feat(docs): Moved Web-Server wordlists into their own directory

This commit is contained in:
Ignacio J. Perez Portal
2024-10-09 17:42:39 -03:00
committed by ItsIgnacioPortal
parent 0b453325ab
commit a71fc0807e
10 changed files with 9 additions and 72 deletions
@@ -0,0 +1,90 @@
ROOT
add
balancer
dav
deploy
examples
examples/jsp/index.html
examples/jsp/snp/snoop.jsp
examples/jsp/source.jsp
examples/servlet/HelloWorldExample
examples/servlet/SnoopServlet
examples/servlet/TroubleShooter
examples/servlet/default/jsp/snp/snoop.jsp
examples/servlet/default/jsp/source.jsp
examples/servlet/org.apache.catalina.INVOKER.HelloWorldExample
examples/servlet/org.apache.catalina.INVOKER.SnoopServlet
examples/servlet/org.apache.catalina.INVOKER.TroubleShooter
examples/servlet/org.apache.catalina.servlets.DefaultServlet/jsp/snp/snoop.jsp
examples/servlet/org.apache.catalina.servlets.DefaultServlet/jsp/source.jsp
examples/servlet/org.apache.catalina.servlets.WebdavServlet/jsp/snp/snoop.jsp
examples/servlet/org.apache.catalina.servlets.WebdavServlet/jsp/source.jsp
examples/servlet/snoop
examples/servlets/index.html
examples/../manager/html
examples/%2e%2e/manager/html
examples/%252e%252e/manager/html
host-manager
host-manager/add
host-manager/host-manager.xml
host-manager/html/*
host-manager/list
host-manager/remove
host-manager/start
host-manager/stop
html/*
install
j4p
jmxproxy/*
jsp-examples
list
manager
manager/deploy
manager/html
manager/html/*
manager/install
manager/jmxproxy
manager/jmxproxy/*
manager/list
manager/manager.xml
manager/reload
manager/remove
manager/resources
manager/roles
manager/save
manager/serverinfo
manager/sessions
manager/start
manager/status.xsd
manager/status/*
manager/stop
manager/undeploy
reload
remove
resources
roles
save
serverinfo
servlet/default/
servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.DefaultServlet/tomcat.gif
servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.SnoopAllServlet
servlet/org.apache.catalina.INVOKER.org.apache.catalina.servlets.WebdavServlet/
servlet/org.apache.catalina.servlets.DefaultServlet/
servlet/org.apache.catalina.servlets.DefaultServlet/tomcat.gif
servlet/org.apache.catalina.servlets.HTMLManagerServlet
servlet/org.apache.catalina.servlets.InvokerServlet/org.apache.catalina.servlets.DefaultServlet/tomcat.gif
servlet/org.apache.catalina.servlets.InvokerServlet/org.apache.catalina.servlets.SnoopAllServlet
servlet/org.apache.catalina.servlets.ManagerServlet
servlet/org.apache.catalina.servlets.SnoopAllServlet
servlet/org.apache.catalina.servlets.WebdavServlet/
servlets-examples
sessions
start
status/*
stop
tomcat-docs
undeploy
webdav
webdav/index.html
webdav/servlet/org.apache.catalina.servlets.WebdavServlet/
webdav/servlet/webdav/
File diff suppressed because it is too large Load Diff
@@ -0,0 +1,51 @@
BasicAuthServlet
CertAuthServlet
cgi-bin
cgi-bin/gx.cgi
cgi-bin/gx.dll
cgi-bin/gx.exe
classes
com.netscape.server.servlet.jsp.JSPRunner
COnlineBank
CSample
ExceptionThrown.jsp
FormAuthServlet
fortune
gx
GXApp
GXApp/COnlineBank
GXApp/COnlineBank/COBLogin.html
GXApp/CSample
GXApp/CSample/index.html
GXApp/images
GXApp/index.html
GXApp/OnlineBank
GXApp/OnlineBank/OBLogin.html
gx.cgi
gx.exe
ias-samples
ias-samples/index.html
index.html
JSPRunner
JSPRunnerSticky
lotery
NASApp
NASApp/fortune/fortune
NASApp/system
