idan/SecLists
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1,090 Commits 1 Branch 0 Tags
da6d55636235cda81af331ee097d8ee2232218b2
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
g0tmi1kandGitHub da6d556362 Merge pull request #579 from ernestask/wip/ernestask/london 
Discovery: Fix spelling and hyphenate some words
 2021-03-23 06:42:40 +00:00
g0tmi1kandGitHub 34898bf63e Merge pull request #578 from seran/master 
Vulnerable Vtiger plugin

https://github.com/seran/vtiger-vuln-extension
 2021-03-23 06:41:44 +00:00
g0tmi1kandGitHub eeea855ac5 Merge pull request #577 from righettod/master 
Add "contribute.json" file entry

https://infosec.mozilla.org/guidelines/web_security#contributejson
https://www.contributejson.org/
https://github.com/mozilla/contribute.json
 2021-03-01 12:43:28 +00:00
g0tmi1kandGitHub 3e7f7920c9 Merge pull request #572 from Zeecka/LFI_mssql_master.mdf 
Add master.mdf MSSQL path to Windows LFI

https://rastating.github.io/from-lfi-to-sql-database-backup/#locating-the-instance-on-disk
 2021-03-01 05:18:32 +00:00
g0tmi1kandGitHub 3f5531cde3 Merge pull request #573 from righettod/master 
Add specific "render" endpoints
 2021-03-01 05:18:13 +00:00
g0tmi1kandGitHub f172f8fa88 Merge pull request #575 from cmaruti/patch-1 
Create versioning_metafiles.txt
 2021-03-01 05:17:32 +00:00
g0tmi1kandGitHub 8cbf260c09 Merge pull request #571 from righettod/master 
Added "Assetnote Wordlists" in "Similar Projects" section
 2021-02-12 10:18:25 +00:00
g0tmi1kandGitHub c341f97b90 Merge pull request #563 from jaiswalakshansh/patch-1 
Update spring-boot.txt

Source: https://www.baeldung.com/spring-boot-actuators
 2021-02-12 10:17:51 +00:00
g0tmi1kandGitHub 4df226a358 Merge pull request #539 from shelld3v/patch-6 
Create a wordlist for dirsearch users
 2021-02-12 10:17:25 +00:00
g0tmi1kandGitHub 36116d773a Merge pull request #557 from shelld3v/patch-7 
More API endpoints (from assetnote) and sort everything

Source: wordlist.assetnote.io
 2021-02-12 10:16:52 +00:00
g0tmi1kandGitHub 0d39b80eee Merge pull request #570 from Faelian/master 
Added webpack.manifest.json
 2021-02-11 22:09:44 +00:00
g0tmi1kandGitHub 265163b669 Merge pull request #569 from g0tmi1k/2021.1 
2021.1
 2021-02-11 21:59:44 +00:00
g0tmi1kandGitHub 7a0c657912 Merge pull request #555 from shoeper/unique-dns-keeporder 
DNS lists lower case only
 2021-02-11 21:35:58 +00:00
g0tmi1kandGitHub 5d0d24f91b Merge pull request #562 from righettod/feature_blazor 
Add Microsoft Blazor WebAssembly identifiers

Source: https://github.com/SteveSandersonMS/CarChecker
 2021-02-11 21:26:13 +00:00
g0tmi1kandGitHub 6372096eab Merge pull request #561 from kazkansouh/ldap-fuzzing 
Standard LDAP attribute and classes lists

Source: ldapsearch -s base -b cn=Subschema  "(objectclass=*)" attributetypes -LLL | sed -e ':x N ; s/\n // ; tx ; P ; s/^.*\n//; tx' | grep -e '^a' | cut -d "'" -f 2 | sort -u
 2021-02-11 21:25:40 +00:00
g0tmi1kandGitHub 94e19b86fa Merge pull request #559 from TAbdiukov/master 
Object Exchange (OBEX) common and uncommon path lists

