Commit Graph
9 Commits
Author SHA1 Message Date
toxydose 277b243d61 add slashes. Some servers are redirecting from folders without slashes to folders with slashes in the end of URI, and 302 is returned instead of 200 2018-12-02 02:39:55 +02:00
toxydose aac5204f75 add clientaccesspolicy.xml and crossdomain.xml files which are usually contains unsafe wildcarded configurations. 2018-12-02 02:23:41 +02:00
Alexander BridgesandGitHub 86b091eab3 Merge pull request #2 from danielmiessler/master
upd
2018-12-02 01:57:09 +02:00
Alexander BridgesandGitHub a53dae2a76 Add /wp-json/wp/v2/users
Add /wp-json/wp/v2/users WP REST API endpoint which exposes sensitive information - list of all WP users, which could be used for brute-force attacks.
2018-10-31 23:27:00 +02:00
Alexander BridgesandGitHub dbfa5e2b1e Add some WP rest API endpoints
reference: http://v2.wp-api.org/
2018-10-31 23:19:31 +02:00
Alexander BridgesandGitHub 85cc7eeadf Added cpanel login page
reference: https://www.webhostinghub.com/help/learn/cpanel/getting-started/how-to-login-to-cpanel
2018-10-30 01:00:31 +02:00
Alexander BridgesandGitHub b4940b0a08 Merge pull request #1 from danielmiessler/master
update
2018-10-26 11:51:35 +03:00
Alexander BridgesandGitHub 2ced567e86 Add Wordpress and Shopware login pages
Added common Wordpress and Shopware CMS's login forms.

References:
https://premium.wpmudev.org/blog/find-wordpress-login/
https://github.com/toxydose/SecLists/blob/master/Discovery/Web-Content/CMS/wordpress.fuzz.txt
https://github.com/toxydose/SecLists/blob/master/Discovery/Web-Content/CMS/shopware.txt
2018-10-23 13:46:26 +03:00
Alexander BridgesandGitHub 5a88be0c4f Add Shopware common sensitive files wordlist.
Shopware is open source e-commerce software 
https://github.com/shopware/shopware 
Shopware wordlist was not presented in this directory. The file should be improved and expanded
2018-10-17 17:19:53 +03:00