mirror of
https://github.com/danielmiessler/SecLists.git
synced 2026-08-15 07:26:16 +00:00
fix(docs): Fixed formatting and wording
This commit is contained in:
committed by
GitHub
parent
b325f7d050
commit
62cecd1416
@@ -7,17 +7,24 @@ No updates have been made to this wordlist since its creation.
|
|||||||
|
|
||||||
## AdobeXML.fuzz.txt
|
## AdobeXML.fuzz.txt
|
||||||
Use for: Discovering sensitive filepaths of **Adobe ColdFusion**
|
Use for: Discovering sensitive filepaths of **Adobe ColdFusion**
|
||||||
|
|
||||||
Creation date: Aug 27, 2012
|
Creation date: Aug 27, 2012
|
||||||
|
|
||||||
No updates have been made to this wordlist since its creation.
|
No updates have been made to this wordlist since its creation.
|
||||||
|
|
||||||
|
|
||||||
## CGI-HTTP-POST-Windows.fuzz.txt
|
## CGI-HTTP-POST-Windows.fuzz.txt
|
||||||
Use for: Exploiting various vulnerabilities in the now defunct WYSIWYG HTML editor and website administration tool, [Microsoft FrontPage](https://en.wikipedia.org/wiki/Microsoft_FrontPage)
|
Use for: Exploiting various vulnerabilities in the now defunct WYSIWYG HTML editor and website administration tool, [Microsoft FrontPage](https://en.wikipedia.org/wiki/Microsoft_FrontPage)
|
||||||
|
|
||||||
Source: https://github.com/deepak0401/Front-Page-Exploit
|
Source: https://github.com/deepak0401/Front-Page-Exploit
|
||||||
|
|
||||||
Date of last update: Aug 27, 2012
|
Date of last update: Aug 27, 2012
|
||||||
|
|
||||||
The last version of FrontPage was released on 2003.
|
The last version of FrontPage was released on 2003.
|
||||||
|
|
||||||
## CGI-HTTP-POST.fuzz.txt
|
## CGI-HTTP-POST.fuzz.txt
|
||||||
Use for: Exploiting/Discovering various vulnerabilities in extremely old systems (Circa 1998) that use "CGI".
|
Use for: Exploiting/Discovering various vulnerabilities in extremely old systems (Circa 1998) that use "CGI".
|
||||||
|
|
||||||
Date of last update: Aug 27, 2012
|
Date of last update: Aug 27, 2012
|
||||||
|
|
||||||
This wordlist tests for the following vulnerabilities:
|
This wordlist tests for the following vulnerabilities:
|
||||||
@@ -27,14 +34,19 @@ This wordlist tests for the following vulnerabilities:
|
|||||||
- Remote File Include in **[myPHPNuke](https://web.archive.org/web/20140812223623/http://www.myphpnuke.com/)**. Source: [Nessus](https://www.tenable.com/plugins/nessus/11836)
|
- Remote File Include in **[myPHPNuke](https://web.archive.org/web/20140812223623/http://www.myphpnuke.com/)**. Source: [Nessus](https://www.tenable.com/plugins/nessus/11836)
|
||||||
- DoS in the **"D-Link Ethernet/Fast Ethernet Print Server DP-300+"**. Source: [Sullo's Security Advisory Archive](https://raw.githubusercontent.com/sullo/advisory-archives/master/phenoelit.de_dp-300.txt).
|
- DoS in the **"D-Link Ethernet/Fast Ethernet Print Server DP-300+"**. Source: [Sullo's Security Advisory Archive](https://raw.githubusercontent.com/sullo/advisory-archives/master/phenoelit.de_dp-300.txt).
|
||||||
|
|
||||||
|
|
||||||
## CGI-Microsoft.fuzz.txt
|
## CGI-Microsoft.fuzz.txt
|
||||||
Use for: Exploiting/Discovering various vulnerabilities in miscelaneous CGI scripts that run on Microsoft operating systems.
