idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
970 Commits 1 Branch 0 Tags
a274ffba577a006213fb2fc80c2325560761a004
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
g0tmi1kandGitHub a274ffba57 Merge pull request #495 from shelld3v/patch-1 
Add more API endpoints
 2020-09-16 07:25:58 +01:00
g0tmi1kandGitHub a3924f7a71 Merge pull request #498 from shelld3v/patch-4 
Add some endpoints
 2020-09-16 07:24:41 +01:00
g0tmi1kandGitHub 0c40a01395 Merge pull request #500 from 0x00gum/patch-2 
Some New DB Extensions
 2020-09-16 07:24:13 +01:00
g0tmi1kandGitHub 0b7d119f74 Merge pull request #501 from righettod/master 
Add payloads to identify the template engine used

- https://portswigger.net/research/server-side-template-injection
- https://github.com/epinna/tplmap
 2020-09-16 07:23:39 +01:00
g0tmi1kandGitHub 411cae8e5b Merge pull request #502 from danrneal/patch-1 
Add string js or injection
 2020-09-16 07:22:43 +01:00
g0tmi1kandGitHub e3d31edd19 Merge pull request #466 from bugbounty69/master 
Added all HTML Attributes list

Source: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
 2020-07-22 16:25:47 +01:00
g0tmi1kandGitHub dea731202f Merge pull request #471 from maxkleinke/master 
renamed files in Passwords/Default-Credentials for better parsing
 2020-07-22 16:25:27 +01:00
g0tmi1kandGitHub a93ecd7f91 Merge pull request #472 from righettod/master 
Add characters that can break a MongoDB query when JS expression is used

Source: https://github.com/Charlie-belmer/vulnerable-node-app/blob/master/app/routes/user.route.js#L8
 2020-07-22 16:25:07 +01:00
g0tmi1kandGitHub 31ee70aeef Merge pull request #473 from mrajput7/master 
Update golang.txt

Source: https://www.dropbox.com/s/ir2b56j3zt7vz0a/golang_handlefunc_combined?dl=0
 2020-07-22 16:24:33 +01:00
g0tmi1kandGitHub a3b77e1170 Merge pull request #475 from joegoerlich/patch-1 
Update sap.txt
 2020-07-22 16:24:13 +01:00
g0tmi1kandGitHub 3a9cac0384 Merge pull request #474 from chudyPB/master 
Update sap.txt
 2020-07-22 16:24:02 +01:00
g0tmi1kandGitHub 5fc3e6a208 Merge pull request #476 from toxydose/patch-1 
Add some common ports
 2020-07-22 16:23:04 +01:00
g0tmi1kandGitHub a6e3f77e4d Merge pull request #477 from g0tmi1k/misc 
Few fixes
 2020-07-22 16:22:48 +01:00
g0tmi1kandGitHub b883fc123a Merge pull request #467 from GovindPalakkal/patch-2 
Update swagger.txt
 2020-07-17 22:05:28 +01:00
g0tmi1kandGitHub 62786ce702 Update CONTRIBUTORS.md 2020-07-17 22:01:21 +01:00
g0tmi1kandGitHub ad309eabee Merge pull request #468 from govolution/patch-6 
Update telnet-betterdefaultpasslist.txt

