Merge pull request #1 from danielmiessler/master

Update

Discovery/Web-Content/spring-boot.txt

@@ -24,5 +24,24 @@ actuator/trace
 actuator/logfile
 actuator/mappings
 actuator/env
+actuator/auditevents
+actuator/beans
+actuator/caches
+actuator/conditions
+actuator/configprops
+actuator/flyway
+actuator/health
+actuator/httptrace
+actuator/info
+actuator/integrationgraph
+actuator/loggers
+actuator/liquibase
+actuator/metrics
+actuator/scheduledtasks
+actuator/sessions
+actuator/shutdown
+actuator/threaddump
+actuator/heapdump
+actuator/jolokia
 jolokia
 list

Fuzzing/LFI/LFI-Jhaddix.txt

@@ -736,6 +736,8 @@ users/.htpasswd
 /web/conf/php.ini
 /WINDOWS\php.ini
 ../../windows/win.ini
+../../../../../../../../windows/win.ini
+..\..\..\..\..\..\..\..\windows\win.ini
 /WINNT\php.ini
 /..\..\..\..\..\..\winnt\win.ini
 /www/logs/proftpd.system.log

Fuzzing/email-top-100-domains.txt

@@ -0,0 +1,100 @@
+gmail.com
+yahoo.com
+hotmail.com
+aol.com
+hotmail.co.uk
+hotmail.fr
+msn.com
+yahoo.fr
+wanadoo.fr
+orange.fr
+comcast.net
+yahoo.co.uk
+yahoo.com.br
+yahoo.co.in
+live.com
+rediffmail.com
+free.fr
+gmx.de
+web.de
+yandex.ru
+ymail.com
+libero.it
+outlook.com
+uol.com.br
+bol.com.br
+mail.ru
+cox.net
+hotmail.it
+sbcglobal.net
+sfr.fr
+live.fr
+verizon.net
+live.co.uk
+googlemail.com
+yahoo.es
+ig.com.br
+live.nl
+bigpond.com
+terra.com.br
+yahoo.it
+neuf.fr
+yahoo.de
+alice.it
+rocketmail.com
+att.net
+laposte.net
+facebook.com
+bellsouth.net
+yahoo.in
+hotmail.es
+charter.net
+yahoo.ca
+yahoo.com.au
+rambler.ru
+hotmail.de
+tiscali.it
+shaw.ca
+yahoo.co.jp
+sky.com
+earthlink.net
+optonline.net
+freenet.de
+t-online.de
+aliceadsl.fr
+virgilio.it
+home.nl
+qq.com
+telenet.be
+me.com
+yahoo.com.ar
+tiscali.co.uk
+yahoo.com.mx
+voila.fr
+gmx.net
+mail.com
+planet.nl
+tin.it
+live.it
+ntlworld.com
+arcor.de
+yahoo.co.id
+frontiernet.net
+hetnet.nl
+live.com.au
+yahoo.com.sg
+zonnet.nl
+club-internet.fr
+juno.com
+optusnet.com.au
+blueyonder.co.uk
+bluewin.ch
+skynet.be
+sympatico.ca
+windstream.net
+mac.com
+centurytel.net
+chello.nl
+live.ca
+aim.com
+bigpond.net.au

Fuzzing/fuzz-Bo0oM.txt

@@ -1098,6 +1098,9 @@ api/
 api/error_log
 api/swagger-ui.html
 apibuild.pyc
+apidocs/
+apidocs/api-docs.json
+api-docs/
 app.config
 app.js
 app.php

Fuzzing/template-engines-expression.txt

@@ -0,0 +1,6 @@
+{42*42}
+{{42*42}}
+{{{42*42}}}
+#{42*42}
+${42*42}
+<%=42*42 %>

