idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1,039 Commits 1 Branch 0 Tags
5fc0aeffe4475298ff2ad21e231a9e6f1ece31b2
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
g0tmi1kandGitHub 5fc0aeffe4 Merge pull request #543 from rf-peixoto/patch-1 
Upload 2020-200_most_used_passwords.txt

Source: https://nordpass.com/most-common-passwords-list/
 2021-02-11 20:48:56 +00:00
g0tmi1kandGitHub c4b84c2392 Merge pull request #542 from redstonedesigner/master 
Add EFF Dice lists

Source: https://eff.org/dice
 2021-02-11 20:48:23 +00:00
g0tmi1kandGitHub 5ec9d37a15 Merge pull request #540 from kazkansouh/mime-types-iana 
refreshed mime/content-types

Source: https://www.iana.org/assignments/media-types/media-types.xml

```
curl https://www.iana.org/assignments/media-types/media-types.xml -s | xpath -q -e '//file/text()' | tr '[[:upper:]]' '[[:lower:]]'
```
 2021-02-11 20:47:27 +00:00
g0tmi1kandGitHub 9fbf6cb419 Merge pull request #524 from t0-git/patch-1 
Adding new .git entries and .svnignore.
 2021-02-11 20:28:23 +00:00
g0tmi1kandGitHub af40e7f267 Merge pull request #519 from arjunshibu/master 
Added http-request-methods.txt
 2021-02-11 20:27:53 +00:00
g0tmi1kandGitHub 9f4d672e98 Merge pull request #517 from righettod/master 
Add path to a common ManageEngine endpoint

Source: https://righettod.eu/#4-vulns
 2020-11-11 12:00:53 +00:00
g0tmi1kandGitHub ac861e371d Merge pull request #509 from ArgentEnergy/spring-boot-redis 
Spring Boot Redis paths.
 2020-11-06 11:51:25 +00:00
g0tmi1kandGitHub e6333a39d6 Merge pull request #537 from g0tmi1k/misc 
dos2unix
 2020-11-04 11:46:58 +00:00
g0tmi1kandGitHub 7d7b9f70e9 Merge pull request #536 from g0tmi1k/misc 
dos2unix
 2020-11-04 00:01:12 +00:00
g0tmi1kandGitHub 12513fd8ad Merge pull request #518 from clem9669/patch-5 
Adding nextcloud & owncloud to common.txt

Source: https://help.dreamhost.com/hc/en-us/articles/235545207-Step-by-step-guide-to-deploy-Nextcloud-on-DreamCompute
 2020-11-03 22:00:16 +00:00
g0tmi1kandGitHub 2c64f30675 Merge pull request #513 from vulf/vulf/add_webshells_list 
Added a list of popular web shells

The list includes the filenames of webshells in https://github.com/xl7dev/WebShell , https://github.com/TheBinitGhimire/Web-Shells and FuzzDB.
 2020-11-03 14:11:05 +00:00
g0tmi1kandGitHub d21b80c755 Merge pull request #535 from Floppynator/patch-1 
Update email-top-100-domains.txt
 2020-11-03 12:16:28 +00:00
g0tmi1kandGitHub 31d0f3f90b Merge pull request #534 from shelld3v/patch-5 
Added Donald Trump leaked passwords (2016 + 2020)
 2020-11-03 12:12:44 +00:00
g0tmi1kandGitHub c0b6a73bb9 Merge pull request #533 from g0tmi1k/misc 
2020.4 Release
 2020-11-03 11:54:26 +00:00
g0tmi1kandGitHub 6d164b9672 Merge pull request #527 from soufianetahiri/master 
Added actuator default paths and created new XSS fuzzing list

Source: https://docs.spring.io/spring-boot/docs/1.5.x/reference/html/production-ready-endpoints.html
 2020-11-03 11:39:11 +00:00
g0tmi1kandGitHub 449d7a84cd Merge pull request #528 from drwetter/patch-4 
Add CMS login

https://processwire.com/docs/security/admin/
 2020-11-02 21:12:18 +00:00
g0tmi1kandGitHub cea2a72bae Merge pull request #506 from LabanSkollerDefensify/patch-1 
Add NDES and SCEP URLs