Source: https://www.zdnet.com/article/backdoor-accounts-discovered-in-29-ftth-devices-from-chinese-vendor-c-data/
 2020-07-17 21:56:37 +01:00
g0tmi1kandGitHub dd5960e18e Merge pull request #459 from clem9669/patch-3 
Minor change
 2020-06-18 15:34:59 +01:00
g0tmi1kandGitHub 456a3b0fe8 Merge pull request #460 from clem9669/patch-4 
PR about the issue: #438
 2020-06-18 15:20:05 +01:00
g0tmi1kandGitHub 227e072758 Merge pull request #458 from PinkDraconian/patch-2 
Added scientific notation entries
 2020-06-16 13:18:56 +01:00
g0tmi1kandGitHub 4626422418 Merge pull request #457 from PinkDraconian/patch-1 
Added true and false to the fuzzing list
 2020-06-16 11:24:19 +01:00
g0tmi1kandGitHub 958dd563e0 Merge pull request #455 from Techbrunch/patch-1 
Update swagger.txt
 2020-06-12 11:21:37 +01:00
g0tmi1kandGitHub d76b8f6691 Merge pull request #452 from noraj/patch-1 
Create LFI-gracefulsecurity-windows.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/
 2020-06-12 09:57:44 +01:00
g0tmi1kandGitHub b2865e0492 Merge pull request #453 from noraj/patch-2 
Create LFI-gracefulsecurity-linux.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-linux/
 2020-06-12 09:57:09 +01:00
g0tmi1kandGitHub 5ecb8e85b2 Merge pull request #454 from sheimo/patch-1 
Create sqli.auth.bypass.txt

Source: https://pentestlab.blog/2012/12/24/sql-injection-authentication-bypass-cheat-sheet/
Source: http://www.lifeoverpentest.com/2018/03/sql-injection-login-bypass-cheat-sheet.html
 2020-06-12 09:56:17 +01:00
g0tmi1kandGitHub 1a9c3d47ed Merge pull request #446 from its0x08/patch-1 
TYPO fixed: some lines start with space.
 2020-06-09 17:09:55 +01:00
g0tmi1kandGitHub 6dff88b8b0 Merge pull request #447 from its0x08/patch-2 
TYPO fixed: some lines start with space.
 2020-06-09 17:09:20 +01:00
g0tmi1kandGitHub 534e8cd726 Merge pull request #451 from lc/patch-1 
Update CONTRIBUTORS.md
 2020-06-09 17:08:57 +01:00
g0tmi1kandGitHub 0a39d3dcb4 Merge pull request #417 from muhammedck113/patch-1 
Update 10-million-password-list-top-100.txt
 2020-06-05 16:30:30 +01:00
g0tmi1kandGitHub 6beba93eac Merge pull request #427 from Failsafe-0verflowme/patch-1 
Update common.txt
 2020-06-05 16:30:13 +01:00
g0tmi1kandGitHub 9aa4f93db1 Merge pull request #433 from MomIsBestFriend/Fix-425 
Fixed typo in Discovery/Variables/secret-keywords.txt
 2020-06-05 16:29:54 +01:00
g0tmi1kandGitHub 245984882a Merge pull request #442 from kazkansouh/standardise-line-end 
Standardise line endings
 2020-05-28 11:11:35 +01:00
g0tmi1kandGitHub 8d9520e039 Merge pull request #443 from IAmATeaPot418/patch-2 
Adding the not in operator
 2020-05-28 11:10:08 +01:00
g0tmi1kandGitHub 9a14bdb7ca Merge pull request #441 from cactuschibre/master 
Reorder and add more Actuator endpoints

Source; https://apereo.github.io/cas/development/monitoring/Monitoring-Statistics.html
 2020-05-27 10:42:10 +01:00
g0tmi1kandGitHub 67bdc2032e Merge pull request #434 from Kegn/patch-1 
add nested traversal strings for /etc/passwd
 2020-05-27 09:55:47 +01:00
g0tmi1kandGitHub 67947cfae1 Merge pull request #435 from righettod/master 
Add WWW and HTML folders
 2020-05-27 09:54:21 +01:00
g0tmi1kandGitHub fdfd855ec5 Merge pull request #437 from guest20/patch-1 
Rename Public-Source-Repo-Issues.txt to Public-Source-Repo-Issues.json
 2020-05-27 09:44:27 +01:00
g0tmi1kandGitHub a8df2a72c2 Merge pull request #431 from pbafe/master 
Create Django.txt
 2020-05-13 14:27:21 +01:00
g0tmi1kandGitHub 86c6e6314f Merge pull request #430 from cnotin/patch-1 
Add .well-known entries

