idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1,251 Commits 1 Branch 0 Tags
58370984a415ecac5f516fbef90bed2d598e007b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
g0tmi1kandGitHub 58370984a4 Merge pull request #687 from righettod/master 
Add "h2-console" word

https://mp.weixin.qq.com/s/Yn5U8WHGJZbTJsxwUU3UiQ
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console
https://www.shodan.io/search?query=http.title%3A%22H2+Console%22
 2022-01-31 23:22:06 +00:00
g0tmi1kandGitHub 5a4d4f7ebc Merge pull request #686 from AddaxSoft/patch-2 
added 8443, tomcat ssl
 2022-01-31 23:21:24 +00:00
g0tmi1kandGitHub 2dac179038 Merge pull request #685 from wdahlenburg/master 
Adding Spring Boot Gateway Actuator

https://wya.pl/2021/12/20/bring-your-own-ssrf-the-gateway-actuator/
 2022-01-31 23:20:57 +00:00
g0tmi1kandGitHub 6dd17288aa Merge pull request #678 from righettod/feature_update_namelist 
Add new sub domain names

https://github.com/righettod/toolbox-pentest-web/blob/master/scripts/generate-vhost-names-dict.sh
 2022-01-31 23:09:45 +00:00
g0tmi1kandGitHub 2b61465823 Merge pull request #673 from kakumanivrn/patch-1 
Added latest years to dictionary
 2022-01-31 23:06:23 +00:00
g0tmi1kandGitHub aa0eb72f38 Merge pull request #672 from elitejake/patch-1 
Add PURGE method
 2021-11-26 10:52:04 +00:00
g0tmi1kandGitHub 16f5f35b95 Merge pull request #670 from g0tmi1k/code 
Add example c root-shells
 2021-11-24 10:09:22 +00:00
g0tmi1kandGitHub 23469eb06f Merge pull request #633 from basubanakar/patch-1 
Update nginx.txt
 2021-11-24 10:00:07 +00:00
g0tmi1kandGitHub c129a01483 Merge pull request #640 from mxrch/patch-1 
adding "dismiss" to big.txt
 2021-11-24 09:59:49 +00:00
g0tmi1kandGitHub 55f526662b Merge pull request #648 from hhc0null/fix_row_column_quantity_to_4 
Fix row column quantity to 4
 2021-11-24 09:58:16 +00:00
g0tmi1kandGitHub d1a222afff Merge pull request #649 from PinkDev1/master 
Many more scopes, and cleanup of oauth-oidc-scopes.txt

- https://developers.google.com/identity/protocols/oauth2/scopes
- https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps
- https://api.slack.com/legacy/oauth-scopes
- https://developers.dropbox.com/oauth-guide 
- https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims
 2021-11-24 09:57:54 +00:00
g0tmi1kandGitHub 7b9d0b826a Merge pull request #653 from soufianetahiri/master 
Fortinet VPN leaked passwords

Source: https://therecord.media/fortinet-warns-customers-after-hackers-leak-passwords-for-87000-vpns/
 2021-11-24 09:55:42 +00:00
g0tmi1kandGitHub c3de593d83 Merge pull request #655 from ruevaughn/master 
Rename security question file to reflect actual location in Utah
 2021-11-24 09:55:14 +00:00
g0tmi1kandGitHub 94f8cd291e Merge pull request #659 from righettod/feature_enrich_jenkins 
Add new endpoints to the jenkins dict.