/certsrv/mscep/mscep.dll: https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
/certsrv/mscep_admin: https://social.technet.microsoft.com/wiki/contents/articles/9063.active-directory-certificate-services-ad-cs-network-device-enrollment-service-ndes.aspx
 2020-11-02 21:11:53 +00:00
g0tmi1kandGitHub a6c94e1798 Merge pull request #526 from m4p0/master 
Added default usernames for SAP
 2020-11-02 21:00:11 +00:00
g0tmi1kandGitHub d2fdef60e8 Merge pull request #525 from n3k00n3/master 
Adding passwords found on public leak from Nord.
 2020-11-02 20:59:44 +00:00
g0tmi1kandGitHub 953255cc39 Merge pull request #523 from MusicGivesMeLife/master 
BiblePass Project
 2020-11-02 20:58:57 +00:00
g0tmi1kandGitHub fe2aa9e7b0 Merge pull request #521 from realArcherL/master 
Slight correction with version numbers from earlier PR also added new endpoints
 2020-11-02 20:57:49 +00:00
g0tmi1kandGitHub 2ce45ec6b8 Merge pull request #512 from aayushsonu/master 
Update names.txt
 2020-11-02 19:07:19 +00:00
g0tmi1kandGitHub c2e6ced5fa Merge pull request #505 from device33/patch-1 
Update apache.txt

source: https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4/html/development_guide/sect-apache_mod_cluster-manager_application
 2020-11-02 19:06:07 +00:00
g0tmi1kandGitHub d5271820d0 Merge pull request #503 from Paradoxis/master 
Removed destructive SQL statements
 2020-09-17 14:16:24 +01:00
g0tmi1kandGitHub ca6bf04c05 Merge pull request #465 from dee-see/patch-1 
Add new Swagger UI path
 2020-09-16 07:30:38 +01:00
g0tmi1kandGitHub e4e65c3510 Merge pull request #478 from LethargicLeprechaun/master 
10-million-password-list-top-1000000.txt Corrections
 2020-09-16 07:30:17 +01:00
g0tmi1kandGitHub f1f3750803 Merge pull request #480 from haxxinen/patch-1 
Create quick-SQLi.txt
 2020-09-16 07:29:18 +01:00
g0tmi1kandGitHub 3e29513e3b Merge pull request #484 from realArcherL/patch-1 
Updated with more keywords and version numbers

- Source: https://youtu.be/NPDp7GHmMa0
 2020-09-16 07:28:58 +01:00
g0tmi1kandGitHub 924c558fd8 Merge pull request #485 from drwetter/patch-4 
Create german_misc.txt
 2020-09-16 07:28:31 +01:00
g0tmi1kandGitHub fbe21a0c99 Merge pull request #492 from drwetter/fix_germanpw.txt 
Fix and extend German word list

Source: https://gist.github.com/MarvinJWendt/2f4f4154b8ae218600eb091a5706b5f4
 2020-09-16 07:27:37 +01:00
g0tmi1kandGitHub c5ba0f44e4 Merge pull request #493 from daehee/master 
XSS payloads from OFJAAAH

Source: https://ghostbin.co/paste/qo23j
 2020-09-16 07:27:07 +01:00
g0tmi1kandGitHub a274ffba57 Merge pull request #495 from shelld3v/patch-1 
Add more API endpoints
 2020-09-16 07:25:58 +01:00
g0tmi1kandGitHub a3924f7a71 Merge pull request #498 from shelld3v/patch-4 
Add some endpoints
 2020-09-16 07:24:41 +01:00
g0tmi1kandGitHub 0c40a01395 Merge pull request #500 from 0x00gum/patch-2 
Some New DB Extensions
 2020-09-16 07:24:13 +01:00
g0tmi1kandGitHub 0b7d119f74 Merge pull request #501 from righettod/master 
Add payloads to identify the template engine used

- https://portswigger.net/research/server-side-template-injection
- https://github.com/epinna/tplmap
 2020-09-16 07:23:39 +01:00
g0tmi1kandGitHub 411cae8e5b Merge pull request #502 from danrneal/patch-1 
Add string js or injection
 2020-09-16 07:22:43 +01:00
g0tmi1kandGitHub e3d31edd19 Merge pull request #466 from bugbounty69/master 
Added all HTML Attributes list

Source: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
 2020-07-22 16:25:47 +01:00
g0tmi1kandGitHub dea731202f Merge pull request #471 from maxkleinke/master 
renamed files in Passwords/Default-Credentials for better parsing
 2020-07-22 16:25:27 +01:00
g0tmi1kandGitHub a93ecd7f91 Merge pull request #472 from righettod/master 
Add characters that can break a MongoDB query when JS expression is used

Source: https://github.com/Charlie-belmer/vulnerable-node-app/blob/master/app/routes/user.route.js#L8
 2020-07-22 16:25:07 +01:00
g0tmi1kandGitHub 31ee70aeef Merge pull request #473 from mrajput7/master 
Update golang.txt