Source: 
- https://gist.github.com/quickbreach/3bddfdf193b3d988b0e07d07dbac0da0
- https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
- https://mercure.rocks/spec#discovery
 2020-05-08 12:07:45 +01:00
g0tmi1kandGitHub 47e882f5d9 Merge pull request #405 from soufianetahiri/patch-1 
add swagger path
 2020-05-08 12:06:57 +01:00
g0tmi1kandGitHub 442e31098e Merge pull request #428 from g0tmi1k/misc 
Add top domains + 2020.2 release
 2020-05-04 10:23:05 +01:00
g0tmi1kandGitHub 15b1fa3a65 Merge pull request #426 from righettod/master 
Add the expression for the "doT.js" and the "dust.js" template engines

Source:

- https://github.com/epinna/tplmap/tree/master/plugins/engines
- https://olado.github.io/doT/index.html
- http://www.dustjs.com/
 2020-05-04 10:07:21 +01:00
g0tmi1kandGitHub 09d5a27cf7 Merge pull request #421 from storenth/master 
Update the fuzz-Bo0oM.txt with more ';'

Source: https://twitter.com/11xuxx/status/1247496768054591489
 2020-04-29 17:52:49 +01:00
g0tmi1kandGitHub b0186b7875 Merge pull request #424 from Kadeeli/master 
Close #423 (added dutch passwordlist)

Source: 
- https://www.dropbox.com/s/rbgmmtsqupawtfc/Dutch_passwordlist.txt?dl=0
- https://www.dropbox.com/s/z3d0di7to1yv3cc/Dutch_wordlist.txt?dl=0
 2020-04-29 17:51:33 +01:00
g0tmi1kandGitHub 9e694f6ad8 Merge pull request #422 from Emoe/master 
Added default Directory-Wordlist from Dirbuster

Source: https://sourceforge.net/projects/dirbuster/files/DirBuster%20Lists/Current/
 2020-04-28 16:20:45 +01:00
g0tmi1kandGitHub 91fc2a786a Merge pull request #420 from haxxinen/patch-1 
Create http-request-headers-fields-large.txt
 2020-04-27 13:11:51 +01:00
g0tmi1kandGitHub db59165670 Merge pull request #416 from righettod/master 
Add a version of the payload for CodeContext

Source: https://portswigger.net/web-security/server-side-template-injection
 2020-04-27 11:16:24 +01:00
g0tmi1kandGitHub 82863eca3c Merge pull request #418 from alisabzeghabaei/master 
some new php backdoor names.

Source: https://github.com/JohnTroony/php-webshells
 2020-04-27 11:14:45 +01:00
g0tmi1kandGitHub 9c54082eb2 Merge pull request #414 from CoccodrillooXDS/patch-1 
Update names.txt
 2020-04-20 11:28:37 +01:00
g0tmi1kandGitHub a7dbde1ec9 Merge pull request #412 from righettod/master 
Collection of template engines expression

Source: https://github.com/expressjs/express/wiki#template-engines
 2020-04-20 10:06:06 +01:00
g0tmi1kandGitHub b3b337e6f1 Merge pull request #390 from ipentest/add-ipentest 
Added top 100 email domains to Seclists/Fuzzing

Source: https://email-verify.my-addr.com/list-of-most-popular-email-domains.php
 2020-04-20 10:04:42 +01:00
g0tmi1kandGitHub fa5ef9b567 Merge pull request #411 from pbafe/master 
Create Drupal.txt
 2020-04-16 20:14:16 +01:00
g0tmi1kandGitHub aaee91b0c2 Merge pull request #410 from caioluders/master 
Create schemes.txt