NASApp/system/BasicAuthServlet
NASApp/system/CertAuthServlet
NASApp/system/ExceptionThrown.jsp
NASApp/system/FormAuthServlet
NASApp/system/JSPRunner
NASApp/system/JSPRunnerSticky
NASApp/system/SessionInvalidator
NASApp/system/StaticServlet
NASApp/system/ValidationError.jsp
NASApp/system/WelcomeListServlet
OnlineBank
servlet
SessionInvalidator
StaticServlet
system
ValidationError.jsp
WelcomeListServlet
@@ -0,0 +1,68 @@
1_0_2204
1_0_2204_21
1_0_2914
1_0_2914_0
1_0_3705
1_0_3705_0
1_0_3705_209
1_0_3705_288
1_0_3705_6018
1_1_4322
1_1_4322_2032
1_1_4322_2300
1_1_4322_2310
1_1_4322_2407
1_1_4322_2443
1_1_4322_510
1_1_4322_573
2_0_40607
2_0_40607_16
2_0_50215
2_0_50215_44
2_0_50727
2_0_50727_1433
2_0_50727_1434
2_0_50727_3053
2_0_50727_3082
2_0_50727_312
2_0_50727_3603
2_0_50727_3607
2_0_50727_3615
2_0_50727_4016
2_0_50727_42
2_0_50727_4918
2_0_50727_4927
2_0_50727_4952
2_0_50727_832
3_0_4506
3_0_4506_2123
3_0_4506_2254
3_0_4506_26
3_0_4506_30
3_0_4506_590
3_0_4506_648
3_5_20404
3_5_20404_0
3_5_20706
3_5_20706_1
3_5_21022
3_5_21022_8
3_5_30428
3_5_30428_1
3_5_30729
3_5_30729_01
3_5_30729_4926
4_0_20506
4_0_21006
4_0_30128
4_0_30128_1
4_0_30319
4_0_30319_1
4_0_30319_17020
4_0_30319_17379
4_0_30319_17626
4_0_30319_17929
4_5_40805
4_5_50131
4_5_50501
4_5_50709
@@ -0,0 +1,214 @@
..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
a%5c.aspx
AccessPlatform/
AccessPlatform/auth/
AccessPlatform/auth/clientscripts/
AccessPlatform/auth/clientscripts/cookies.js
AccessPlatform/auth/clientscripts/login.js
admin/
administration/
administrator/
Admin/knowledge/dsmgr/users/GroupManager.asp
Admin/knowledge/dsmgr/users/UserManager.asp
adovbs.inc
adsamples/
AdvWorks/equipment/catalog_type.asp
ajfhasdfgsagfakjhgd
archi~1/
archiv~1/
Archi~1/
aspnet_files/
aspnet_client/
asp/
asps/
ASPSamp/AdvWorks/equipment/catalog_type.asp
_AuthChangeUrl?
bin/
bins/
certcontrol/
certenroll/
certsrv/
certsrv/mscep_admin
certsrv/mscep/mscep.dll
cfide/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
CFIDE/Administrator/startstop.html
cgi/
cgi-bin/
cgi-bin/a1stats/a1disp.cgi
cgi-bin/htimage.exe?2,2
cgi-bin/htmlscript
cgi-bin/imagemap.exe?2,2
checkapache.html
citrix/
citrix/AccessPlatform/auth/
citrix/AccessPlatform/auth/clientscripts/
Citrix//AccessPlatform/auth/clientscripts/cookies.js
Citrix/AccessPlatform/auth/clientscripts/login.js
Citrix/PNAgent/config.xml
clocktower
cmsample/
common/
common~1/
db/
domcfg.nsf/?open
Exadmin/
Exchange/
exchange/root.asp
ExchWeb/
forum_arc.asp
forum.asp
forum_professionnel.asp
fpsample/
help/
iiasdmpwd/
iisadmin/
iisadmpwd/achg.htr
iisadmpwd/aexp2b.htr
iisadmpwd/aexp2.htr
iisadmpwd/aexp3.htr
iisadmpwd/aexp4b.htr
iisadmpwd/aexp4.htr
iisadmpwd/aexp.htr
iisadmpwd/anot3.htr
iisadmpwd/anot.htr
iishelp/
iishelp/iis/misc/default.asp
iissamples/
iissamples/exair/howitworks/Code.asp
iissamples/exair/howitworks/Codebrw1.asp
iissamples/exair/howitworks/Codebrws.asp
iissamples/sdk/asp/docs/codebrw2.asp
iissamples/sdk/asp/docs/codebrws.asp
iissamples/sdk/asp/docs/CodeBrws.asp
images/
imprimer.asp
includes/adovbs.inc
index.php
index.shtml
inetpub/
inetsrv/
isapi/
_layouts/alllibs.htm
_layouts/settings.htm
_layouts/userinfo.htm
# Look at the result codes in the headers - 403 likely mean the dir exists, 404 means not. It takes an ISAPI filter for IIS to return 404's for 403s.