Miscellaneous/schemes.txt

@@ -0,0 +1,316 @@
+aaa
+aaas
+about
+acap
+acct
+acd
+acr
+adiumxtra
+adt
+afp
+afs
+aim
+amss
+android
+appdata
+apt
+ark
+attachment
+aw
+barion
+beshare
+bitcoin
+bitcoincash
+blob
+bolo
+browserext
+calculator
+callto
+cap
+cast
+casts
+chrome
+chrome-extension
+cid
+coap
+coap+tcp
+coap+ws
+coaps
+coaps+tcp
+coaps+ws
+com-eventbrite-attendee
+content
+conti
+crid
+cvs
+dab
+data
+dav
+diaspora
+dict
+did
+dis
+dlna-playcontainer
+dlna-playsingle
+dns
+dntp
+dpp
+drm
+drop
+dtmi
+dtn
+dvb
+ed2k
+elsi
+example
+facetime
+fax
+feed
+feedready
+file
+filesystem
+finger
+first-run-pen-experience
+fish
+fm
+ftp
+fuchsia-pkg
+geo
+gg
+git
+gizmoproject
+go
+gopher
+graph
+gtalk
+h323
+ham
+hcap
+hcp
+http
+https
+hxxp
+hxxps
+hydrazone
+iax
+icap
+icon
+im
+imap
+info
+iotdisco
+ipn
+ipp
+ipps
+irc
+irc6
+ircs
+iris
+iris.beep
+iris.lwz
+iris.xpc
+iris.xpcs
+isostore
+itms
+jabber
+jar
+javascript
+jms
+keyparc
+lastfm
+ldap
+ldaps
+leaptofrogans
+lorawan
+lvlt
+magnet
+mailserver
+mailto
+maps
+market
+message
+microsoft.windows.camera
+microsoft.windows.camera.multipicker
+microsoft.windows.camera.picker
+mid
+mms
+modem
+mongodb
+moz
+ms-access
+ms-browser-extension
+ms-calculator
+ms-drive-to
+ms-enrollment
+ms-excel
+ms-eyecontrolspeech
+ms-gamebarservices
+ms-gamingoverlay
+ms-getoffice
+ms-help
+ms-infopath
+ms-inputapp
+ms-lockscreencomponent-config
+ms-media-stream-id
+ms-mixedrealitycapture
+ms-mobileplans
+ms-officeapp
+ms-people
+ms-powerpoint
+ms-project
+ms-publisher
+ms-restoretabcompanion
+ms-screenclip
+ms-screensketch
+ms-search
+ms-search-repair
+ms-secondary-screen-controller
+ms-secondary-screen-setup
+ms-settings
+ms-settings-airplanemode
+ms-settings-bluetooth
+ms-settings-camera
+ms-settings-cellular
+ms-settings-cloudstorage
+ms-settings-connectabledevices
+ms-settings-displays-topology
+ms-settings-emailandaccounts
+ms-settings-language
+ms-settings-location
+ms-settings-lock
+ms-settings-nfctransactions
+ms-settings-notifications
+ms-settings-power
+ms-settings-privacy
+ms-settings-proximity
+ms-settings-screenrotation
+ms-settings-wifi
+ms-settings-workplace
+ms-spd
+ms-sttoverlay
+ms-transit-to
+ms-useractivityset
+ms-virtualtouchpad
+ms-visio
+ms-walk-to
+ms-whiteboard
+ms-whiteboard-cmd
+ms-word
+msnim
+msrp
+msrps
+mss
+mtqp
+mumble
+mupdate
+mvn
+news
+nfs
+ni
+nih
+nntp
+notes
+ocf
+oid
+onenote
+onenote-cmd
+opaquelocktoken
+openpgp4fpr
+pack
+palm
+paparazzi
+payment
+payto
+pkcs11
+platform
+pop
+pres
+prospero
+proxy
+psyc
+pttp
+pwid
+qb
+query
+quic-transport
+redis
+rediss
+reload
+res
+resource
+rmi
+rsync
+rtmfp
+rtmp
+rtsp
+rtsps
+rtspu
+secondlife
+service
+session
+sftp
+sgn
+shttp
+sieve
+simpleledger
+sip
+sips
+skype
+smb
+sms
+smtp
+snews
+snmp
+soap.beep
+soap.beeps
+soldat
+spiffe
+spotify
+ssh
+steam
+stun
+stuns
+submit
+svn
+tag
+teamspeak
+tel
+teliaeid
+telnet
+tftp
+things
+thismessage
+tip
+tn3270
+tool
+turn
+turns
+tv
+udp
+unreal
+urn
+ut2004
+v-event
+vemmi
+ventrilo
+videotex
+view-source
+vnc
+wais
+webcal
+wpid
+ws
+wss
+wtai
+wyciwyg
+xcon
+xcon-userid
+xfire
+xmlrpc.beep
+xmlrpc.beeps
+xmpp
+xri
+ymsgr
+z39.50
+z39.50r
+z39.50s

Usernames/Names/names.txt

@@ -8195,6 +8195,7 @@ ronnie
 ronny
 roobbie
 roosevelt
+root
 roque
 rora
 rori