Source: https://www.jenkins.io/download/
 2021-11-24 09:54:24 +00:00
g0tmi1kandGitHub 4030e1b6ce Merge pull request #660 from noraj/patch-1 
Update fuzz-Bo0oM.txt

Source: https://github.com/Bo0oM/fuzz.txt/blob/master/fuzz.txt
 2021-11-24 09:53:58 +00:00
g0tmi1kandGitHub 9f0e7eb8de Merge pull request #664 from clem9669/master 
Converting default-password.csv to .txt
 2021-11-24 09:53:11 +00:00
g0tmi1kandGitHub 2a6535afb3 Merge pull request #666 from drwetter/patch-7 
Create hashicorp-vault.txt

Source: https://www.vaultproject.io/api/system/seal
 2021-11-24 09:52:09 +00:00
g0tmi1kandGitHub 2c1098cf10 Merge pull request #668 from righettod/master 
Add IBM MQSeries common channel names

- https://www.ibm.com/products/mq
- https://developer.ibm.com/tutorials/mq-connect-app-queue-manager-containers/
- https://stackoverflow.com/a/48145059
 2021-11-24 09:51:07 +00:00
g0tmi1kandGitHub 1147cf6fba Merge pull request #669 from d4rkc0nd0r/patch-1 
Update default-passwords.csv

Source: https://www.zabbix.com/documentation/current/manual/quickstart/login
 2021-11-24 09:50:15 +00:00
g0tmi1kandGitHub cb81804316 Merge pull request #647 from g0tmi1k/spaces 
dos2unix
 2021-08-28 21:36:19 +01:00
g0tmi1kandGitHub 44523e27a8 Merge pull request #644 from han0x7300/issues-642 
add "___graphql" to "Discovery/Web-Content/graphql.txt

https://www.gatsbyjs.com/docs/reference/graphql-data-layer/graphql-api/
https://www.gatsbyjs.com/docs/tutorial/part-4/
 2021-08-28 21:31:10 +01:00
g0tmi1kandGitHub 4e47e1f0ff Merge pull request #646 from g0tmi1k/spaces 
Replace ' ' with ' ' (Empty Characters)
 2021-08-28 21:07:30 +01:00
g0tmi1kandGitHub 2f98438a2d Update CONTRIBUTORS.md 2021-08-27 21:25:41 +01:00
g0tmi1kandGitHub e017d54a22 Merge pull request #643 from 5tr1x/patch-1 
Create aem2.txt
 2021-08-27 21:17:43 +01:00
g0tmi1kandGitHub 656105853a Merge pull request #592 from afaq1337/patch-1 
Update all.txt
 2021-08-27 21:17:26 +01:00
g0tmi1kandGitHub 38ba2a007a Merge pull request #602 from sAsPeCt488/master 
Add Base64 Encoded tomcat-betterdefaultpasslist
 2021-08-27 21:16:56 +01:00
g0tmi1kandGitHub 26bc13c98f Merge pull request #620 from righettod/feature_add_http_req_headers 
Add "UniqueId" http request header
 2021-08-27 21:16:25 +01:00
g0tmi1kandGitHub 06cfff0475 Merge pull request #621 from jakecraige/patch-1 
Add port 3000 (Ruby on Rails) to common ports

Source: https://guides.rubyonrails.org/command_line.html#bin-rails-server
 2021-08-27 21:16:04 +01:00
g0tmi1kandGitHub 60fbd42063 Merge pull request #622 from realArcherL/patch-2 
A very new naming scheme for Graphql endpoints
 2021-08-27 21:15:39 +01:00
g0tmi1kandGitHub b4637896ef Merge pull request #623 from righettod/feature_add_oauth2-odic_endpoints 
Add missing OAUTH2/OIDC endpoints.

Source: https://righettod.eu.auth0.com/.well-known/openid-configuration
 2021-08-27 21:15:07 +01:00
g0tmi1kandGitHub 177f25ba69 Merge pull request #625 from cbk914/master 
Some additions

Source: http://www.whatsmypass.com/the-top-500-worst-passwords-of-all-time
 2021-08-27 21:14:37 +01:00
g0tmi1kandGitHub 01f7723ddd Merge pull request #626 from 7PH/master 
Add waybackverify.txt filename to raft medium and large lists
 2021-08-27 21:13:55 +01:00
g0tmi1kandGitHub 975fac21dd Merge pull request #627 from redstonedesigner/special-chars-fix 
Add "-" and remove duplicate "_" entry
 2021-08-27 21:12:54 +01:00
g0tmi1kandGitHub eea747817d Merge pull request #628 from Anon-Exploiter/patch-1 
Added ga-google-analytics in wp-plugins.txt