Source: https://en.wikipedia.org/wiki/OBject_EXchange
 2021-02-11 21:24:29 +00:00
g0tmi1kandGitHub e9127d389b Merge pull request #556 from govolution/patch-7 
Update ssh-betterdefaultpasslist.txt

Source: https://www.zdnet.com/article/backdoor-account-discovered-in-more-than-100000-zyxel-firewalls-vpn-gateways/
 2021-02-11 20:53:34 +00:00
g0tmi1kandGitHub 1e286083e4 Merge pull request #552 from mwoolweaver/patch-1 
Add default password for jailbroken iOS (iPhone, iPad, iPod Touch, AppleTV)

Source: https://blog.elcomsoft.com/2020/05/ios-jailbreaks-ssh-and-root-password/
 2021-02-11 20:52:35 +00:00
g0tmi1kandGitHub 42a8b633de Merge pull request #551 from m4p0/master 
Added Zyxel default username and password (CVE-2020-29583 / CVE-2016-10401)

Source: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html
 2021-02-11 20:51:37 +00:00
g0tmi1kandGitHub ad24e5dcd1 Merge pull request #549 from righettod/Feature_548 
Add ".well-known/jwks.json" path to common.txt file.

Source:

- https://auth0.com/docs/tokens/json-web-tokens/json-web-key-sets
- https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html#amazon-cognito-user-pools-using-tokens-step-2
- https://blogs.akamai.com/2019/10/verify-jwt-with-json-web-key-set-jwks-in-api-gateway.html
 2021-02-11 20:50:33 +00:00
g0tmi1kandGitHub cd52c8428a Merge pull request #547 from fiLLLip/patch-1 
Add humans.txt

Source: http://humanstxt.org/
 2021-02-11 20:49:46 +00:00
g0tmi1kandGitHub 751900cbde Merge pull request #544 from mxrch/master 
Adding .git to big.txt
 2021-02-11 20:49:15 +00:00
g0tmi1kandGitHub 5fc0aeffe4 Merge pull request #543 from rf-peixoto/patch-1 
Upload 2020-200_most_used_passwords.txt

Source: https://nordpass.com/most-common-passwords-list/
 2021-02-11 20:48:56 +00:00
g0tmi1kandGitHub c4b84c2392 Merge pull request #542 from redstonedesigner/master 
Add EFF Dice lists

Source: https://eff.org/dice
 2021-02-11 20:48:23 +00:00
g0tmi1kandGitHub 5ec9d37a15 Merge pull request #540 from kazkansouh/mime-types-iana 
refreshed mime/content-types

Source: https://www.iana.org/assignments/media-types/media-types.xml

```
curl https://www.iana.org/assignments/media-types/media-types.xml -s | xpath -q -e '//file/text()' | tr '[[:upper:]]' '[[:lower:]]'
```
 2021-02-11 20:47:27 +00:00
g0tmi1kandGitHub 9fbf6cb419 Merge pull request #524 from t0-git/patch-1 
Adding new .git entries and .svnignore.
 2021-02-11 20:28:23 +00:00
g0tmi1kandGitHub af40e7f267 Merge pull request #519 from arjunshibu/master 
Added http-request-methods.txt
 2021-02-11 20:27:53 +00:00
g0tmi1kandGitHub 9f4d672e98 Merge pull request #517 from righettod/master 
Add path to a common ManageEngine endpoint

Source: https://righettod.eu/#4-vulns
 2020-11-11 12:00:53 +00:00
g0tmi1kandGitHub ac861e371d Merge pull request #509 from ArgentEnergy/spring-boot-redis 
Spring Boot Redis paths.
 2020-11-06 11:51:25 +00:00
g0tmi1kandGitHub e6333a39d6 Merge pull request #537 from g0tmi1k/misc 
dos2unix
 2020-11-04 11:46:58 +00:00
g0tmi1kandGitHub 7d7b9f70e9 Merge pull request #536 from g0tmi1k/misc 
dos2unix
 2020-11-04 00:01:12 +00:00
g0tmi1kandGitHub 12513fd8ad Merge pull request #518 from clem9669/patch-5 
Adding nextcloud & owncloud to common.txt