|
Use for: Exploiting/Discovering various vulnerabilities in miscelaneous CGI scripts that run on Microsoft operating systems.
|
||||||
|
|
||||||
Date of last update: Aug 27, 2012
|
Date of last update: Aug 27, 2012
|
||||||
|
|
||||||
|
|
||||||
## raft-* wordlists
|
## raft-* wordlists
|
||||||
Use for: Directory and file brute-forcing leading to identification of vulnerabilities in web applications.
|
Use for: Directory and file brute-forcing leading to identification of vulnerabilities in web applications.
|
||||||
|
|
||||||
Source: [Google's RAFT](https://code.google.com/archive/p/raft/)
|
Source: [Google's RAFT](https://code.google.com/archive/p/raft/)
|
||||||
|
|
||||||
|
|
||||||
## combined_words.txt
|
## combined_words.txt
|
||||||
|
|
||||||
Use for: discovering files
|
Use for: discovering files
|
||||||
@@ -55,9 +67,10 @@ This list is a combination of the following wordlists:
|
|||||||
## combined_directories.txt
|
## combined_directories.txt
|
||||||
|
|
||||||
Use for: discovering files and directories
|
Use for: discovering files and directories
|
||||||
|
|
||||||
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
|
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
|
||||||
|
|
||||||
This list is a combination of the following wordlists:
|
These are the wordlists that compose this wordlist:
|
||||||
- apache.txt
|
- apache.txt
|
||||||
- combined_words.txt
|
- combined_words.txt
|
||||||
- directory-list-1.0.txt
|
- directory-list-1.0.txt
|
||||||
@@ -78,7 +91,6 @@ Use for: discovering files and directories
|
|||||||
### Source
|
### Source
|
||||||
This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
|
This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
|
||||||
|
|
||||||
|
|
||||||
## dsstorewordlist.txt
|
## dsstorewordlist.txt
|
||||||
|
|
||||||
SOURCE: https://github.com/aels/subdirectories-discover
|
SOURCE: https://github.com/aels/subdirectories-discover
|
||||||
@@ -88,6 +100,7 @@ Perfect wordlist to discover directories and files on target site with tools lik
|
|||||||
- Then sorted by probability and removed strings with one occurrence.
|
- Then sorted by probability and removed strings with one occurrence.
|
||||||
- resulted file you can download is below. Happy Hunting!
|
- resulted file you can download is below. Happy Hunting!
|
||||||
|
|
||||||
|
|
||||||
## vulnerability-scan_j2ee-websites_WEB-INF.txt
|
## vulnerability-scan_j2ee-websites_WEB-INF.txt
|
||||||
Use for: discovering sensitive j2ee files exploiting a lfi
|
Use for: discovering sensitive j2ee files exploiting a lfi
|
||||||
|
|
||||||
@@ -102,6 +115,7 @@ References:
|
|||||||
Use for: Fuzzing for common filepaths in webpages designed with **[Microsoft Frontpage](https://en.wikipedia.org/wiki/Microsoft_FrontPage)**
|
Use for: Fuzzing for common filepaths in webpages designed with **[Microsoft Frontpage](https://en.wikipedia.org/wiki/Microsoft_FrontPage)**
|
||||||
|
|
||||||
Year of the first release of Microsoft Frontpage: 1997
|
Year of the first release of Microsoft Frontpage: 1997
|
||||||
|
Year of the last release of Microsoft Frontpage: 2003
|
||||||
|
|
||||||
## Oracle-EBS-wordlist.txt
|
## Oracle-EBS-wordlist.txt
|
||||||
Use for: Fuzzing for common filepaths of [Oracle E-Business Suite](https://www.oracle.com/applications/ebusiness/) (EBS) version 11.
|
Use for: Fuzzing for common filepaths of [Oracle E-Business Suite](https://www.oracle.com/applications/ebusiness/) (EBS) version 11.