Source https://wordpress.org/plugins/ga-google-analytics/
 2021-08-27 21:12:25 +01:00
g0tmi1kandGitHub 4002c2c970 Merge pull request #630 from whitehauler/patch-1 
Update raft-large-files.txt
 2021-08-27 21:12:01 +01:00
g0tmi1kandGitHub de06dbb492 Merge pull request #637 from dabasanta/DaniloBasanta 
Added list of IPv4 address class A&C. Also a script to generate these lists.
 2021-08-27 21:11:24 +01:00
g0tmi1kandGitHub d8294e9763 Merge pull request #629 from righettod/feature_add_oauth-oidc_scopes_dict 
Add a dict with OAUTH2/OIDC scopes.
 2021-08-27 21:00:07 +01:00
g0tmi1kandGitHub 5a70ecdbde Merge pull request #632 from righettod/feature_psd2_headers 
Add PSD2 PSU request headers.

https://www.stet.eu/assets/files/PSD2/1-5-1-6/api-dsp2-stet-v1.5.1.6-part-1-framework.pdf
https://www.stet.eu/assets/files/PSD2/1-5-1-6/api-dsp2-stet-v1.5.1.6-part-3-interaction-examples.pdf
 2021-08-27 20:58:24 +01:00
g0tmi1kandGitHub 8120e9e48c Merge pull request #631 from afaq1337/patch-2 
added a critical endpoint
 2021-08-27 20:54:40 +01:00
g0tmi1kandGitHub 03b4d2c22c Merge pull request #619 from krvaibhaw/master 
Update http-request-headers-fields-large.txt
 2021-06-13 00:00:00 +01:00
g0tmi1kandGitHub 9121b47c75 Merge pull request #618 from chacka0101/patch-6 
Updates
 2021-06-12 19:16:53 +01:00
g0tmi1kandGitHub 0ff688e83c Merge pull request #616 from chacka0101/patch-5 
Insert F5 Default passwords products
 2021-06-12 19:16:38 +01:00
g0tmi1kandGitHub 034041bb6b Merge pull request #615 from righettod/feature_add_shibboleth-sso 
Add Shibboleth.sso Metadata endpoint

https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataForSP
 2021-06-12 19:16:16 +01:00
g0tmi1kandGitHub 61fb2f1803 Merge pull request #613 from chacka0101/patch-4 
Update with Sonatype Nexus Default Passwords:

https://help.sonatype.com/repomanager2/maven-and-other-build-tools/sbt
 2021-06-12 19:15:52 +01:00
g0tmi1kandGitHub 269a92f376 Merge pull request #610 from Annihilat0r/master 
Add NoSQL payload
 2021-06-12 19:14:48 +01:00
g0tmi1kandGitHub d53712ab5e Merge pull request #609 from righettod/feature_add_oauth_endpoints 
Add oauth and openid missing endpoints

https://connect2id.com/products/server/docs/api
https://docs.gitlab.com/ee/api/oauth2.html#retrieving-the-token-information
 2021-06-12 19:14:15 +01:00
g0tmi1kandGitHub 96f8c3f40d Merge pull request #607 from g0tmi1k/release 
2021.2 Release
 2021-05-25 17:51:32 +01:00
g0tmi1kandGitHub 664dd4c648 Merge pull request #603 from shelld3v/patch-9 
More endpoints from Assetnote wordlist

https://wordlists-cdn.assetnote.io/data/automated/httparchive_apiroutes_2021_04_28.txt
 2021-05-25 17:44:52 +01:00
g0tmi1kandGitHub 8c35abaa4c Merge pull request #599 from drwetter/patch-5 
Add balancer for apache