Source: https://help.dreamhost.com/hc/en-us/articles/235545207-Step-by-step-guide-to-deploy-Nextcloud-on-DreamCompute
 2020-11-03 22:00:16 +00:00
g0tmi1kandGitHub 2c64f30675 Merge pull request #513 from vulf/vulf/add_webshells_list 
Added a list of popular web shells

The list includes the filenames of webshells in https://github.com/xl7dev/WebShell , https://github.com/TheBinitGhimire/Web-Shells and FuzzDB.
 2020-11-03 14:11:05 +00:00
g0tmi1kandGitHub d21b80c755 Merge pull request #535 from Floppynator/patch-1 
Update email-top-100-domains.txt
 2020-11-03 12:16:28 +00:00
g0tmi1kandGitHub 31d0f3f90b Merge pull request #534 from shelld3v/patch-5 
Added Donald Trump leaked passwords (2016 + 2020)
 2020-11-03 12:12:44 +00:00
g0tmi1kandGitHub c0b6a73bb9 Merge pull request #533 from g0tmi1k/misc 
2020.4 Release
 2020-11-03 11:54:26 +00:00
g0tmi1kandGitHub 6d164b9672 Merge pull request #527 from soufianetahiri/master 
Added actuator default paths and created new XSS fuzzing list

Source: https://docs.spring.io/spring-boot/docs/1.5.x/reference/html/production-ready-endpoints.html
 2020-11-03 11:39:11 +00:00
g0tmi1kandGitHub 449d7a84cd Merge pull request #528 from drwetter/patch-4 
Add CMS login

https://processwire.com/docs/security/admin/
 2020-11-02 21:12:18 +00:00
g0tmi1kandGitHub cea2a72bae Merge pull request #506 from LabanSkollerDefensify/patch-1 
Add NDES and SCEP URLs

/certsrv/mscep/mscep.dll: https://docs.microsoft.com/en-us/mem/intune/protect/certificates-scep-configure
/certsrv/mscep_admin: https://social.technet.microsoft.com/wiki/contents/articles/9063.active-directory-certificate-services-ad-cs-network-device-enrollment-service-ndes.aspx
 2020-11-02 21:11:53 +00:00
g0tmi1kandGitHub a6c94e1798 Merge pull request #526 from m4p0/master 
Added default usernames for SAP
 2020-11-02 21:00:11 +00:00
g0tmi1kandGitHub d2fdef60e8 Merge pull request #525 from n3k00n3/master 
Adding passwords found on public leak from Nord.
 2020-11-02 20:59:44 +00:00
g0tmi1kandGitHub 953255cc39 Merge pull request #523 from MusicGivesMeLife/master 
BiblePass Project
 2020-11-02 20:58:57 +00:00
g0tmi1kandGitHub fe2aa9e7b0 Merge pull request #521 from realArcherL/master 
Slight correction with version numbers from earlier PR also added new endpoints
 2020-11-02 20:57:49 +00:00
g0tmi1kandGitHub 2ce45ec6b8 Merge pull request #512 from aayushsonu/master 
Update names.txt
 2020-11-02 19:07:19 +00:00
g0tmi1kandGitHub c2e6ced5fa Merge pull request #505 from device33/patch-1 
Update apache.txt

source: https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4/html/development_guide/sect-apache_mod_cluster-manager_application
 2020-11-02 19:06:07 +00:00
g0tmi1kandGitHub d5271820d0 Merge pull request #503 from Paradoxis/master 
Removed destructive SQL statements
 2020-09-17 14:16:24 +01:00
g0tmi1kandGitHub ca6bf04c05 Merge pull request #465 from dee-see/patch-1 
Add new Swagger UI path
 2020-09-16 07:30:38 +01:00
g0tmi1kandGitHub e4e65c3510 Merge pull request #478 from LethargicLeprechaun/master 
10-million-password-list-top-1000000.txt Corrections
 2020-09-16 07:30:17 +01:00
g0tmi1kandGitHub f1f3750803 Merge pull request #480 from haxxinen/patch-1 
Create quick-SQLi.txt
 2020-09-16 07:29:18 +01:00
g0tmi1kandGitHub 3e29513e3b Merge pull request #484 from realArcherL/patch-1 
Updated with more keywords and version numbers

