idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1,189 Commits 1 Branch 0 Tags
38ba2a007a7ae2f8cadab29494ac70e6d304a98a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
g0tmi1kandGitHub 38ba2a007a Merge pull request #602 from sAsPeCt488/master 
Add Base64 Encoded tomcat-betterdefaultpasslist
 2021-08-27 21:16:56 +01:00
g0tmi1kandGitHub 26bc13c98f Merge pull request #620 from righettod/feature_add_http_req_headers 
Add "UniqueId" http request header
 2021-08-27 21:16:25 +01:00
g0tmi1kandGitHub 06cfff0475 Merge pull request #621 from jakecraige/patch-1 
Add port 3000 (Ruby on Rails) to common ports

Source: https://guides.rubyonrails.org/command_line.html#bin-rails-server
 2021-08-27 21:16:04 +01:00
g0tmi1kandGitHub 60fbd42063 Merge pull request #622 from realArcherL/patch-2 
A very new naming scheme for Graphql endpoints
 2021-08-27 21:15:39 +01:00
g0tmi1kandGitHub b4637896ef Merge pull request #623 from righettod/feature_add_oauth2-odic_endpoints 
Add missing OAUTH2/OIDC endpoints.

Source: https://righettod.eu.auth0.com/.well-known/openid-configuration
 2021-08-27 21:15:07 +01:00
g0tmi1kandGitHub 177f25ba69 Merge pull request #625 from cbk914/master 
Some additions

Source: http://www.whatsmypass.com/the-top-500-worst-passwords-of-all-time
 2021-08-27 21:14:37 +01:00
g0tmi1kandGitHub 01f7723ddd Merge pull request #626 from 7PH/master 
Add waybackverify.txt filename to raft medium and large lists
 2021-08-27 21:13:55 +01:00
g0tmi1kandGitHub 975fac21dd Merge pull request #627 from redstonedesigner/special-chars-fix 
Add "-" and remove duplicate "_" entry
 2021-08-27 21:12:54 +01:00
g0tmi1kandGitHub eea747817d Merge pull request #628 from Anon-Exploiter/patch-1 
Added ga-google-analytics in wp-plugins.txt

Source https://wordpress.org/plugins/ga-google-analytics/
 2021-08-27 21:12:25 +01:00
g0tmi1kandGitHub 4002c2c970 Merge pull request #630 from whitehauler/patch-1 
Update raft-large-files.txt
 2021-08-27 21:12:01 +01:00
g0tmi1kandGitHub de06dbb492 Merge pull request #637 from dabasanta/DaniloBasanta 
Added list of IPv4 address class A&C. Also a script to generate these lists.
 2021-08-27 21:11:24 +01:00
g0tmi1kandGitHub d8294e9763 Merge pull request #629 from righettod/feature_add_oauth-oidc_scopes_dict 
Add a dict with OAUTH2/OIDC scopes.
 2021-08-27 21:00:07 +01:00
g0tmi1kandGitHub 5a70ecdbde Merge pull request #632 from righettod/feature_psd2_headers 
Add PSD2 PSU request headers.

https://www.stet.eu/assets/files/PSD2/1-5-1-6/api-dsp2-stet-v1.5.1.6-part-1-framework.pdf
https://www.stet.eu/assets/files/PSD2/1-5-1-6/api-dsp2-stet-v1.5.1.6-part-3-interaction-examples.pdf
 2021-08-27 20:58:24 +01:00
g0tmi1kandGitHub 8120e9e48c Merge pull request #631 from afaq1337/patch-2 
added a critical endpoint
 2021-08-27 20:54:40 +01:00
g0tmi1kandGitHub 03b4d2c22c Merge pull request #619 from krvaibhaw/master 
Update http-request-headers-fields-large.txt
 2021-06-13 00:00:00 +01:00
g0tmi1kandGitHub 9121b47c75 Merge pull request #618 from chacka0101/patch-6 
Updates
 2021-06-12 19:16:53 +01:00
g0tmi1kandGitHub 0ff688e83c Merge pull request #616 from chacka0101/patch-5 
Insert F5 Default passwords products
 2021-06-12 19:16:38 +01:00
g0tmi1kandGitHub 034041bb6b Merge pull request #615 from righettod/feature_add_shibboleth-sso 
Add Shibboleth.sso Metadata endpoint