Source: https://www.iana.org/assignments/uri-schemes/uri-schemes.txt
 2020-04-16 15:18:15 +01:00
g0tmi1kandGitHub bea2aa14ff Merge pull request #409 from aguilbau/aguilbau/windows-lfi 
add a common windows lfi path
 2020-04-15 11:53:49 +01:00
g0tmi1kandGitHub b1f5e2171d Merge pull request #406 from mswell/fix_syntax 
renamed to correct name
 2020-04-07 13:05:12 +01:00
g0tmi1kandGitHub 12d84b3b65 Merge pull request #403 from milangfx/apidocs 
Add /apidocs/api-docs.json, /api-docs
 2020-04-06 11:35:28 +01:00
g0tmi1kandGitHub 1d52264b8a Merge pull request #404 from Tibo-le-canard/patch-2 
Adding actuator endpoints

Source: https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-features.html
 2020-04-06 11:34:53 +01:00
g0tmi1kandGitHub 5acb04abca Merge pull request #402 from socketz/patch-1 
Added wp-content/debug.log
 2020-03-30 16:30:18 +01:00
g0tmi1kandGitHub 99cf9a39b9 Merge pull request #400 from g0tmi1k/misc 
Add CFM Shell
 2020-03-25 13:25:56 +00:00
g0tmi1kandGitHub 7a17dfcdca Merge pull request #399 from noraj/fix-arch 
fix architecture
 2020-03-17 13:36:27 +00:00
g0tmi1kandGitHub 5517d9fdec Merge pull request #395 from jaweesh/master 
added Umbraco cms identification from their official files

Source; http://umbracoreleases.blob.core.windows.net/download/UmbracoCms.8.5.4.zip
 2020-03-02 11:07:44 +00:00
g0tmi1kandGitHub ef320ecb7e Merge pull request #394 from reydc/master 
Update graphql.txt

Source: 
- https://blog.doyensec.com/2018/05/17/graphql-security-overview.html
- https://medium.com/@localh0t/discovering-graphql-endpoints-and-sqli-vulnerabilities-5d39f26cea2e
 2020-02-23 12:16:19 -08:00
g0tmi1kandGitHub af0d03fd59 Merge pull request #391 from kazkansouh/cirt-refresh 
CIRT Credentials: refreshed and fixed couple issues
 2020-02-15 10:01:00 +00:00
g0tmi1kandGitHub 709d6ebeb5 Merge pull request #388 from Lavaei/master 
Add innerHTML as dangerous input in Angular 2+
 2020-02-13 14:47:41 +00:00
g0tmi1kandGitHub 916d54df11 Merge pull request #385 from righettod/master 
Detect reverse proxy inconsistencies

Source: https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/
 2020-01-22 10:33:44 +00:00
g0tmi1kandGitHub e0ca853d5e Update CONTRIBUTORS.md 2020-01-16 09:50:04 +00:00
g0tmi1kandGitHub 31462bdee3 Merge pull request #382 from righettod/master 
Add entries from a blog about content discovery in API

Source: https://blog.jonlu.ca/posts/experiments-and-growth-hacking
 2020-01-03 15:26:16 +00:00
g0tmi1kandGitHub 7f7101d662 Merge pull request #380 from righettod/master 
Add an entry from the Portswigger WebAcademy about access control

Source: https://portswigger.net/web-security/access-control/lab-unprotected-admin-functionality
 2020-01-01 14:25:25 +00:00
g0tmi1kandGitHub bf961f205a Merge pull request #379 from g0tmi1k/misc 
Misc
 2019-12-02 22:02:42 +00:00
g0tmi1kandGitHub 376a5de32a Merge pull request #378 from dejanzelic/master 
Added wordpress plugin shell by leonjza

Source: https://github.com/leonjza/wordpress-shell/blob/master/shell.php
 2019-12-02 21:52:51 +00:00
g0tmi1kandGitHub 152c4a2a91 Merge pull request #374 from s7x/master 
Added the entire XSS Cheat Sheet of PortSwigger, their HTML events and tags. Added keyhacks by streaak.