- Source: https://youtu.be/NPDp7GHmMa0
 2020-09-16 07:28:58 +01:00
g0tmi1kandGitHub 924c558fd8 Merge pull request #485 from drwetter/patch-4 
Create german_misc.txt
 2020-09-16 07:28:31 +01:00
g0tmi1kandGitHub fbe21a0c99 Merge pull request #492 from drwetter/fix_germanpw.txt 
Fix and extend German word list

Source: https://gist.github.com/MarvinJWendt/2f4f4154b8ae218600eb091a5706b5f4
 2020-09-16 07:27:37 +01:00
g0tmi1kandGitHub c5ba0f44e4 Merge pull request #493 from daehee/master 
XSS payloads from OFJAAAH

Source: https://ghostbin.co/paste/qo23j
 2020-09-16 07:27:07 +01:00
g0tmi1kandGitHub a274ffba57 Merge pull request #495 from shelld3v/patch-1 
Add more API endpoints
 2020-09-16 07:25:58 +01:00
g0tmi1kandGitHub a3924f7a71 Merge pull request #498 from shelld3v/patch-4 
Add some endpoints
 2020-09-16 07:24:41 +01:00
g0tmi1kandGitHub 0c40a01395 Merge pull request #500 from 0x00gum/patch-2 
Some New DB Extensions
 2020-09-16 07:24:13 +01:00
g0tmi1kandGitHub 0b7d119f74 Merge pull request #501 from righettod/master 
Add payloads to identify the template engine used

- https://portswigger.net/research/server-side-template-injection
- https://github.com/epinna/tplmap
 2020-09-16 07:23:39 +01:00
g0tmi1kandGitHub 411cae8e5b Merge pull request #502 from danrneal/patch-1 
Add string js or injection
 2020-09-16 07:22:43 +01:00
g0tmi1kandGitHub e3d31edd19 Merge pull request #466 from bugbounty69/master 
Added all HTML Attributes list

Source: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes
 2020-07-22 16:25:47 +01:00
g0tmi1kandGitHub dea731202f Merge pull request #471 from maxkleinke/master 
renamed files in Passwords/Default-Credentials for better parsing
 2020-07-22 16:25:27 +01:00
g0tmi1kandGitHub a93ecd7f91 Merge pull request #472 from righettod/master 
Add characters that can break a MongoDB query when JS expression is used

Source: https://github.com/Charlie-belmer/vulnerable-node-app/blob/master/app/routes/user.route.js#L8
 2020-07-22 16:25:07 +01:00
g0tmi1kandGitHub 31ee70aeef Merge pull request #473 from mrajput7/master 
Update golang.txt

Source: https://www.dropbox.com/s/ir2b56j3zt7vz0a/golang_handlefunc_combined?dl=0
 2020-07-22 16:24:33 +01:00
g0tmi1kandGitHub a3b77e1170 Merge pull request #475 from joegoerlich/patch-1 
Update sap.txt
 2020-07-22 16:24:13 +01:00
g0tmi1kandGitHub 3a9cac0384 Merge pull request #474 from chudyPB/master 
Update sap.txt
 2020-07-22 16:24:02 +01:00
g0tmi1kandGitHub 5fc3e6a208 Merge pull request #476 from toxydose/patch-1 
Add some common ports
 2020-07-22 16:23:04 +01:00
g0tmi1kandGitHub a6e3f77e4d Merge pull request #477 from g0tmi1k/misc 
Few fixes
 2020-07-22 16:22:48 +01:00
g0tmi1kandGitHub b883fc123a Merge pull request #467 from GovindPalakkal/patch-2 
Update swagger.txt
 2020-07-17 22:05:28 +01:00
g0tmi1kandGitHub 62786ce702 Update CONTRIBUTORS.md 2020-07-17 22:01:21 +01:00
g0tmi1kandGitHub ad309eabee Merge pull request #468 from govolution/patch-6 
Update telnet-betterdefaultpasslist.txt