Source: https://www.dropbox.com/s/ir2b56j3zt7vz0a/golang_handlefunc_combined?dl=0
 2020-07-22 16:24:33 +01:00
g0tmi1kandGitHub a3b77e1170 Merge pull request #475 from joegoerlich/patch-1 
Update sap.txt
 2020-07-22 16:24:13 +01:00
g0tmi1kandGitHub 3a9cac0384 Merge pull request #474 from chudyPB/master 
Update sap.txt
 2020-07-22 16:24:02 +01:00
g0tmi1kandGitHub 5fc3e6a208 Merge pull request #476 from toxydose/patch-1 
Add some common ports
 2020-07-22 16:23:04 +01:00
g0tmi1kandGitHub a6e3f77e4d Merge pull request #477 from g0tmi1k/misc 
Few fixes
 2020-07-22 16:22:48 +01:00
g0tmi1kandGitHub b883fc123a Merge pull request #467 from GovindPalakkal/patch-2 
Update swagger.txt
 2020-07-17 22:05:28 +01:00
g0tmi1kandGitHub 62786ce702 Update CONTRIBUTORS.md 2020-07-17 22:01:21 +01:00
g0tmi1kandGitHub ad309eabee Merge pull request #468 from govolution/patch-6 
Update telnet-betterdefaultpasslist.txt

Source: https://www.zdnet.com/article/backdoor-accounts-discovered-in-29-ftth-devices-from-chinese-vendor-c-data/
 2020-07-17 21:56:37 +01:00
g0tmi1kandGitHub dd5960e18e Merge pull request #459 from clem9669/patch-3 
Minor change
 2020-06-18 15:34:59 +01:00
g0tmi1kandGitHub 456a3b0fe8 Merge pull request #460 from clem9669/patch-4 
PR about the issue: #438
 2020-06-18 15:20:05 +01:00
g0tmi1kandGitHub 227e072758 Merge pull request #458 from PinkDraconian/patch-2 
Added scientific notation entries
 2020-06-16 13:18:56 +01:00
g0tmi1kandGitHub 4626422418 Merge pull request #457 from PinkDraconian/patch-1 
Added true and false to the fuzzing list
 2020-06-16 11:24:19 +01:00
g0tmi1kandGitHub 958dd563e0 Merge pull request #455 from Techbrunch/patch-1 
Update swagger.txt
 2020-06-12 11:21:37 +01:00
g0tmi1kandGitHub d76b8f6691 Merge pull request #452 from noraj/patch-1 
Create LFI-gracefulsecurity-windows.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/
 2020-06-12 09:57:44 +01:00
g0tmi1kandGitHub b2865e0492 Merge pull request #453 from noraj/patch-2 
Create LFI-gracefulsecurity-linux.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-linux/
 2020-06-12 09:57:09 +01:00
g0tmi1kandGitHub 5ecb8e85b2 Merge pull request #454 from sheimo/patch-1 
Create sqli.auth.bypass.txt

Source: https://pentestlab.blog/2012/12/24/sql-injection-authentication-bypass-cheat-sheet/
Source: http://www.lifeoverpentest.com/2018/03/sql-injection-login-bypass-cheat-sheet.html
 2020-06-12 09:56:17 +01:00
g0tmi1kandGitHub 1a9c3d47ed Merge pull request #446 from its0x08/patch-1 
TYPO fixed: some lines start with space.
 2020-06-09 17:09:55 +01:00
g0tmi1kandGitHub 6dff88b8b0 Merge pull request #447 from its0x08/patch-2 
TYPO fixed: some lines start with space.
 2020-06-09 17:09:20 +01:00
g0tmi1kandGitHub 534e8cd726 Merge pull request #451 from lc/patch-1 
Update CONTRIBUTORS.md
 2020-06-09 17:08:57 +01:00
g0tmi1kandGitHub 0a39d3dcb4 Merge pull request #417 from muhammedck113/patch-1 
Update 10-million-password-list-top-100.txt
 2020-06-05 16:30:30 +01:00
g0tmi1kandGitHub 6beba93eac Merge pull request #427 from Failsafe-0verflowme/patch-1 
Update common.txt
 2020-06-05 16:30:13 +01:00
g0tmi1kandGitHub 9aa4f93db1 Merge pull request #433 from MomIsBestFriend/Fix-425 
Fixed typo in Discovery/Variables/secret-keywords.txt
 2020-06-05 16:29:54 +01:00
g0tmi1kandGitHub 245984882a Merge pull request #442 from kazkansouh/standardise-line-end 
Standardise line endings
 2020-05-28 11:11:35 +01:00
g0tmi1kandGitHub 8d9520e039 Merge pull request #443 from IAmATeaPot418/patch-2 
Adding the not in operator
 2020-05-28 11:10:08 +01:00
g0tmi1kandGitHub 9a14bdb7ca Merge pull request #441 from cactuschibre/master 
Reorder and add more Actuator endpoints

