mirror of
https://github.com/danielmiessler/SecLists.git
synced 2026-07-25 06:53:47 +00:00
Merge pull request #1100 from StepSisStuck/better-readmes
feat(docs): Improve readme files for better clarity and usage examples
This commit is contained in:
@@ -2,11 +2,8 @@
|
||||
|
||||
## combined_words.txt
|
||||
|
||||
Use for: discovering files
|
||||
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
|
||||
|
||||
### Overview
|
||||
This list is a combination of the following wordlists:
|
||||
|
||||
- big.txt
|
||||
- common.txt
|
||||
- raft-large-words-lowercase.txt
|
||||
@@ -16,12 +13,15 @@ This list is a combination of the following wordlists:
|
||||
- raft-small-words-lowercase.txt
|
||||
- raft-small-words.txt
|
||||
|
||||
### Usage
|
||||
Use for: discovering files
|
||||
|
||||
### Source
|
||||
This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
|
||||
|
||||
## combined_directories.txt
|
||||
|
||||
Use for: discovering files and directories
|
||||
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
|
||||
|
||||
### Overview
|
||||
This list is a combination of the following wordlists:
|
||||
- apache.txt
|
||||
- combined_words.txt
|
||||
@@ -37,20 +37,34 @@ This list is a combination of the following wordlists:
|
||||
- raft-small-directories.txt
|
||||
- common_directories.txt
|
||||
|
||||
### Usage
|
||||
Use for: discovering files and directories
|
||||
|
||||
### Source
|
||||
This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
|
||||
|
||||
## dsstorewordlist.txt
|
||||
|
||||
SOURCE: https://github.com/aels/subdirectories-discover
|
||||
|
||||
### Overview
|
||||
Perfect wordlist to discover directories and files on target site with tools like ffuf.
|
||||
|
||||
### Usage
|
||||
Use for: discovering directories and files
|
||||
|
||||
### Source
|
||||
Source: https://github.com/aels/subdirectories-discover
|
||||
|
||||
### References
|
||||
- It was collected by parsing Alexa top-million sites for **.DS_Store** files (https://en.wikipedia.org/wiki/.DS_Store), extracting all the found files, and then extracting found file and directory names from around 300k real websites.
|
||||
- Then sorted by probability and removed strings with one occurrence.
|
||||
- resulted file you can download is below. Happy Hunting!
|
||||
|
||||
## vulnerability-scan_j2ee-websites_WEB-INF.txt
|
||||
|
||||
### Overview
|
||||
Use for: discovering sensitive j2ee files exploiting a lfi
|
||||
|
||||
References:
|
||||
|
||||
### References
|
||||
- https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3
|
||||
- https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml
|
||||
- https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java
|
||||
|
||||
Reference in New Issue
Block a user