idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
721 Commits 1 Branch 0 Tags
6a8724a628d345ff9f9cbd8a6411e67e27dc5cdf
Commit Graph
29 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexander BridgesandGitHub c5c705134f Sitecore CMS endpoints 
#### Sources:

Sitecore CMS:  https://www.sitecore.com/

Sensitive endpoints: https://doc.sitecore.com/developers/90/platform-administration-and-architecture/en/deny-anonymous-users-access-to-a-folder.html

Sitecore docs:  
https://doc.sitecore.com/legacy-docs/SC72/sitecore-web-service-sc65-a4.pdf
https://doc.sitecore.com/SdnArchive/upload/sitecore7/75/sitecore_security_hardening_guide-sc75-usletter.pdf
 2019-07-05 19:14:54 +03:00
Alexander BridgesandGitHub eae5072a6e add bower.json dependencies file 
Contains sensitive info
https://zellwk.com/blog/bower/
 2019-07-05 18:53:08 +03:00
Alexander BridgesandGitHub ee0e0b01a5 few login endpoints 2019-07-05 18:50:29 +03:00
toxydose 3251b35d54 update login endpoints 2019-04-10 15:54:03 +03:00
toxydose 6aa736a75a ShoreTel Connect login page GHDB-ID:5172 2019-04-10 15:47:27 +03:00
toxydose 94cc83dbda add endpoints without trailing slashes 2019-04-10 15:42:15 +03:00
Alexander BridgesandGitHub 1883989647 Merge pull request #5 from danielmiessler/master 
update
 2019-04-10 15:38:55 +03:00
toxydose 5e043e22ba merged FatwireCMS.fuzz.txt fatwire.txt 2018-12-11 04:32:05 +02:00
toxydose 24c955345f contains the same, and less than FatwireCMS.fuzz.txt 2018-12-11 04:12:44 +02:00
toxydose 0c44cbdba4 Merge branch 'master' of https://github.com/toxydose/SecLists 2018-12-11 04:02:19 +02:00
toxydose 4bda908742 merged two domino endpoints files 2018-12-11 04:01:38 +02:00
Alexander BridgesandGitHub cab73e955e Merge pull request #4 from danielmiessler/master 
upd
 2018-12-11 02:28:53 +02:00
toxydose 82671ffafc add login.html endpoint 2018-12-11 02:27:08 +02:00
toxydose dd08d4aacb merged two IIS wordlists, deleted file. 2018-12-08 17:22:44 +02:00
toxydose c638cb3055 File containing the same strings that are included to jboss.txt 2018-12-08 17:05:37 +02:00
toxydose 6aedd5e95d deleted duplicate file vignette.txt that duplicates Vignette.fuzz.txt but do not contains slashes 2018-12-08 17:01:56 +02:00
toxydose 1182e89d55 delete file containing duplicate entries from netware.txt 2018-12-08 16:58:00 +02:00
toxydose ea352ed2ce - sorted alphabetically 
- removed duplicates
- merged unique with "ColdFusion.fuzz2.txt"
- deleted "ColdFusion.fuzz2.txt"
 2018-12-07 16:22:34 +02:00
toxydose 412153b437 add Atlassian Confluence login endpoints 
Reference: https://confluence.atlassian.com/doc/customizing-the-login-page-163938553.html
 2018-12-06 00:56:47 +02:00
Alexander BridgesandGitHub e98bb5fd92 Merge pull request #3 from danielmiessler/master 
upd
 2018-12-06 00:54:10 +02:00
toxydose 277b243d61 add slashes. Some servers are redirecting from folders without slashes to folders with slashes in the end of URI, and 302 is returned instead of 200 2018-12-02 02:39:55 +02:00
toxydose aac5204f75 add clientaccesspolicy.xml and crossdomain.xml files which are usually contains unsafe wildcarded configurations. 2018-12-02 02:23:41 +02:00
Alexander BridgesandGitHub 86b091eab3 Merge pull request #2 from danielmiessler/master 
upd
 2018-12-02 01:57:09 +02:00
Alexander BridgesandGitHub a53dae2a76 Add /wp-json/wp/v2/users 
Add /wp-json/wp/v2/users WP REST API endpoint which exposes sensitive information - list of all WP users, which could be used for brute-force attacks.
 2018-10-31 23:27:00 +02:00
Alexander BridgesandGitHub dbfa5e2b1e Add some WP rest API endpoints 
reference: http://v2.wp-api.org/
 2018-10-31 23:19:31 +02:00
Alexander BridgesandGitHub 85cc7eeadf Added cpanel login page 
reference: https://www.webhostinghub.com/help/learn/cpanel/getting-started/how-to-login-to-cpanel
 2018-10-30 01:00:31 +02:00
Alexander BridgesandGitHub b4940b0a08 Merge pull request #1 from danielmiessler/master 
update
 2018-10-26 11:51:35 +03:00
Alexander BridgesandGitHub 2ced567e86 Add Wordpress and Shopware login pages 
Added common Wordpress and Shopware CMS's login forms.

References:
https://premium.wpmudev.org/blog/find-wordpress-login/
https://github.com/toxydose/SecLists/blob/master/Discovery/Web-Content/CMS/wordpress.fuzz.txt
https://github.com/toxydose/SecLists/blob/master/Discovery/Web-Content/CMS/shopware.txt
 2018-10-23 13:46:26 +03:00
Alexander BridgesandGitHub 5a88be0c4f Add Shopware common sensitive files wordlist. 
Shopware is open source e-commerce software 
https://github.com/shopware/shopware 
Shopware wordlist was not presented in this directory. The file should be improved and expanded
 2018-10-17 17:19:53 +03:00