Source: https://www.zdnet.com/article/backdoor-accounts-discovered-in-29-ftth-devices-from-chinese-vendor-c-data/
 2020-07-17 21:56:37 +01:00
g0tmi1kandGitHub dd5960e18e Merge pull request #459 from clem9669/patch-3 
Minor change
 2020-06-18 15:34:59 +01:00
g0tmi1kandGitHub 456a3b0fe8 Merge pull request #460 from clem9669/patch-4 
PR about the issue: #438
 2020-06-18 15:20:05 +01:00
g0tmi1kandGitHub 227e072758 Merge pull request #458 from PinkDraconian/patch-2 
Added scientific notation entries
 2020-06-16 13:18:56 +01:00
g0tmi1kandGitHub 4626422418 Merge pull request #457 from PinkDraconian/patch-1 
Added true and false to the fuzzing list
 2020-06-16 11:24:19 +01:00
g0tmi1kandGitHub 958dd563e0 Merge pull request #455 from Techbrunch/patch-1 
Update swagger.txt
 2020-06-12 11:21:37 +01:00
g0tmi1kandGitHub d76b8f6691 Merge pull request #452 from noraj/patch-1 
Create LFI-gracefulsecurity-windows.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/
 2020-06-12 09:57:44 +01:00
g0tmi1kandGitHub b2865e0492 Merge pull request #453 from noraj/patch-2 
Create LFI-gracefulsecurity-linux.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-linux/
 2020-06-12 09:57:09 +01:00
g0tmi1kandGitHub 5ecb8e85b2 Merge pull request #454 from sheimo/patch-1 
Create sqli.auth.bypass.txt

Source: https://pentestlab.blog/2012/12/24/sql-injection-authentication-bypass-cheat-sheet/
Source: http://www.lifeoverpentest.com/2018/03/sql-injection-login-bypass-cheat-sheet.html
 2020-06-12 09:56:17 +01:00
g0tmi1kandGitHub 1a9c3d47ed Merge pull request #446 from its0x08/patch-1 
TYPO fixed: some lines start with space.
 2020-06-09 17:09:55 +01:00
g0tmi1kandGitHub 6dff88b8b0 Merge pull request #447 from its0x08/patch-2 
TYPO fixed: some lines start with space.
 2020-06-09 17:09:20 +01:00
g0tmi1kandGitHub 534e8cd726 Merge pull request #451 from lc/patch-1 
Update CONTRIBUTORS.md
 2020-06-09 17:08:57 +01:00
g0tmi1kandGitHub 0a39d3dcb4 Merge pull request #417 from muhammedck113/patch-1 
Update 10-million-password-list-top-100.txt
 2020-06-05 16:30:30 +01:00
g0tmi1kandGitHub 6beba93eac Merge pull request #427 from Failsafe-0verflowme/patch-1 
Update common.txt
 2020-06-05 16:30:13 +01:00
g0tmi1kandGitHub 9aa4f93db1 Merge pull request #433 from MomIsBestFriend/Fix-425 
Fixed typo in Discovery/Variables/secret-keywords.txt
 2020-06-05 16:29:54 +01:00
g0tmi1kandGitHub 245984882a Merge pull request #442 from kazkansouh/standardise-line-end 
Standardise line endings
 2020-05-28 11:11:35 +01:00
g0tmi1kandGitHub 8d9520e039 Merge pull request #443 from IAmATeaPot418/patch-2 
Adding the not in operator
 2020-05-28 11:10:08 +01:00
g0tmi1kandGitHub 9a14bdb7ca Merge pull request #441 from cactuschibre/master 
Reorder and add more Actuator endpoints