https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html
 2021-05-25 17:36:38 +01:00
g0tmi1kandGitHub 3ce65b30e3 Merge pull request #594 from righettod/master 
Add security.txt at the root
 2021-05-25 17:35:52 +01:00
g0tmi1kandGitHub e52d55d4ad Merge pull request #584 from Splint3r7/master 
Update Ruby on Rails wordlists
 2021-05-25 17:33:55 +01:00
g0tmi1kandGitHub 22b96249fd Merge pull request #600 from renanhsilva/master 
Update wordpress.fuzz.txt
 2021-05-25 17:33:30 +01:00
g0tmi1kandGitHub 44c288e17a Merge pull request #601 from shelld3v/patch-8 
Better wordlist
 2021-05-25 17:32:54 +01:00
g0tmi1kandGitHub 23fca5f452 Merge pull request #604 from cmaruti/patch-2 
Update http-request-headers-fields-large.txt
 2021-05-25 17:29:24 +01:00
g0tmi1kandGitHub 2a13b61382 Merge pull request #605 from hectorgrecco/patch-2 
Add "cms" word to list
 2021-05-25 17:29:14 +01:00
g0tmi1kandGitHub dbb1a70871 Merge pull request #606 from chacka0101/patch-3 
Update default-passwords.csv

Source: https://www.seeddms.org/index.php?id=2
 2021-05-25 16:58:45 +01:00
g0tmi1kandGitHub 285474cf9b Merge pull request #586 from chacka0101/patch-2 
Include line 2020, Raspberrypi password default.

Source: https://www.raspberrypi.org/documentation/linux/usage/users.md
 2021-04-11 06:35:28 +01:00
g0tmi1kandGitHub 7693c73c26 Merge pull request #582 from slicin/patch-1 
Update wp-plugins.fuzz.txt
 2021-03-23 06:44:43 +00:00
g0tmi1kandGitHub d90534cd25 Merge pull request #581 from GraoMelo/patch-1 
Add all 20th century anniversary dates 1900-2020.txt
 2021-03-23 06:44:06 +00:00
g0tmi1kandGitHub da6d556362 Merge pull request #579 from ernestask/wip/ernestask/london 
Discovery: Fix spelling and hyphenate some words
 2021-03-23 06:42:40 +00:00
g0tmi1kandGitHub 34898bf63e Merge pull request #578 from seran/master 
Vulnerable Vtiger plugin

https://github.com/seran/vtiger-vuln-extension
 2021-03-23 06:41:44 +00:00
g0tmi1kandGitHub eeea855ac5 Merge pull request #577 from righettod/master 
Add "contribute.json" file entry

https://infosec.mozilla.org/guidelines/web_security#contributejson
https://www.contributejson.org/
https://github.com/mozilla/contribute.json
 2021-03-01 12:43:28 +00:00
g0tmi1kandGitHub 3e7f7920c9 Merge pull request #572 from Zeecka/LFI_mssql_master.mdf 
Add master.mdf MSSQL path to Windows LFI

https://rastating.github.io/from-lfi-to-sql-database-backup/#locating-the-instance-on-disk
 2021-03-01 05:18:32 +00:00
g0tmi1kandGitHub 3f5531cde3 Merge pull request #573 from righettod/master 
Add specific "render" endpoints
 2021-03-01 05:18:13 +00:00
g0tmi1kandGitHub f172f8fa88 Merge pull request #575 from cmaruti/patch-1 
Create versioning_metafiles.txt
 2021-03-01 05:17:32 +00:00
g0tmi1kandGitHub 8cbf260c09 Merge pull request #571 from righettod/master 
Added "Assetnote Wordlists" in "Similar Projects" section
 2021-02-12 10:18:25 +00:00
g0tmi1kandGitHub c341f97b90 Merge pull request #563 from jaiswalakshansh/patch-1 
Update spring-boot.txt

Source: https://www.baeldung.com/spring-boot-actuators
 2021-02-12 10:17:51 +00:00
g0tmi1kandGitHub 4df226a358 Merge pull request #539 from shelld3v/patch-6 
Create a wordlist for dirsearch users
 2021-02-12 10:17:25 +00:00
g0tmi1kandGitHub 36116d773a Merge pull request #557 from shelld3v/patch-7 
More API endpoints (from assetnote) and sort everything