https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP
 2021-06-12 19:16:16 +01:00
g0tmi1kandGitHub 61fb2f1803 Merge pull request #613 from chacka0101/patch-4 
Update with Sonatype Nexus Default Passwords:

https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
 2021-06-12 19:15:52 +01:00
g0tmi1kandGitHub 269a92f376 Merge pull request #610 from Annihilat0r/master 
Add NoSQL payload
 2021-06-12 19:14:48 +01:00
g0tmi1kandGitHub d53712ab5e Merge pull request #609 from righettod/feature_add_oauth_endpoints 
Add oauth and openid missing endpoints

https://connect2id.com/products/server/docs/api
https://docs.gitlab.com/ee/api/oauth2.html#retrieving-the-token-information
 2021-06-12 19:14:15 +01:00
g0tmi1kandGitHub 96f8c3f40d Merge pull request #607 from g0tmi1k/release 
2021.2 Release
 2021-05-25 17:51:32 +01:00
g0tmi1kandGitHub 664dd4c648 Merge pull request #603 from shelld3v/patch-9 
More endpoints from Assetnote wordlist

https://wordlists-cdn.assetnote.io/data/automated/httparchive_apiroutes_2021_04_28.txt
 2021-05-25 17:44:52 +01:00
g0tmi1kandGitHub 8c35abaa4c Merge pull request #599 from drwetter/patch-5 
Add balancer for apache

https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html
 2021-05-25 17:36:38 +01:00
g0tmi1kandGitHub 3ce65b30e3 Merge pull request #594 from righettod/master 
Add security.txt at the root
 2021-05-25 17:35:52 +01:00
g0tmi1kandGitHub e52d55d4ad Merge pull request #584 from Splint3r7/master 
Update Ruby on Rails wordlists
 2021-05-25 17:33:55 +01:00
g0tmi1kandGitHub 22b96249fd Merge pull request #600 from renanhsilva/master 
Update wordpress.fuzz.txt
 2021-05-25 17:33:30 +01:00
g0tmi1kandGitHub 44c288e17a Merge pull request #601 from shelld3v/patch-8 
Better wordlist
 2021-05-25 17:32:54 +01:00
g0tmi1kandGitHub 23fca5f452 Merge pull request #604 from cmaruti/patch-2 
Update http-request-headers-fields-large.txt
 2021-05-25 17:29:24 +01:00
g0tmi1kandGitHub 2a13b61382 Merge pull request #605 from hectorgrecco/patch-2 
Add "cms" word to list
 2021-05-25 17:29:14 +01:00
g0tmi1kandGitHub dbb1a70871 Merge pull request #606 from chacka0101/patch-3 
Update default-passwords.csv

Source: https://www.seeddms.org/index.php?id=2
 2021-05-25 16:58:45 +01:00
g0tmi1kandGitHub 285474cf9b Merge pull request #586 from chacka0101/patch-2 
Include line 2020, Raspberrypi password default.