Source; https://apereo.github.io/cas/development/monitoring/Monitoring-Statistics.html
 2020-05-27 10:42:10 +01:00
g0tmi1kandGitHub 67bdc2032e Merge pull request #434 from Kegn/patch-1 
add nested traversal strings for /etc/passwd
 2020-05-27 09:55:47 +01:00
g0tmi1kandGitHub 67947cfae1 Merge pull request #435 from righettod/master 
Add WWW and HTML folders
 2020-05-27 09:54:21 +01:00
g0tmi1kandGitHub fdfd855ec5 Merge pull request #437 from guest20/patch-1 
Rename Public-Source-Repo-Issues.txt to Public-Source-Repo-Issues.json
 2020-05-27 09:44:27 +01:00
g0tmi1kandGitHub a8df2a72c2 Merge pull request #431 from pbafe/master 
Create Django.txt
 2020-05-13 14:27:21 +01:00
g0tmi1kandGitHub 86c6e6314f Merge pull request #430 from cnotin/patch-1 
Add .well-known entries

Source: 
- https://gist.github.com/quickbreach/3bddfdf193b3d988b0e07d07dbac0da0
- https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
- https://mercure.rocks/spec#discovery
 2020-05-08 12:07:45 +01:00
g0tmi1kandGitHub 47e882f5d9 Merge pull request #405 from soufianetahiri/patch-1 
add swagger path
 2020-05-08 12:06:57 +01:00
g0tmi1kandGitHub 442e31098e Merge pull request #428 from g0tmi1k/misc 
Add top domains + 2020.2 release
 2020-05-04 10:23:05 +01:00
g0tmi1kandGitHub 15b1fa3a65 Merge pull request #426 from righettod/master 
Add the expression for the "doT.js" and the "dust.js" template engines

Source:

- https://github.com/epinna/tplmap/tree/master/plugins/engines
- https://olado.github.io/doT/index.html
- http://www.dustjs.com/
 2020-05-04 10:07:21 +01:00
g0tmi1kandGitHub 09d5a27cf7 Merge pull request #421 from storenth/master 
Update the fuzz-Bo0oM.txt with more ';'

Source: https://twitter.com/11xuxx/status/1247496768054591489
 2020-04-29 17:52:49 +01:00
g0tmi1kandGitHub b0186b7875 Merge pull request #424 from Kadeeli/master 
Close #423 (added dutch passwordlist)

Source: 
- https://www.dropbox.com/s/rbgmmtsqupawtfc/Dutch_passwordlist.txt?dl=0
- https://www.dropbox.com/s/z3d0di7to1yv3cc/Dutch_wordlist.txt?dl=0
 2020-04-29 17:51:33 +01:00
g0tmi1kandGitHub 9e694f6ad8 Merge pull request #422 from Emoe/master 
Added default Directory-Wordlist from Dirbuster

Source: https://sourceforge.net/projects/dirbuster/files/DirBuster%20Lists/Current/
 2020-04-28 16:20:45 +01:00
g0tmi1kandGitHub 91fc2a786a Merge pull request #420 from haxxinen/patch-1 
Create http-request-headers-fields-large.txt
 2020-04-27 13:11:51 +01:00
g0tmi1kandGitHub db59165670 Merge pull request #416 from righettod/master 
Add a version of the payload for CodeContext

Source: https://portswigger.net/web-security/server-side-template-injection
 2020-04-27 11:16:24 +01:00
g0tmi1kandGitHub 82863eca3c Merge pull request #418 from alisabzeghabaei/master 
some new php backdoor names.

Source: https://github.com/JohnTroony/php-webshells
 2020-04-27 11:14:45 +01:00