|
||||||
@@ -125,7 +139,6 @@ Reference: https://the-infosec.com/2017/03/29/do-you-know-what-your-erp-is-telli
|
|||||||
Date of last update: Oct 7, 2019
|
Date of last update: Oct 7, 2019
|
||||||
|
|
||||||
|
|
||||||
<<<<<<< HEAD
|
|
||||||
## iis-systemweb.txt
|
## iis-systemweb.txt
|
||||||
Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](https://www.iis.net/) servers to detect **CGIs** and **scripts** even even if the two ladder directories are inaccessible.
|
Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](https://www.iis.net/) servers to detect **CGIs** and **scripts** even even if the two ladder directories are inaccessible.
|
||||||
|
|
||||||
@@ -133,6 +146,3 @@ Reference: https://github.com/irsdl/IIS-ShortName-Scanner
|
|||||||
Discussion: https://github.com/danielmiessler/SecLists/pull/783
|
Discussion: https://github.com/danielmiessler/SecLists/pull/783
|
||||||
|
|
||||||
Date of last update: Jun 27, 2022
|
Date of last update: Jun 27, 2022
|
||||||
=======
|
|
||||||
Date of last update: Oct 14, 2010
|
|
||||||
>>>>>>> 0a6cbb9c (feat(docs): Moved Web-Server wordlists into their own directory)
|
|
||||||
|
|||||||
@@ -31,11 +31,13 @@ Date of last update: Oct 14, 2010
|
|||||||
|
|
||||||
## Apache.fuzz.txt
|
## Apache.fuzz.txt
|
||||||
Use for: Discvering sensitive content in Apache web servers.
|
Use for: Discvering sensitive content in Apache web servers.
|
||||||
|
|
||||||
Date of last update: Jan 26, 2015
|
Date of last update: Jan 26, 2015
|
||||||
|
|
||||||
|
|
||||||
## Apache-Tomcat.txt
|
## Apache-Tomcat.txt
|
||||||
Use for: Discovering sensitive content in Apache Tomcat servers.
|
Use for: Discovering sensitive content in Apache Tomcat servers.
|
||||||
|
|
||||||
Date of last update: Dec 14, 2017
|
Date of last update: Dec 14, 2017
|
||||||
|
|
||||||
|
|
||||||
@@ -43,9 +45,9 @@ Date of last update: Dec 14, 2017
|
|||||||
Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](https://www.iis.net/) servers to detect **CGIs** and **scripts** even even if the two ladder directories are inaccessible.
|
Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](https://www.iis.net/) servers to detect **CGIs** and **scripts** even even if the two ladder directories are inaccessible.
|
||||||
|
|
||||||
Reference: https://github.com/irsdl/IIS-ShortName-Scanner
|
Reference: https://github.com/irsdl/IIS-ShortName-Scanner
|
||||||
|
|
||||||
Discussion: https://github.com/danielmiessler/SecLists/pull/783
|
Discussion: https://github.com/danielmiessler/SecLists/pull/783
|
||||||
|
|
||||||
<<<<<<< HEAD
|
|
||||||
Date of last update: Jun 27, 2022
|
Date of last update: Jun 27, 2022
|
||||||
|
|
||||||
|
|
||||||
@@ -63,6 +65,3 @@ Use for: Fuzzing for common filepaths in webpages created with **[Apache Axis](h
|
|||||||
|
|
||||||
Date of the first release of Apache Axis: [2002-10-07](https://jbossas.jboss.org/downloads/)
|
Date of the first release of Apache Axis: [2002-10-07](https://jbossas.jboss.org/downloads/)
|
||||||
Date of the last release of Apache Axis: 2006-04-22
|
Date of the last release of Apache Axis: 2006-04-22
|
||||||
=======
|
|
||||||
Date of last update: Jun 27, 2022
|
|
||||||
>>>>>>> 0a6cbb9c (feat(docs): Moved Web-Server wordlists into their own directory)
|
|
||||||
|
|||||||
Reference in New Issue
Block a user