Source: https://www.raspberrypi.org/documentation/linux/usage/users.md
 2021-04-11 06:35:28 +01:00
g0tmi1kandGitHub 7693c73c26 Merge pull request #582 from slicin/patch-1 
Update wp-plugins.fuzz.txt
 2021-03-23 06:44:43 +00:00
g0tmi1kandGitHub d90534cd25 Merge pull request #581 from GraoMelo/patch-1 
Add all 20th century anniversary dates 1900-2020.txt
 2021-03-23 06:44:06 +00:00
g0tmi1kandGitHub da6d556362 Merge pull request #579 from ernestask/wip/ernestask/london 
Discovery: Fix spelling and hyphenate some words
 2021-03-23 06:42:40 +00:00
g0tmi1kandGitHub 34898bf63e Merge pull request #578 from seran/master 
Vulnerable Vtiger plugin

https://github.com/seran/vtiger-vuln-extension
 2021-03-23 06:41:44 +00:00
g0tmi1kandGitHub eeea855ac5 Merge pull request #577 from righettod/master 
Add "contribute.json" file entry

https://infosec.mozilla.org/guidelines/web_security#contributejson
https://www.contributejson.org/
https://github.com/mozilla/contribute.json
 2021-03-01 12:43:28 +00:00
g0tmi1kandGitHub 3e7f7920c9 Merge pull request #572 from Zeecka/LFI_mssql_master.mdf 
Add master.mdf MSSQL path to Windows LFI

https://rastating.github.io/from-lfi-to-sql-database-backup/#locating-the-instance-on-disk
 2021-03-01 05:18:32 +00:00
g0tmi1kandGitHub 3f5531cde3 Merge pull request #573 from righettod/master 
Add specific "render" endpoints
 2021-03-01 05:18:13 +00:00
g0tmi1kandGitHub f172f8fa88 Merge pull request #575 from cmaruti/patch-1 
Create versioning_metafiles.txt
 2021-03-01 05:17:32 +00:00
g0tmi1kandGitHub 8cbf260c09 Merge pull request #571 from righettod/master 
Added "Assetnote Wordlists" in "Similar Projects" section
 2021-02-12 10:18:25 +00:00
g0tmi1kandGitHub c341f97b90 Merge pull request #563 from jaiswalakshansh/patch-1 
Update spring-boot.txt

Source: https://www.baeldung.com/spring-boot-actuators
 2021-02-12 10:17:51 +00:00
g0tmi1kandGitHub 4df226a358 Merge pull request #539 from shelld3v/patch-6 
Create a wordlist for dirsearch users
 2021-02-12 10:17:25 +00:00
g0tmi1kandGitHub 36116d773a Merge pull request #557 from shelld3v/patch-7 
More API endpoints (from assetnote) and sort everything

Source: wordlist.assetnote.io
 2021-02-12 10:16:52 +00:00
g0tmi1kandGitHub 0d39b80eee Merge pull request #570 from Faelian/master 
Added webpack.manifest.json
 2021-02-11 22:09:44 +00:00
g0tmi1kandGitHub 265163b669 Merge pull request #569 from g0tmi1k/2021.1 
2021.1
 2021-02-11 21:59:44 +00:00
g0tmi1kandGitHub 7a0c657912 Merge pull request #555 from shoeper/unique-dns-keeporder 
DNS lists lower case only
 2021-02-11 21:35:58 +00:00
g0tmi1kandGitHub 5d0d24f91b Merge pull request #562 from righettod/feature_blazor 
Add Microsoft Blazor WebAssembly identifiers

Source: https://github.com/SteveSandersonMS/CarChecker
 2021-02-11 21:26:13 +00:00
g0tmi1kandGitHub 6372096eab Merge pull request #561 from kazkansouh/ldap-fuzzing 
Standard LDAP attribute and classes lists

Source: ldapsearch -s base -b cn=Subschema  "(objectclass=*)" attributetypes -LLL | sed -e ':x N ; s/\n // ; tx ; P ; s/^.*\n//; tx' | grep -e '^a' | cut -d "'" -f 2 | sort -u
 2021-02-11 21:25:40 +00:00
g0tmi1kandGitHub 94e19b86fa Merge pull request #559 from TAbdiukov/master 
Object Exchange (OBEX) common and uncommon path lists

