Commit Graph
9 Commits
Author SHA1 Message Date
Dirk WetterandGitHub f7577f68cb Add CMS login
Processwire is a CMS which I recently encountered during a pentest. /processwire is the login (compare /typo3 or /wp-login.php)
2020-10-23 13:14:04 +02:00
Dirk Wetter 4c954f2226 Fix and extend German word list
This is a complete replacement of lang-german.txt. As mentioned before
the list was in wrong format (7 Bit) and couldn't reflect the German
Umlaute (see e.g. #485, #440, #439) at all.

The best I found so far and could serve as a starting point was
a gist from @MarvinJWendt, see

https://gist.github.com/MarvinJWendt/2f4f4154b8ae218600eb091a5706b5f4

Instead of ~8MB it's even bigger (~29MB).

Cheers, Dirk
2020-08-25 11:14:17 +02:00
Dirk WetterandGitHub 0ccff1e425 Create german_misc.txt
Hi there,

this is a list of modern German words. Source is myself :-) and merged are some new words from the semi-official language bible (Duden, new edition 2020). Idea was from a pentest where too simple words from the current world just were allowed.

Actually I wanted to add this to ``Miscellaneous/lang-german.txt`` but this file is somewhat broken, and I didn't want to add it to a broken file (I read this before here but as a reminder Umlaute are missing (file is 7 bit US ASCII) and some words just don't make sense like Aangriff, AanschlusS, Bil (is Danish/Norwegian), Bikuspidat, Cgeknatter, Cfamilien,CharaktergroBe,... Probably like 30% of the content is useless. IMHO this file needs to be replaced.

Some of the words in this PR like **Schmähgedicht** appear also in ``Passwords/dutch_common_wordlist.txt`` which kind of surprised me. But I thought it would be important to add those words to a separate file bc users might not look there.

Cheers, Dirk
2020-08-21 12:01:37 +02:00
Dirk WetterandGitHub 3ce96b82d4 Update with entries from Wikipedia
...see https://en.wikipedia.org/wiki/List_of_/.well-known/_services_offered_by_webservers
2019-10-02 21:35:58 +02:00
Dirk WetterandGitHub 6499d79e54 Update CONTRIBUTORS.md 2019-09-30 17:03:26 +02:00
Dirk WetterandGitHub d7bf9b91bd Add some .well-known dir entries
*  Add 1x apple-app-site-association, as it also can appear in docroot: https://developer.apple.com/library/archive/documentation/General/Conceptual/AppSearch/UniversalLinks.html

  *  put .well-known in alphabetical order

  * Added more from IANA registry: https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml

There might be still more URI -- Apple didn't seem to have registered their URI either at IANA either (process see  https://tools.ietf.org/html/rfc5785#5.1).)
2019-09-30 15:47:38 +02:00
Dirk Wetter 9da980c4da Suggestion to avoid license files to be added per accident
Some license files carry the extension .txt which requires
a thorough look to distinguish them from payloads with the
same extension.
2019-03-19 10:20:36 +01:00
Dirk cea5abf93d Adding more springboot entrypoints 2019-03-17 11:47:50 +01:00
Dirk WetterandGitHub e8b1df5f84 Correct 1 typo in typo3 login
/typo3/in is IMHO not the login.
2018-10-23 13:50:09 +02:00