Web-Server wordlists
The wordlists contained in this directory are specific for testing certain web server software.
Java-Servlet-Runner-Adobe-JRun
Use for: Fuzzing for common filepaths in webpages served with Java Servlet Runner (Adobe JRun)
Year of the first release of Java Servlet Runner (Adobe JRun): 1997
Year of the last release of Java Servlet Runner (Adobe JRun): 2007
Date of last update: Oct 14, 2010
Oracle-Sun-iPlanet.txt
Use for: Fuzzing for common filepaths in webpages served with Oracle Sun iPlanet
Year of the first release of Sun-iPlanet (Adobe JRun): 1994
Year of the last release of Sun-iPlanet (Adobe JRun): 2017
Date of last update: Oct 14, 2010
Glassfish-Sun-Microsystems.txt
Use for: Fuzzing for common filepaths in webpages served with Glassfish - Sun Microsystems
Year of the first release of Glassfish: 2005
Glassfish is still in recieving updates as of 2024.
Date of last update: Oct 14, 2010
Apache.fuzz.txt
Use for: Discvering sensitive content in Apache web servers.
Date of last update: Jan 26, 2015
Apache-Tomcat.txt
Use for: Discovering sensitive content in Apache Tomcat servers.
Date of last update: Dec 14, 2017
iis-systemweb.txt
Use for: Fuzzing the /aspnet_client/system_web/ directory on Microsoft IIS servers to detect CGIs and scripts even even if the two ladder directories are inaccessible.
Reference: https://github.com/irsdl/IIS-ShortName-Scanner
Discussion: https://github.com/danielmiessler/SecLists/pull/783
Date of last update: Jun 27, 2022
JBoss.txt
Use for: Fuzzing for common filepaths in webpages served with JBoss - RedHat (not to be confused with "JBoss EAP").
Date of the first release of JBoss: 2002-05-29
Date of the last release of JBoss: 2012-03-09
Date of last wordlist update: Feb 27, 2014
Apache-Axis.txt
Use for: Fuzzing for common filepaths in webpages created with Apache Axis
Date of the first release of Apache Axis: 2002-10-07
Date of the last release of Apache Axis: 2006-04-22
IIS-POST.txt
Use for: Fuzzing for Microsoft IIS files which require being scanned for with the HTTP POST verb