Merge branch 'danielmiessler:master' into master

Discovery/Web-Content/common.txt

@@ -76,6 +76,7 @@
 .well-known/nodeinfo
 .well-known/oauth-authorization-server
 .well-known/openid-configuration
+.well-known/openid-federation
 .well-known/openorg
 .well-known/openpgpkey
 .well-known/pki-validation
@@ -319,6 +320,7 @@ ServerAdministrator
 Services
 Servlet
 Servlets
+Shibboleth.sso/Metadata
 SiteMap
 SiteScope
 SiteServer
@@ -1758,6 +1760,7 @@ fdcp
 feature
 featured
 features
+federation/clients
 fedora
 feed
 feedback
@@ -2351,6 +2354,7 @@ jump
 juniper
 junk
 jvm
+jwks.json
 k
 katalog
 kb
@@ -2848,6 +2852,9 @@ nz
 o
 oa_servlets
 oauth
+oauth/authorize
+oauth/token
+oauth/token/info
 obdc
 obj
 object
@@ -2979,6 +2986,7 @@ panelc
 paper
 papers
 parse
+par
 part
 partenaires
 partner
@@ -4151,6 +4159,9 @@ today
 todel
 todo
 toggle
+token
+token/introspect
+token/revoke
 tomcat
 tomcat-docs
 tool

Fuzzing/Databases/NoSQL.txt

@@ -15,6 +15,7 @@ db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emi
 '%20%26%26%20this.password.match(/.*/)//+%00
 '%20%26%26%20this.passwordzz.match(/.*/)//+%00
 {$gt: ''}
+{"$gt": ""}
 [$ne]=1
 ';sleep(5000);
 ';it=new%20Date();do{pt=new%20Date();}while(pt-it<5000);

Miscellaneous/web/http-request-headers/http-request-headers-fields-large.txt

@@ -166,6 +166,9 @@ Core-Base
 Correlates
 Created
 Credentials-Filepath
+Cross-Origin-Embedder-Policy
+Cross-Origin-Opener-Policy
+Cross-Origin-Resource-Policy
 Curl
 Curl-Multithreaded
 Custom-Header
@@ -261,6 +264,7 @@ Eve-Solarsystemname
 Eve-Trusted
 Ex-Copy-Movie
 Expect
+Expect-CT
 Expectation-Failed
 Expires
 Ext
@@ -269,6 +273,7 @@ Fake-Header
 Fastly-Client-Ip
 Fb-Appid
 Fb-Secret
+Feature-Policy
 File-Not-Found
 Filename
 Files
@@ -462,6 +467,7 @@ Options
 Organizer
 Orig_path_info
 Origin
+Origin-Isolation
 Originator
 Overwrite
 Params-Allow-Comma
@@ -874,6 +880,7 @@ X-Davical-Testcase
 X-Dcmguid
 X-Debug-Test
 X-Device-User-Agent
+X-Download-Options
 X-Dialog
 X-Dns-Prefetch-Control
 X-Do-Not-Track
@@ -1008,10 +1015,12 @@ X-Os-Prefs
 X-Overlay
 X-Pagelet-Fragment
 X-Password
+X-Permitted-Cross-Domain-Policies
 X-Phabricator-Csrf
 X-Phpbb-Using-Plupload
 X-Pjax
 X-Pjax-Container
+X-Powered-By
 X-Prototype-Version
 X-Proxy-Url
 X-Pswd
@@ -1151,3 +1160,25 @@ Want-Digest
 X-DNS-Prefetch-Control
 X-ProxyUser-Ip
 X-XSS-Protection
+Public-Key-Pins
+Public-Key-Pins-Report-Only
+Sec-Fetch-Site
+Sec-Fetch-Mode
+Sec-Fetch-User
+Sec-Fetch-Dest
+Last-Event-ID
+Ping-From
+NEL
+Sec-WebSocket-Key
+Sec-WebSocket-Extensions
+Sec-WebSocket-Accept
+Sec-WebSocket-Protocol
+Sec-WebSocket-Version
+Accept-Push-Policy
+Accept-Signature
+Alt-Svc
+Date
+Signed-Headers
+Server-Timing
+Service-Worker-Allowed
+SourceMap