Source; https://apereo.github.io/cas/development/monitoring/Monitoring-Statistics.html
 2020-05-27 10:42:10 +01:00
g0tmi1kandGitHub 67bdc2032e Merge pull request #434 from Kegn/patch-1 
add nested traversal strings for /etc/passwd
 2020-05-27 09:55:47 +01:00
g0tmi1kandGitHub 67947cfae1 Merge pull request #435 from righettod/master 
Add WWW and HTML folders
 2020-05-27 09:54:21 +01:00
g0tmi1kandGitHub fdfd855ec5 Merge pull request #437 from guest20/patch-1 
Rename Public-Source-Repo-Issues.txt to Public-Source-Repo-Issues.json
 2020-05-27 09:44:27 +01:00
g0tmi1kandGitHub a8df2a72c2 Merge pull request #431 from pbafe/master 
Create Django.txt
 2020-05-13 14:27:21 +01:00
g0tmi1kandGitHub 86c6e6314f Merge pull request #430 from cnotin/patch-1 
Add .well-known entries

Source: 
- https://gist.github.com/quickbreach/3bddfdf193b3d988b0e07d07dbac0da0
- https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
- https://mercure.rocks/spec#discovery
 2020-05-08 12:07:45 +01:00
g0tmi1kandGitHub 47e882f5d9 Merge pull request #405 from soufianetahiri/patch-1 
add swagger path
 2020-05-08 12:06:57 +01:00
g0tmi1kandGitHub 442e31098e Merge pull request #428 from g0tmi1k/misc 
Add top domains + 2020.2 release
 2020-05-04 10:23:05 +01:00
g0tmi1kandGitHub 15b1fa3a65 Merge pull request #426 from righettod/master 
Add the expression for the "doT.js" and the "dust.js" template engines

Source:

- https://github.com/epinna/tplmap/tree/master/plugins/engines
- https://olado.github.io/doT/index.html
- http://www.dustjs.com/
 2020-05-04 10:07:21 +01:00
g0tmi1kandGitHub 09d5a27cf7 Merge pull request #421 from storenth/master 
Update the fuzz-Bo0oM.txt with more ';'

Source: https://twitter.com/11xuxx/status/1247496768054591489
 2020-04-29 17:52:49 +01:00
g0tmi1kandGitHub b0186b7875 Merge pull request #424 from Kadeeli/master 
Close #423 (added dutch passwordlist)

Source: 
- https://www.dropbox.com/s/rbgmmtsqupawtfc/Dutch_passwordlist.txt?dl=0
- https://www.dropbox.com/s/z3d0di7to1yv3cc/Dutch_wordlist.txt?dl=0
 2020-04-29 17:51:33 +01:00
g0tmi1kandGitHub 9e694f6ad8 Merge pull request #422 from Emoe/master 
Added default Directory-Wordlist from Dirbuster

Source: https://sourceforge.net/projects/dirbuster/files/DirBuster%20Lists/Current/
 2020-04-28 16:20:45 +01:00
g0tmi1kandGitHub 91fc2a786a Merge pull request #420 from haxxinen/patch-1 
Create http-request-headers-fields-large.txt
 2020-04-27 13:11:51 +01:00
g0tmi1kandGitHub db59165670 Merge pull request #416 from righettod/master 
Add a version of the payload for CodeContext

Source: https://portswigger.net/web-security/server-side-template-injection
 2020-04-27 11:16:24 +01:00
g0tmi1kandGitHub 82863eca3c Merge pull request #418 from alisabzeghabaei/master 
some new php backdoor names.