Keyhacks:
https://github.com/streaak/keyhacks

Portswigger XSS Cheat Sheet:
https://portswigger.net/web-security/cross-site-scripting/cheat-sheet
 2019-11-25 09:20:00 +00:00
g0tmi1kandGitHub d455890b37 Merge pull request #373 from xrobhal/patch-1 
Create CommonAdminBase64.txt

Source: https://github.com/danielmiessler/SecLists/blob/master/Usernames/top-usernames-shortlist.txt
 2019-11-13 11:52:38 +00:00
g0tmi1kandGitHub 54ff1ef18a Merge pull request #372 from camas/fixlines 
Remove extra newline
 2019-11-10 21:49:55 +00:00
g0tmi1kandGitHub 2e4fc74c39 Merge pull request #371 from camas/fixlines 
Fix line endings
 2019-11-08 19:38:20 +00:00
g0tmi1kandGitHub 0783efa7fd Merge pull request #370 from ricardojba/patch-1 
Hidden SNMP community in Cisco SG220 series

Source: https://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_default_snmp.pdf
 2019-11-08 14:40:19 +00:00
g0tmi1kandGitHub 6d1783b613 Merge pull request #369 from parthmalhotra/patch-1 
Create 1-4_all_letters_a-z.txt
 2019-11-08 07:09:02 +00:00
g0tmi1kandGitHub 461a11a7f2 Merge pull request #368 from bkimminich/master 
Add list of dangerous Angular/AngularJS functions

Source: https://angular.io/guide/security
 2019-11-07 22:44:24 +00:00
g0tmi1kandGitHub a627b78566 Update README.md 2019-11-03 11:04:57 +00:00
g0tmi1kandGitHub 5da5dacb23 Merge pull request #366 from davidegirardi/master 
Add CICS transaction list

Source: https://www.ibm.com/support/knowledgecenter/SSGMCP_5.4.0/reference/transactions/dfha726.html
 2019-11-03 11:03:51 +00:00
g0tmi1kandGitHub af721716c1 Merge pull request #365 from wasamasa/fix-jsp-web-shell 
Fix JSP webshell syntax errors
 2019-10-22 22:01:27 +01:00
g0tmi1kandGitHub 93e2c5b064 Merge pull request #364 from righettod/master 
Add local ports for local services discovery
 2019-10-21 16:53:24 +01:00
g0tmi1kandGitHub 6b405ea8d8 Merge pull request #363 from oh6hay/master 
51k random creds obtained by running Heralding for two weeks in Sep/2019
 2019-10-21 10:23:05 +01:00
g0tmi1kandGitHub 97ea172c1e Merge pull request #362 from tkisason/patch-3 
adds jolokia

Source: https://jolokia.org
 2019-10-13 22:19:08 +01:00
g0tmi1kandGitHub b8a8cc5a44 Merge pull request #361 from righettod/master 
Add dictionary for GraphQL

Source: https://graphql.org/
 2019-10-11 17:19:21 +01:00
g0tmi1kandGitHub 06d29fa2b0 Merge pull request #360 from righettod/master 
Add VIM and NANO backup file
 2019-10-11 15:59:03 +01:00
g0tmi1kandGitHub 6fae58fa9b Merge pull request #357 from govolution/patch-3 
Update ssh-betterdefaultpasslist.txt

https://github.com/SamuraiWTF/samuraiwtf
http://docs.graylog.org/en/2.4/pages/installation/virtual_machine_appliances.html
https://openvpn.net/vpn-server-resources/deploying-the-access-server-appliance-on-vmware-esxi/
https://www.circl.lu/services/misp-training-materials/
https://documentation.wazuh.com/3.10/installation-guide/virtual-machine.html
https://my.nps.edu/web/c3o/virtual-machine-images
https://virtualboxes.org/images/centos/
 2019-10-10 12:13:29 +01:00
g0tmi1kandGitHub 8e42ce0a0e Merge pull request #358 from govolution/patch-4 
Update windows-betterdefaultpasslist.txt