Source: https://en.wikipedia.org/wiki/OBject_EXchange
 2021-02-11 21:24:29 +00:00
g0tmi1kandGitHub e9127d389b Merge pull request #556 from govolution/patch-7 
Update ssh-betterdefaultpasslist.txt

Source: https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/
 2021-02-11 20:53:34 +00:00
g0tmi1kandGitHub 1e286083e4 Merge pull request #552 from mwoolweaver/patch-1 
Add default password for jailbroken iOS (iPhone, iPad, iPod Touch, AppleTV)

Source: https://blog.elcomsoft.com/2020/05/ios-jailbreaks-ssh-and-root-password/
 2021-02-11 20:52:35 +00:00
g0tmi1kandGitHub 42a8b633de Merge pull request #551 from m4p0/master 
Added Zyxel default username and password (CVE-2020-29583 / CVE-2016-10401)

Source: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html
 2021-02-11 20:51:37 +00:00
g0tmi1kandGitHub ad24e5dcd1 Merge pull request #549 from righettod/Feature_548 
Add ".well-known/jwks.json" path to common.txt file.

Source:

- https://auth0.com/docs/tokens/json-web-tokens/json-web-key-sets
- https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html#amazon-cognito-user-pools-using-tokens-step-2
- https://blogs.akamai.com/2019/10/verify-jwt-with-json-web-key-set-jwks-in-api-gateway.html
 2021-02-11 20:50:33 +00:00
g0tmi1kandGitHub cd52c8428a Merge pull request #547 from fiLLLip/patch-1 
Add humans.txt

Source: http://humanstxt.org/
 2021-02-11 20:49:46 +00:00
g0tmi1kandGitHub 751900cbde Merge pull request #544 from mxrch/master 
Adding .git to big.txt
 2021-02-11 20:49:15 +00:00
g0tmi1kandGitHub 5fc0aeffe4 Merge pull request #543 from rf-peixoto/patch-1 
Upload 2020-200_most_used_passwords.txt

Source: https://nordpass.com/most-common-passwords-list/
 2021-02-11 20:48:56 +00:00
g0tmi1kandGitHub c4b84c2392 Merge pull request #542 from redstonedesigner/master 
Add EFF Dice lists

Source: https://eff.org/dice
 2021-02-11 20:48:23 +00:00
g0tmi1kandGitHub 5ec9d37a15 Merge pull request #540 from kazkansouh/mime-types-iana 
refreshed mime/content-types

Source: https://www.iana.org/assignments/media-types/media-types.xml

```
curl https://www.iana.org/assignments/media-types/media-types.xml -s | xpath -q -e '//file/text()' | tr '[[:upper:]]' '[[:lower:]]'
```
 2021-02-11 20:47:27 +00:00
g0tmi1kandGitHub 9fbf6cb419 Merge pull request #524 from t0-git/patch-1 
Adding new .git entries and .svnignore.
 2021-02-11 20:28:23 +00:00
g0tmi1kandGitHub af40e7f267 Merge pull request #519 from arjunshibu/master 
Added http-request-methods.txt
 2021-02-11 20:27:53 +00:00
g0tmi1kandGitHub 9f4d672e98 Merge pull request #517 from righettod/master 
Add path to a common ManageEngine endpoint

Source: https://righettod.eu/#4-vulns
 2020-11-11 12:00:53 +00:00
g0tmi1kandGitHub ac861e371d Merge pull request #509 from ArgentEnergy/spring-boot-redis 
Spring Boot Redis paths.
 2020-11-06 11:51:25 +00:00
g0tmi1kandGitHub e6333a39d6 Merge pull request #537 from g0tmi1k/misc 
dos2unix
 2020-11-04 11:46:58 +00:00
g0tmi1kandGitHub 7d7b9f70e9 Merge pull request #536 from g0tmi1k/misc 
dos2unix
 2020-11-04 00:01:12 +00:00
g0tmi1kandGitHub 12513fd8ad Merge pull request #518 from clem9669/patch-5 
Adding nextcloud & owncloud to common.txt