Source: https://github.com/JohnTroony/php-webshells
 2020-04-27 11:14:45 +01:00
g0tmi1kandGitHub 9c54082eb2 Merge pull request #414 from CoccodrillooXDS/patch-1 
Update names.txt
 2020-04-20 11:28:37 +01:00
g0tmi1kandGitHub a7dbde1ec9 Merge pull request #412 from righettod/master 
Collection of template engines expression

Source: https://github.com/expressjs/express/wiki#template-engines
 2020-04-20 10:06:06 +01:00
g0tmi1kandGitHub b3b337e6f1 Merge pull request #390 from ipentest/add-ipentest 
Added top 100 email domains to Seclists/Fuzzing

Source: https://email-verify.my-addr.com/list-of-most-popular-email-domains.php
 2020-04-20 10:04:42 +01:00
g0tmi1kandGitHub fa5ef9b567 Merge pull request #411 from pbafe/master 
Create Drupal.txt
 2020-04-16 20:14:16 +01:00
g0tmi1kandGitHub aaee91b0c2 Merge pull request #410 from caioluders/master 
Create schemes.txt

Source: https://www.iana.org/assignments/uri-schemes/uri-schemes.txt
 2020-04-16 15:18:15 +01:00
g0tmi1kandGitHub bea2aa14ff Merge pull request #409 from aguilbau/aguilbau/windows-lfi 
add a common windows lfi path
 2020-04-15 11:53:49 +01:00
g0tmi1kandGitHub b1f5e2171d Merge pull request #406 from mswell/fix_syntax 
renamed to correct name
 2020-04-07 13:05:12 +01:00
g0tmi1kandGitHub 12d84b3b65 Merge pull request #403 from milangfx/apidocs 
Add /apidocs/api-docs.json, /api-docs
 2020-04-06 11:35:28 +01:00
g0tmi1kandGitHub 1d52264b8a Merge pull request #404 from Tibo-le-canard/patch-2 
Adding actuator endpoints

Source: https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-features.html
 2020-04-06 11:34:53 +01:00
g0tmi1kandGitHub 5acb04abca Merge pull request #402 from socketz/patch-1 
Added wp-content/debug.log
 2020-03-30 16:30:18 +01:00
g0tmi1kandGitHub 99cf9a39b9 Merge pull request #400 from g0tmi1k/misc 
Add CFM Shell
 2020-03-25 13:25:56 +00:00
g0tmi1kandGitHub 7a17dfcdca Merge pull request #399 from noraj/fix-arch 
fix architecture
 2020-03-17 13:36:27 +00:00
g0tmi1kandGitHub 5517d9fdec Merge pull request #395 from jaweesh/master 
added Umbraco cms identification from their official files

Source; http://umbracoreleases.blob.core.windows.net/download/UmbracoCms.8.5.4.zip
 2020-03-02 11:07:44 +00:00
g0tmi1kandGitHub ef320ecb7e Merge pull request #394 from reydc/master 
Update graphql.txt

Source: 
- https://blog.doyensec.com/2018/05/17/graphql-security-overview.html
- https://medium.com/@localh0t/discovering-graphql-endpoints-and-sqli-vulnerabilities-5d39f26cea2e
 2020-02-23 12:16:19 -08:00
g0tmi1kandGitHub af0d03fd59 Merge pull request #391 from kazkansouh/cirt-refresh 
CIRT Credentials: refreshed and fixed couple issues
 2020-02-15 10:01:00 +00:00
g0tmi1kandGitHub 709d6ebeb5 Merge pull request #388 from Lavaei/master 
Add innerHTML as dangerous input in Angular 2+
 2020-02-13 14:47:41 +00:00
g0tmi1kandGitHub 916d54df11 Merge pull request #385 from righettod/master 
Detect reverse proxy inconsistencies

Source: https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/
 2020-01-22 10:33:44 +00:00
g0tmi1kandGitHub e0ca853d5e Update CONTRIBUTORS.md 2020-01-16 09:50:04 +00:00
g0tmi1kandGitHub 31462bdee3 Merge pull request #382 from righettod/master 
Add entries from a blog about content discovery in API

Source: https://blog.jonlu.ca/posts/experiments-and-growth-hacking
 2020-01-03 15:26:16 +00:00
g0tmi1kandGitHub 7f7101d662 Merge pull request #380 from righettod/master 
Add an entry from the Portswigger WebAcademy about access control

Source: https://portswigger.net/web-security/access-control/lab-unprotected-admin-functionality
 2020-01-01 14:25:25 +00:00
g0tmi1kandGitHub bf961f205a Merge pull request #379 from g0tmi1k/misc 
Misc
 2019-12-02 22:02:42 +00:00
g0tmi1kandGitHub 376a5de32a Merge pull request #378 from dejanzelic/master 
Added wordpress plugin shell by leonjza

Source: https://github.com/leonjza/wordpress-shell/blob/master/shell.php
 2019-12-02 21:52:51 +00:00