Alexander Bridges and GitHub
a628a652be
Add some common ports
...
https://www.sonicwall.com/support/knowledge-base/running-sslvpn-on-a-different-tcp-port/170503249443105/
https://www.router-switch.com/faq/difference-between-https-port-443-and-8443.html
https://www.speedguide.net/port.php?port=8008
2020-07-22 03:23:00 +03:00
Alexander Bridges and GitHub
4cdabd6555
add Dot CMS login endpoint
...
source: https://dotcms.com/docs/latest/logging-into-dotcms
2019-07-28 02:57:16 +03:00
Alexander Bridges and GitHub
b0a709be71
add weevely.php shell endpoint
2019-07-26 14:55:28 +03:00
Alexander Bridges and GitHub
09e93df441
add /phpmyadmin/ endpoints
2019-07-20 23:56:12 +03:00
Alexander Bridges and GitHub
c5c705134f
Sitecore CMS endpoints
...
#### Sources:
Sitecore CMS: https://www.sitecore.com/
Sensitive endpoints: https://doc.sitecore.com/developers/90/platform-administration-and-architecture/en/deny-anonymous-users-access-to-a-folder.html
Sitecore docs:
https://doc.sitecore.com/legacy-docs/SC72/sitecore-web-service-sc65-a4.pdf
https://doc.sitecore.com/SdnArchive/upload/sitecore7/75/sitecore_security_hardening_guide-sc75-usletter.pdf
2019-07-05 19:14:54 +03:00
Alexander Bridges and GitHub
eae5072a6e
add bower.json dependencies file
...
Contains sensitive info
https://zellwk.com/blog/bower/
2019-07-05 18:53:08 +03:00
Alexander Bridges and GitHub
ee0e0b01a5
few login endpoints
2019-07-05 18:50:29 +03:00
toxydose
3251b35d54
update login endpoints
2019-04-10 15:54:03 +03:00
toxydose
6aa736a75a
ShoreTel Connect login page GHDB-ID:5172
2019-04-10 15:47:27 +03:00
toxydose
94cc83dbda
add endpoints without trailing slashes
2019-04-10 15:42:15 +03:00
Alexander Bridges and GitHub
1883989647
Merge pull request #5 from danielmiessler/master
...
update
2019-04-10 15:38:55 +03:00
toxydose
5e043e22ba
merged FatwireCMS.fuzz.txt fatwire.txt
2018-12-11 04:32:05 +02:00
toxydose
24c955345f
contains the same, and less than FatwireCMS.fuzz.txt
2018-12-11 04:12:44 +02:00
toxydose
0c44cbdba4
Merge branch 'master' of https://github.com/toxydose/SecLists
2018-12-11 04:02:19 +02:00
toxydose
4bda908742
merged two domino endpoints files
2018-12-11 04:01:38 +02:00
Alexander Bridges and GitHub
cab73e955e
Merge pull request #4 from danielmiessler/master
...
upd
2018-12-11 02:28:53 +02:00
toxydose
82671ffafc
add login.html endpoint
2018-12-11 02:27:08 +02:00
toxydose
dd08d4aacb
merged two IIS wordlists, deleted file.
2018-12-08 17:22:44 +02:00
toxydose
c638cb3055
File containing the same strings that are included to jboss.txt
2018-12-08 17:05:37 +02:00
toxydose
6aedd5e95d
deleted duplicate file vignette.txt that duplicates Vignette.fuzz.txt but do not contains slashes
2018-12-08 17:01:56 +02:00
toxydose
1182e89d55
delete file containing duplicate entries from netware.txt
2018-12-08 16:58:00 +02:00
toxydose
ea352ed2ce
- sorted alphabetically
...
- removed duplicates
- merged unique with "ColdFusion.fuzz2.txt"
- deleted "ColdFusion.fuzz2.txt"
2018-12-07 16:22:34 +02:00
toxydose
412153b437
add Atlassian Confluence login endpoints
...
Reference: https://confluence.atlassian.com/doc/customizing-the-login-page-163938553.html
2018-12-06 00:56:47 +02:00
Alexander Bridges and GitHub
e98bb5fd92
Merge pull request #3 from danielmiessler/master
...
upd
2018-12-06 00:54:10 +02:00
toxydose
277b243d61
add slashes. Some servers are redirecting from folders without slashes to folders with slashes in the end of URI, and 302 is returned instead of 200
2018-12-02 02:39:55 +02:00
toxydose
aac5204f75
add clientaccesspolicy.xml and crossdomain.xml files which are usually contains unsafe wildcarded configurations.
2018-12-02 02:23:41 +02:00
Alexander Bridges and GitHub
86b091eab3
Merge pull request #2 from danielmiessler/master
...
upd
2018-12-02 01:57:09 +02:00
Alexander Bridges and GitHub
a53dae2a76
Add /wp-json/wp/v2/users
...
Add /wp-json/wp/v2/users WP REST API endpoint which exposes sensitive information - list of all WP users, which could be used for brute-force attacks.
2018-10-31 23:27:00 +02:00
Alexander Bridges and GitHub
dbfa5e2b1e
Add some WP rest API endpoints
...
reference: http://v2.wp-api.org/
2018-10-31 23:19:31 +02:00
Alexander Bridges and GitHub
85cc7eeadf
Added cpanel login page
...
reference: https://www.webhostinghub.com/help/learn/cpanel/getting-started/how-to-login-to-cpanel
2018-10-30 01:00:31 +02:00
Alexander Bridges and GitHub
b4940b0a08
Merge pull request #1 from danielmiessler/master
...
update
2018-10-26 11:51:35 +03:00
Alexander Bridges and GitHub
2ced567e86
Add Wordpress and Shopware login pages
...
Added common Wordpress and Shopware CMS's login forms.
References:
https://premium.wpmudev.org/blog/find-wordpress-login/
https://github.com/toxydose/SecLists/blob/master/Discovery/Web-Content/CMS/wordpress.fuzz.txt
https://github.com/toxydose/SecLists/blob/master/Discovery/Web-Content/CMS/shopware.txt
2018-10-23 13:46:26 +03:00
Alexander Bridges and GitHub
5a88be0c4f
Add Shopware common sensitive files wordlist.
...
Shopware is open source e-commerce software
https://github.com/shopware/shopware
Shopware wordlist was not presented in this directory. The file should be improved and expanded
2018-10-17 17:19:53 +03:00
Alexander BridgesandGitHub