Passwords/Default-Credentials/default-passwords.csv

@@ -686,6 +686,7 @@ Dell,admin,password,
 Dell,rapport,r@p8p0r+,http://www.vennercorp.com/blog/2014/09/08/what-are-the-default-wyse-admin-passwords/
 Dell,root,calvin,
 Dell,root,wyse,http://www.vennercorp.com/blog/2014/09/08/what-are-the-default-wyse-admin-passwords/
+Dell Switch PowerConnect,admin,admin,https://www.192-168-0-1login.org/router/dell/switch-powerconnect/12568/
 Demarc,admin,my_DEMARC,
 Deutsche Telekom,<BLANK>,0,
 Deutsche Telekom,admin,<BLANK>,
@@ -889,6 +890,12 @@ F5,admin,admin,
 F5,root,default,
 F5,support,<BLANK>,
 F5-Networks,<N/A>,<BLANK>,
+F5 BIG-IP Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
+F5 BIG-IP command line,root,default,https://support.f5.com/csp/article/K13148,
+F5 BIG-IQ Configuration utility,admin,admin,https://support.f5.com/csp/article/K13148,
+F5 BIG-IQ command line,root,default,,https://support.f5.com/csp/article/K13148,
+F5 FirePass Administrative Console,admin,admin,https://support.f5.com/csp/article/K13148,
+F5 FirePass Maintenance Console,maintenance,<N/A>,https://support.f5.com/csp/article/K13148,
 Fastream Technologies,root,<BLANK>,
 Fastwire,fastwire,fw,
 FatWire,firstsite,firstsite,http://www.vvgr.demon.co.uk/FatWire_Analytics.pdf
@@ -1031,6 +1038,7 @@ Hewlett-Packard,admin,admin,http://www.google.com/url?sa=t&source=web&cd=1&sqi=2
 Hewlett-Packard,admin,hp.com,
 Hewlett-Packard,admin,isee,
 HighPOint,RAID,hpt,http://www.hptmac.com/image/PDF/RAID_Managment_Software_Download.pdf
+Hikvision Network Camera,admin,12345,https://www.hikvision.com/UploadFile/image/EN-user%20manual%20of%20%20network%20camera%20v3.0.0.pdf
 Honeynet Project,roo,honey,
 Honeynet Project,root,honey,
 Honeywell,LocalComServer,LCS pwd 03,
@@ -1198,6 +1206,7 @@ IBM,user,USERP,
 IBM,vt100,public,Swap MAC address chip from
 IBM,webadmin,webibm,
 IBM,wpsadmin,wpsadmin,
+IBM Storwize V7000,superuser,passw0rd,https://www.ibm.com/docs/en/flashsystem-7x00/7.8.1?topic=problem-procedure-resetting-superuser-password
 INOVA,iclock,timely,
 IQinVision,root,system,http://www.iqeye.com/iqeye/images/uploads/File/manuals/Quick-Install.pdf
 IRC,<BLANK>,FOOBAR,
@@ -1565,6 +1574,8 @@ Network Everywhere,<BLANK>,admin,
 NetworkICE,iceman,<BLANK>,
 NewMedia-NET GmbH,root,admin,http://www.dd-wrt.com/wiki/index.php/Index:FAQ#What.27s_the_default_username_and_password.3F
 Nexsan,ADMIN,PASSWORD,
+Sonatype Nexus Repository Manager,admin,admin123,https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
+Sonatype Nexus Repository Manager,nexus,nexus,
 Niksun,vcr,NetVCR,su after login with empty password
 Nimble,<BLANK>,xdfk9874t3,
 Nimble,<N/A>,xdfk9874t3,
@@ -2342,6 +2353,7 @@ Software AG,Administrator,manage,
 Softwarehouse,manager,manager,
 SolarWinds,LocalAdministrator,#l@$ak#.lk;0@P,http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2532
 SolarWinds,whd,whd,http://www.solarwinds.com/documentation/WebHelpDesk/docs/WHDAdminGuide.pdf
+SolarWinds,admin,<BLANK>,
 Solution 6,aaa,often blank,
 Solwise,root,same as webui pwd,
 Sonic-X,root,admin,