Source: https://github.com/PowerShellMafia/PowerSploit/blob/master/Privesc/PowerUp.ps1
 2019-10-10 12:13:11 +01:00
g0tmi1kandGitHub 2dcab37f3e Merge pull request #359 from govolution/patch-5 
Update mssql-betterdefaultpasslist.txt

Source: https://github.com/fgrehm/vagrant-mssql-express
 2019-10-10 12:12:42 +01:00
g0tmi1kandGitHub 7c4ef6f4dd Merge pull request #355 from XalfiE/master 
Addition of Oracle EBS default users, passwords and URLs

Source: https://the-infosec.com/2017/03/29/do-you-know-what-your-erp-is-telling-us/
 2019-10-07 11:28:32 +01:00
g0tmi1kandGitHub 6adcec0fda Merge pull request #354 from stuntguy3000/patch-1 
Fix Fuzzing Types (Fixes #339)
 2019-10-04 16:39:46 +01:00
g0tmi1kandGitHub 8ebc73f1c1 Merge pull request #353 from tkisason/patch-2 
adds mappings and restart
 2019-10-03 09:34:33 +01:00
g0tmi1kandGitHub 785983aa9c Merge pull request #352 from drwetter/patch-3 
Update with entries from Wikipedia

Source: https://en.wikipedia.org/wiki/List_of_/.well-known/_services_offered_by_webservers
 2019-10-02 20:37:23 +01:00
g0tmi1kandGitHub 5b82c421bc Merge pull request #351 from bl00dh0und/dutchwordlist 
Added dutchwordlist

Source:

- https://www.digitalpulse.pwc.com.au/infographic-password-security-psychology/
- https://www.vernoeming.nl/populair/meisjesnamen-2014
- https://www.vernoeming.nl/populair/jongensnamen-2014
- https://www.dierennamen.net/kattennamen-op-alfabetische-volgorde/
 2019-10-01 12:19:58 +01:00
g0tmi1kandGitHub 1e7aca5b3b Merge pull request #350 from drwetter/patch-2 
Update CONTRIBUTORS.md
 2019-09-30 16:09:03 +01:00
g0tmi1kandGitHub 5eaa8b2cec Merge pull request #349 from drwetter/patch-2 
Add some .well-known dir entries

https://developer.apple.com/library/archive/documentation/General/Conceptual/AppSearch/UniversalLinks.html

https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
 2019-09-30 15:53:06 +01:00
g0tmi1kandGitHub 519a72ae39 Merge pull request #342 from dotan3/master 
Add Laravel related urls to quickhits.txt

Source: https://laravel.com/docs/6.x
 2019-09-30 10:48:05 +01:00
g0tmi1kandGitHub 7148816422 Merge branch 'master' into master 2019-09-30 10:47:53 +01:00
g0tmi1kandGitHub 692e7c0038 Merge pull request #341 from NeuronAddict/html-colors 
Add html color

Source: https://www.w3schools.com/colors/colors_names.asp
 2019-09-30 10:46:16 +01:00
g0tmi1kandGitHub ed0e6e1e1e Merge pull request #343 from draguntsow/patch-1 
Create a wordlist of Modx Revolution CMS packages

Source: https://modx.com/
 2019-09-30 10:44:43 +01:00
g0tmi1kandGitHub 352782af09 Merge pull request #346 from ngkogkos/patch-1 
Update with missing common endpoints

Source: https://twitter.com/NahamSec/status/1177672652011343873
 2019-09-30 10:37:56 +01:00
g0tmi1kandGitHub a0f31b5a9d Merge pull request #337 from ericrange/patch-3 
New Default Password List

Source: http://phenoelit.org/dpl/dpl.html.

```
<username>:<password>
<username>: => no password
<>:<> => no user nor password at all
```
 2019-08-23 16:00:48 +01:00