Tiago Sintra fff5faa976 Support for CVE-2007-1860 mod_jk double encoding ...

Added paths that will check access control bypass using double encoding (CVE-2007-1860) that could allow a remote user to access Tomcat's administration panel.
Based on the scenario demonstrated on https://pentesterlab.com/exercises/cve-2007-1860/course

2016-07-28 14:10:42 +02:00

..

CMS

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

SVNDigger

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

URLs

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

WebServices

Added file extensions

2016-05-17 12:08:06 +01:00

AdobeXML.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Apache.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

apache.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

ApacheTomcat.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

ASP_CommonBackdoors.fuzz.txt

Moar directory motionz.

2015-08-04 10:50:55 -07:00

axis.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

big_portuguese-dictionary.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

big.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

burp-parameter-names.txt

Added file extensions

2016-05-17 12:08:06 +01:00

CGI_HTTP_POST_Windows.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

CGI_HTTP_POST.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

CGI_Microsoft.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

CGI_XPlatform.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

cgis.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

ckeditor.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

coldfusion.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

common_and_dutch.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

common_and_french.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

common_and_italian.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

common_and_portugese.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

common_and_spanish.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

Common_PHP_Filenames.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

common.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

domino.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

fatwire_pagenames.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

fatwire.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

FatwireCMS.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

fnf_fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

french.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

Frontpage.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

frontpage.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

hpsmh.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

HTTP_POST_Microsoft.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Hyperion.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

hyperion.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

IIS.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

iis.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

iplanet.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

JavaServlets_Common.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

JBoss.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

jboss.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

JRun.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

jrun.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

JSP_CommonBackdoors.fuzz.txt

Moar directory motionz.

2015-08-04 10:50:55 -07:00

KitchensinkDirectories.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Logins.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

LotusNotes.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Netware.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

netware.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Oracle9i.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

oracle.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

OracleAppServer.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

Passwords.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

PHP_CommonBackdoors.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

PHP.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

PL_CommonBackdoors.fuzz.txt

Moar directory motionz.

2015-08-04 10:50:55 -07:00

proxy-conf.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

quickhits.txt

Create quickhits.txt

2015-12-02 23:33:37 -08:00

raft-large-directories-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-directories.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-extensions-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-extensions.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-files-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-files.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-words-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-large-words.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-directories-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-directories.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-extensions-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-extensions.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-files-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-files.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-words-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-medium-words.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-directories-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-directories.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-extensions-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-extensions.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-files-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-files.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-words-lowercase.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

raft-small-words.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Randomfiles.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

ror.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

sap.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

sharepoint.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

spanish.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

SunAppServerGlassfish.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

sunas.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

SuniPlanet.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

tests.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

tftp.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

tomcat.txt

Support for CVE-2007-1860 mod_jk double encoding

2016-07-28 14:10:42 +02:00

Top10-RobotsDisallowed.txt

Added RobotsDisallowed content to Discovery/Web_Content

2015-09-23 09:41:27 -07:00

Top100-RobotsDisallowed.txt

Added RobotsDisallowed content to Discovery/Web_Content

2015-09-23 09:41:27 -07:00

Top500-RobotsDisallowed.txt

Added RobotsDisallowed content to Discovery/Web_Content

2015-09-23 09:41:27 -07:00

Top1000-RobotsDisallowed.txt

Added RobotsDisallowed content to Discovery/Web_Content

2015-09-23 09:41:27 -07:00

UnixDotfiles.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

UserAgents.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

Vignette.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

vignette.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Weblogic.fuzz.txt

Removed duplicate values - awk '!x[$0]++'

2016-05-17 12:39:21 +01:00

weblogic.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

Websphere.fuzz.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00

websphere.txt

Changing permissions to everything matches - 0644

2016-05-17 12:04:45 +01:00