Source: wordlist.assetnote.io
 2021-02-12 10:16:52 +00:00
g0tmi1kandGitHub 0d39b80eee Merge pull request #570 from Faelian/master 
Added webpack.manifest.json
 2021-02-11 22:09:44 +00:00
g0tmi1kandGitHub 265163b669 Merge pull request #569 from g0tmi1k/2021.1 
2021.1
 2021-02-11 21:59:44 +00:00
g0tmi1kandGitHub 7a0c657912 Merge pull request #555 from shoeper/unique-dns-keeporder 
DNS lists lower case only
 2021-02-11 21:35:58 +00:00
g0tmi1kandGitHub 5d0d24f91b Merge pull request #562 from righettod/feature_blazor 
Add Microsoft Blazor WebAssembly identifiers

Source: https://github.com/SteveSandersonMS/CarChecker
 2021-02-11 21:26:13 +00:00
g0tmi1kandGitHub 6372096eab Merge pull request #561 from kazkansouh/ldap-fuzzing 
Standard LDAP attribute and classes lists

Source: ldapsearch -s base -b cn=Subschema  "(objectclass=*)" attributetypes -LLL | sed -e ':x N ; s/\n // ; tx ; P ; s/^.*\n//; tx' | grep -e '^a' | cut -d "'" -f 2 | sort -u
 2021-02-11 21:25:40 +00:00
g0tmi1kandGitHub 94e19b86fa Merge pull request #559 from TAbdiukov/master 
Object Exchange (OBEX) common and uncommon path lists

Source: https://en.wikipedia.org/wiki/OBject_EXchange
 2021-02-11 21:24:29 +00:00
g0tmi1kandGitHub e9127d389b Merge pull request #556 from govolution/patch-7 
Update ssh-betterdefaultpasslist.txt

Source: https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/
 2021-02-11 20:53:34 +00:00
g0tmi1kandGitHub 1e286083e4 Merge pull request #552 from mwoolweaver/patch-1 
Add default password for jailbroken iOS (iPhone, iPad, iPod Touch, AppleTV)

Source: https://blog.elcomsoft.com/2020/05/ios-jailbreaks-ssh-and-root-password/
 2021-02-11 20:52:35 +00:00
g0tmi1kandGitHub 42a8b633de Merge pull request #551 from m4p0/master 
Added Zyxel default username and password (CVE-2020-29583 / CVE-2016-10401)

Source: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html
 2021-02-11 20:51:37 +00:00
g0tmi1kandGitHub ad24e5dcd1 Merge pull request #549 from righettod/Feature_548 
Add ".well-known/jwks.json" path to common.txt file.

Source:

- https://auth0.com/docs/tokens/json-web-tokens/json-web-key-sets
- https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html#amazon-cognito-user-pools-using-tokens-step-2
- https://blogs.akamai.com/2019/10/verify-jwt-with-json-web-key-set-jwks-in-api-gateway.html
 2021-02-11 20:50:33 +00:00
g0tmi1kandGitHub cd52c8428a Merge pull request #547 from fiLLLip/patch-1 
Add humans.txt

Source: http://humanstxt.org/
 2021-02-11 20:49:46 +00:00
g0tmi1kandGitHub 751900cbde Merge pull request #544 from mxrch/master 
Adding .git to big.txt
 2021-02-11 20:49:15 +00:00
g0tmi1kandGitHub 5fc0aeffe4 Merge pull request #543 from rf-peixoto/patch-1 
Upload 2020-200_most_used_passwords.txt

Source: https://nordpass.com/most-common-passwords-list/
 2021-02-11 20:48:56 +00:00
g0tmi1kandGitHub c4b84c2392 Merge pull request #542 from redstonedesigner/master 
Add EFF Dice lists

Source: https://eff.org/dice
 2021-02-11 20:48:23 +00:00
g0tmi1kandGitHub 5ec9d37a15 Merge pull request #540 from kazkansouh/mime-types-iana 
refreshed mime/content-types