Source: https://help.dreamhost.com/hc/en-us/articles/235545207-Step-by-step-guide-to-deploy-Nextcloud-on-DreamCompute
 2020-11-03 22:00:16 +00:00
g0tmi1kandGitHub 2c64f30675 Merge pull request #513 from vulf/vulf/add_webshells_list 
Added a list of popular web shells

The list includes the filenames of webshells in https://github.com/xl7dev/WebShell , https://github.com/TheBinitGhimire/Web-Shells and FuzzDB.
 2020-11-03 14:11:05 +00:00
g0tmi1kandGitHub d21b80c755 Merge pull request #535 from Floppynator/patch-1 
Update email-top-100-domains.txt
 2020-11-03 12:16:28 +00:00
g0tmi1kandGitHub 31d0f3f90b Merge pull request #534 from shelld3v/patch-5 
Added Donald Trump leaked passwords (2016 + 2020)
 2020-11-03 12:12:44 +00:00
g0tmi1kandGitHub c0b6a73bb9 Merge pull request #533 from g0tmi1k/misc 
2020.4 Release
 2020-11-03 11:54:26 +00:00
g0tmi1kandGitHub 6d164b9672 Merge pull request #527 from soufianetahiri/master 
Added actuator default paths and created new XSS fuzzing list

Source: https://docs.spring.io/spring-boot/docs/1.5.x/reference/html/production-ready-endpoints.html
 2020-11-03 11:39:11 +00:00
g0tmi1kandGitHub 449d7a84cd Merge pull request #528 from drwetter/patch-4 
Add CMS login

https://processwire.com/docs/security/admin/
 2020-11-02 21:12:18 +00:00
g0tmi1kandGitHub cea2a72bae Merge pull request #506 from LabanSkollerDefensify/patch-1 
Add NDES and SCEP URLs

/certsrv/mscep/mscep.dll: https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
/certsrv/mscep_admin: https://social.technet.microsoft.com/wiki/contents/articles/9063.active-directory-certificate-services-ad-cs-network-device-enrollment-service-ndes.aspx
 2020-11-02 21:11:53 +00:00
g0tmi1kandGitHub a6c94e1798 Merge pull request #526 from m4p0/master 
Added default usernames for SAP
 2020-11-02 21:00:11 +00:00
g0tmi1kandGitHub d2fdef60e8 Merge pull request #525 from n3k00n3/master 
Adding passwords found on public leak from Nord.
 2020-11-02 20:59:44 +00:00
g0tmi1kandGitHub 953255cc39 Merge pull request #523 from MusicGivesMeLife/master 
BiblePass Project
 2020-11-02 20:58:57 +00:00
g0tmi1kandGitHub fe2aa9e7b0 Merge pull request #521 from realArcherL/master 
Slight correction with version numbers from earlier PR also added new endpoints
 2020-11-02 20:57:49 +00:00
g0tmi1kandGitHub 2ce45ec6b8 Merge pull request #512 from aayushsonu/master 
Update names.txt
 2020-11-02 19:07:19 +00:00
g0tmi1kandGitHub c2e6ced5fa Merge pull request #505 from device33/patch-1 
Update apache.txt

source: https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4/html/development_guide/sect-apache_mod_cluster-manager_application
 2020-11-02 19:06:07 +00:00
g0tmi1kandGitHub d5271820d0 Merge pull request #503 from Paradoxis/master 
Removed destructive SQL statements
 2020-09-17 14:16:24 +01:00
g0tmi1kandGitHub ca6bf04c05 Merge pull request #465 from dee-see/patch-1 
Add new Swagger UI path
 2020-09-16 07:30:38 +01:00
g0tmi1kandGitHub e4e65c3510 Merge pull request #478 from LethargicLeprechaun/master 
10-million-password-list-top-1000000.txt Corrections
 2020-09-16 07:30:17 +01:00
g0tmi1kandGitHub f1f3750803 Merge pull request #480 from haxxinen/patch-1 
Create quick-SQLi.txt
 2020-09-16 07:29:18 +01:00
g0tmi1kandGitHub 3e29513e3b Merge pull request #484 from realArcherL/patch-1 
Updated with more keywords and version numbers

