52:49 +01:00
g0tmi1k
b0186b7875
Merge pull request #424 from Kadeeli/master
Close #423 (added dutch passwordlist)

Source: 
- https://www.dropbox.com/s/rbgmmtsqupawtfc/Dutch_passwordlist.txt?dl=0
- https://www.dropbox.com/s/z3d0di7to1yv3cc/Dutch_wordlist.txt?dl=0
2020-04-29 17:51:33 +01:00
Jony Schats
e0d074bb83 added dutch passwordlist 2020-04-29 12:21:51 -04:00
g0tmi1k
9e694f6ad8
Merge pull request #422 from Emoe/master
Added default Directory-Wordlist from Dirbuster

Source: https://sourceforge.net/projects/dirbuster/files/DirBuster%20Lists/Current/
2020-04-28 16:20:45 +01:00
Moritz
fbab21e873 Added default Directory-Wordlist from Dirbuster 2020-04-28 16:48:25 +02:00
Kirill Z
6466bd0ed2
Add more XSS 2020-04-27 20:19:33 +07:00
Kirill Z
561d6236c2
Update the fuzz-Bo0oM.txt with more ';' 2020-04-27 20:09:53 +07:00
g0tmi1k
91fc2a786a
Merge pull request #420 from haxxinen/patch-1
Create http-request-headers-fields-large.txt
2020-04-27 13:11:51 +01:00
Häxxi Häxxinen
bbb4d86ec1
Create http-request-headers-fields-large.txt
A complete list of useful HTTP request headers.
2020-04-27 13:58:14 +02:00
g0tmi1k
db59165670
Merge pull request #416 from righettod/master
Add a version of the payload for CodeContext

Source: https://portswigger.net/web-security/server-side-template-injection
2020-04-27 11:16:24 +01:00
g0tmi1k
82863eca3c
Merge pull request #418 from alisabzeghabaei/master
some new php backdoor names.

Source: https://github.com/JohnTroony/php-webshells
2020-04-27 11:14:45 +01:00
alisabzeghabaei
4efdac9a7e
some new php backdoor names.
new backdoor name added from https://github.com/JohnTroony/php-webshells repository.
2020-04-27 03:51:20 +04:30
Dominique RIGHETTO
611d47caf3
Add a version of the payload for CodeContext
Add the payload "42*42" to the fuzzing list in order to cover the "Code context" detection point mentioned in the https://portswigger.net/web-security/server-side-template-injection training
2020-04-25 09:13:06 +02:00
g0tmi1k
9c54082eb2
Merge pull request #414 from CoccodrillooXDS/patch-1
Update names.txt
2020-04-20 11:28:37 +01:00
CoccodrillooXDS
0c14089536
Update names.txt
added "root" to the list as based on @unKn0wnUser453's issue (#408)
2020-04-20 11:54:05 +02:00
g0tmi1k
a7dbde1ec9
Merge pull request #412 from righettod/master
Collection of template engines expression

Source: https://github.com/expressjs/express/wiki#template-engines
2020-04-20 10:06:06 +01:00
g0tmi1k
b3b337e6f1
Merge pull request #390 from ipentest/add-ipentest
Added top 100 email domains to Seclists/Fuzzing

Source: https://email-verify.my-addr.com/list-of-most-popular-email-domains.php
2020-04-20 10:04:42 +01:00
Dominique RIGHETTO
1bd30300de
Add a initial collection of template engines expression 2020-04-18 17:16:20 +02:00
g0tmi1k
fa5ef9b567
Merge pull request #411 from pbafe/master
Create Drupal.txt
2020-04-16 20:14:16 +01:00
pbafe
5a8df75c4b
Create Drupal.txt 2020-04-16 20:33:25 +02:00
g0tmi1k
aaee91b0c2
Merge pull request #410 from caioluders/master
Create schemes.txt

Source: https://www.iana.org/assignments/uri-schemes/uri-schemes.txt
2020-04-16 15:18:15 +01:00
Caio Lüders
450e4d0ee9
Create schemes.txt
Extracted from https://www.iana.org/assignments/uri-schemes/uri-schemes.txt
2020-04-16 11:06:20 -03:00
g0tmi1k
bea2aa14ff
Merge pull request #409 from aguilbau/aguilbau/windows-lfi
add a common windows lfi path
2020-04-15 11:53:49 +01:00
Antoine Guilbaud
13b1f18901 add a common windows lfi path 2020-04-15 12:49:42 +02:00
g0tmi1k
b1f5e2171d
Merge pull request #406 from mswell/fix_syntax
renamed to correct name
2020-04-07 13:05:12 +01:00
Wellington Moraes
83a500c9d4 renamed to correct name 2020-04-07 08:52:35 -03:00
g0tmi1k
12d84b3b65
Merge pull request #403 from milangfx/apidocs
Add /apidocs/api-docs.json, /api-docs
2020-04-06 11:35:28 +01:00
g0tmi1k
1d52264b8a
Merge pull request #404 from Tibo-le-canard/patch-2
Adding actuator endpoints

Source: https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-features.html
2020-04-06 11:34:53 +01:00
Soufiane Tahiri
c368fc5f80
add swagger path 2020-04-02 12:06:36 +02:00
Tibo-le-canard
697537b256
Adding actuator endpoints 2020-04-01 14:53:34 +02:00
milangfx
e82e5e5026 add /apidocs/api-docs.json, /api-docs 2020-04-01 14:42:20 +02:00
g0tmi1k
5acb04abca
Merge pull request #402 from socketz/patch-1
Added wp-content/debug.log
2020-03-30 16:30:18 +01:00
socketz
c51120382e
Added wp-content/debug.log 2020-03-30 15:18:48 +02:00
g0tmi1k
99cf9a39b9
Merge pull request #400 from g0tmi1k/misc
Add CFM Shell
2020-03-25 13:25:56 +00:00
g0t mi1k
46f55b814f Add CFM Shell
Source: http://pastebin.com/3HKGQCWF // https://web.archive.org/web/20170322222809/http://pastebin.com/3HKGQCWF
2020-03-25 13:25:00 +00:00
g0tmi1k
7a17dfcdca
Merge pull request #399 from noraj/fix-arch
fix architecture
2020-03-17 13:36:27 +00:00