Source: https://www.iana.org/assignments/media-types/media-types.xml

```
curl https://www.iana.org/assignments/media-types/media-types.xml -s | xpath -q -e '//file/text()' | tr '[[:upper:]]' '[[:lower:]]'
```
 2021-02-11 20:47:27 +00:00
g0tmi1kandGitHub 9fbf6cb419 Merge pull request #524 from t0-git/patch-1 
Adding new .git entries and .svnignore.
 2021-02-11 20:28:23 +00:00
g0tmi1kandGitHub af40e7f267 Merge pull request #519 from arjunshibu/master 
Added http-request-methods.txt
 2021-02-11 20:27:53 +00:00
g0tmi1kandGitHub 9f4d672e98 Merge pull request #517 from righettod/master 
Add path to a common ManageEngine endpoint

Source: https://righettod.eu/#4-vulns
 2020-11-11 12:00:53 +00:00
g0tmi1kandGitHub ac861e371d Merge pull request #509 from ArgentEnergy/spring-boot-redis 
Spring Boot Redis paths.
 2020-11-06 11:51:25 +00:00
g0tmi1kandGitHub e6333a39d6 Merge pull request #537 from g0tmi1k/misc 
dos2unix
 2020-11-04 11:46:58 +00:00
g0tmi1kandGitHub 7d7b9f70e9 Merge pull request #536 from g0tmi1k/misc 
dos2unix
 2020-11-04 00:01:12 +00:00
g0tmi1kandGitHub 12513fd8ad Merge pull request #518 from clem9669/patch-5 
Adding nextcloud & owncloud to common.txt

Source: https://help.dreamhost.com/hc/en-us/articles/235545207-Step-by-step-guide-to-deploy-Nextcloud-on-DreamCompute
 2020-11-03 22:00:16 +00:00
g0tmi1kandGitHub 2c64f30675 Merge pull request #513 from vulf/vulf/add_webshells_list 
Added a list of popular web shells

The list includes the filenames of webshells in https://github.com/xl7dev/WebShell , https://github.com/TheBinitGhimire/Web-Shells and FuzzDB.
 2020-11-03 14:11:05 +00:00
g0tmi1kandGitHub d21b80c755 Merge pull request #535 from Floppynator/patch-1 
Update email-top-100-domains.txt
 2020-11-03 12:16:28 +00:00
g0tmi1kandGitHub 31d0f3f90b Merge pull request #534 from shelld3v/patch-5 
Added Donald Trump leaked passwords (2016 + 2020)
 2020-11-03 12:12:44 +00:00
g0tmi1kandGitHub c0b6a73bb9 Merge pull request #533 from g0tmi1k/misc 
2020.4 Release
 2020-11-03 11:54:26 +00:00
g0tmi1kandGitHub 6d164b9672 Merge pull request #527 from soufianetahiri/master 
Added actuator default paths and created new XSS fuzzing list

Source: https://docs.spring.io/spring-boot/docs/1.5.x/reference/html/production-ready-endpoints.html
 2020-11-03 11:39:11 +00:00
g0tmi1kandGitHub 449d7a84cd Merge pull request #528 from drwetter/patch-4 
Add CMS login

https://processwire.com/docs/security/admin/
 2020-11-02 21:12:18 +00:00
g0tmi1kandGitHub cea2a72bae Merge pull request #506 from LabanSkollerDefensify/patch-1 
Add NDES and SCEP URLs

/certsrv/mscep/mscep.dll: https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
/certsrv/mscep_admin: https://social.technet.microsoft.com/wiki/contents/articles/9063.active-directory-certificate-services-ad-cs-network-device-enrollment-service-ndes.aspx
 2020-11-02 21:11:53 +00:00
g0tmi1kandGitHub a6c94e1798 Merge pull request #526 from m4p0/master 
Added default usernames for SAP
 2020-11-02 21:00:11 +00:00
g0tmi1kandGitHub d2fdef60e8 Merge pull request #525 from n3k00n3/master 
Adding passwords found on public leak from Nord.
 2020-11-02 20:59:44 +00:00