- Source: https://youtu.be/NPDp7GHmMa0
 2020-09-16 07:28:58 +01:00
g0tmi1kandGitHub 924c558fd8 Merge pull request #485 from drwetter/patch-4 
Create german_misc.txt
 2020-09-16 07:28:31 +01:00
g0tmi1kandGitHub fbe21a0c99 Merge pull request #492 from drwetter/fix_germanpw.txt 
Fix and extend German word list

Source: https://gist.github.com/MarvinJWendt/2f4f4154b8ae218600eb091a5706b5f4
 2020-09-16 07:27:37 +01:00
g0tmi1kandGitHub c5ba0f44e4 Merge pull request #493 from daehee/master 
XSS payloads from OFJAAAH

Source: https://ghostbin.co/paste/qo23j
 2020-09-16 07:27:07 +01:00
g0tmi1kandGitHub a274ffba57 Merge pull request #495 from shelld3v/patch-1 
Add more API endpoints
 2020-09-16 07:25:58 +01:00
g0tmi1kandGitHub a3924f7a71 Merge pull request #498 from shelld3v/patch-4 
Add some endpoints
 2020-09-16 07:24:41 +01:00
g0tmi1kandGitHub 0c40a01395 Merge pull request #500 from 0x00gum/patch-2 
Some New DB Extensions
 2020-09-16 07:24:13 +01:00
g0tmi1kandGitHub 0b7d119f74 Merge pull request #501 from righettod/master 
Add payloads to identify the template engine used

- https://portswigger.net/research/server-side-template-injection
- https://github.com/epinna/tplmap
 2020-09-16 07:23:39 +01:00
g0tmi1kandGitHub 411cae8e5b Merge pull request #502 from danrneal/patch-1 
Add string js or injection
 2020-09-16 07:22:43 +01:00
g0tmi1kandGitHub e3d31edd19 Merge pull request #466 from bugbounty69/master 
Added all HTML Attributes list

Source: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
 2020-07-22 16:25:47 +01:00
g0tmi1kandGitHub dea731202f Merge pull request #471 from maxkleinke/master 
renamed files in Passwords/Default-Credentials for better parsing
 2020-07-22 16:25:27 +01:00
g0tmi1kandGitHub a93ecd7f91 Merge pull request #472 from righettod/master 
Add characters that can break a MongoDB query when JS expression is used

Source: https://github.com/Charlie-belmer/vulnerable-node-app/blob/master/app/routes/user.route.js#L8
 2020-07-22 16:25:07 +01:00
g0tmi1kandGitHub 31ee70aeef Merge pull request #473 from mrajput7/master 
Update golang.txt

Source: https://www.dropbox.com/s/ir2b56j3zt7vz0a/golang_handlefunc_combined?dl=0
 2020-07-22 16:24:33 +01:00
g0tmi1kandGitHub a3b77e1170 Merge pull request #475 from joegoerlich/patch-1 
Update sap.txt
 2020-07-22 16:24:13 +01:00
g0tmi1kandGitHub 3a9cac0384 Merge pull request #474 from chudyPB/master 
Update sap.txt
 2020-07-22 16:24:02 +01:00
g0tmi1kandGitHub 5fc3e6a208 Merge pull request #476 from toxydose/patch-1 
Add some common ports
 2020-07-22 16:23:04 +01:00
g0tmi1kandGitHub a6e3f77e4d Merge pull request #477 from g0tmi1k/misc 
Few fixes
 2020-07-22 16:22:48 +01:00