Mail/smtp/Admin/smadv.asp
market
_mem_bin/
_mem_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
_mem_bin/autoconfig.asp
_mem_bin/formslogin.asp
Micros~1/
Microsoft-Server-ActiveSync/
msadc/
msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
msadc/Samples/selector/showcode.asp
msdac/root.exe?/c+dir
mspress30
%NETHOOD%/
null.htw
null.htw?CiWebHitsFile=/default.asp%20&CiRestriction=none&CiHilite
OMA/
OWA/
pbserver/
pbserver/pbserver.dll
postinfo.html
.printer
printers/
_private
progra~1
Progra~1
Public/
publisher
qwertypoiu.htw
qwertypoiu.printer
rubrique.asp
samples/
~/<script>alert('XSS')</script>.asp
~/<script>alert('XSS')</script>.aspx
<script>alert('XSS')</script>.aspx
scripts/
scripts/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
scripts/..%c0%af..%c0%afwinnt/system32/cmd.exe?/c+dir+c:\\
scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir+c:\\
scripts/cgimail.exe
scripts/convert.bas
scripts/counter.exe
scripts/fpcount.exe
scripts/iisadmin/ism.dll?http/dir
scripts/no-such-file.pl
scripts/root.exe?/c+dir
scripts/samples/
scripts/samples/search/webhits.exe
scripts/tools/
scripts/tools/getdrvs.exe
scripts/tools/newdsn.exe
search?NS-query-pat=..\..\..\..\..\boot.ini
share/
sites/
siteserver/
SiteServer/Admin
SiteServer/Admin/commerce/foundation/driver.asp
SiteServer/Admin/commerce/foundation/DSN.asp
SiteServer/admin/findvserver.asp
SiteServer/Admin/knowledge/dsmgr/default.asp
siteserver/publishing/viewcode.asp
SiteServer/Publishing/viewcode.asp
Sites/Knowledge/Membership/Inspiredtutorial/Viewcode.asp
Sites/Knowledge/Membership/Inspired/ViewCode.asp
Sites/Samples/Knowledge/Membership/Inspiredtutorial/ViewCode.asp
Sites/Samples/Knowledge/Membership/Inspired/ViewCode.asp
Sites/Samples/Knowledge/Push/ViewCode.asp
Sites/Samples/Knowledge/Search/ViewCode.asp
system/
system_web/
test/
tools/newdsn.exe?driver=Microsoft%2BAccess%2BDriver%2B%28*.mdb%29&dsn=goatfart+samples+from+microsoft&dbq=..%2F..%2Fwwwroot%2goatfart.html&newdb=CREA
trace.axd
tsweb/
vc30
_fpclass/
_vti_adm/
_vti_aut/
_vti_bin/
_vti_bin/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir
_vti_bin/fpcount.exe?Page=default.asp|Image=3
_vti_bin/shtml.dll
_vti_bin/shtml.dll/asdfghjkl
_vti_bin/shtml.exe/qwertyuiop
_vti_bin/_vti_aut/dvwssr.dll
_vti_bin/_vti_aut/fp30reg.dll
_vti_bin/_vti_aut/fp30reg.dll?1234=X
_vti_cnf/
_vti_log/
_vti_pvt/
_vti_pvt/administrator.pwd
_vti_pvt/administrators.pwd
_vti_pvt/authors.pwd
_vti_pvt/service.pwd
_vti_pvt/shtml.exe
_vti_pvt/users.pwd
_vti_inf.html
_vti_script
_vti_txt
web/
web.config
_WEB_INF/
WEB-INF/web.xml
WebSer~1
webpub/
winnt/
wwwroot/
x.cfm
x.htw
x.htx
x.ida
x.ida?AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=X
x.idc
x.idq
x.pl
x.shtml
con/
aux/
con.aspx
aux.aspx
@@ -0,0 +1,13 @@
compass/logon.jsp
databasenotes.html
flash/java/javabean/FlashJavaBean.html
jrunscripts
jstl-war/index.html
SmarTicketApp/index.html
techniques/servlets/index.html
travelnet/home.jsp
WEB-INF/webapp.properties
WEB-INF/web.xml
worldmusic/action/catalog
worldmusic/action/cdlist
ws-client/loanCalculation.jsp
@@ -0,0 +1,35 @@
admin-serv
admin-serv/config/admpw
admpw
agents
bin
ca
cgi-bin
config
dirb_random.cgi
dirb_random.jsp
dirb_random.shtml
docs
dsgw
help
index.html
jsp
manual
mc-icons
netshare
ns-icons
publisher
?Publisher
search
search-ui
servlet
servlets
?wp-cs-dump
?wp-html-rend
?wp-start-ver
?wp-stop-ver
?wp-uncheckout
?wp-usr-prop
?wp-ver-diff
?wp-verify-link
?wp-ver-info
+5 -1
View File
@@ -45,6 +45,7 @@ Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](h
Reference: https://github.com/irsdl/IIS-ShortName-Scanner
Discussion: https://github.com/danielmiessler/SecLists/pull/783
<<<<<<< HEAD
Date of last update: Jun 27, 2022
@@ -61,4 +62,7 @@ Date of last wordlist update: Feb 27, 2014
Use for: Fuzzing for common filepaths in webpages created with **[Apache Axis](https://axis.apache.org/axis/)**
Date of the first release of Apache Axis: [2002-10-07](https://jbossas.jboss.org/downloads/)
Date of the last release of Apache Axis: 2006-04-22
Date of the last release of Apache Axis: 2006-04-22
=======
Date of last update: Jun 27, 2022
>>>>>>> 0a6cbb9c (feat(docs): Moved Web-Server wordlists into their own directory)