weyne/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2026-08-11 19:57:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,863 Commits 2 Branches 31 Tags
1a99a67b99bcb89759eb2fcc25abd9b15bed8556
Commit Graph

501 Commits

Author SHA1 Message Date
J-GainSec 8cf0fbdc71 Update and rename top-apk-params.txt to url-params_from-top-55-most-popular-apps.txt 
Updated name
 2022-06-28 15:15:08 +02:00
J-GainSec 06b0cddb2a Create forefront-identity-management 
Sourced from https://raw.githubusercontent.com/GainSec/TreeHouse-Wordlists/master/Microsoft-Forefront-Identity-Management-2010.txt

Wordlist for Microsoft Forefront Identity Management 2010
 2022-06-27 19:25:35 +02:00
J-GainSec 6a191793da Create iis-systemweb.txt 
Sourced from https://github.com/GainSec/TreeHouse-Wordlists/blob/master/IIS_Systemweb_fuzz-WL.txt

A IIS /system_web/ wordlist.
 2022-06-27 19:20:19 +02:00
J-GainSec 051d84c9e7 Create sharepoint.txt 
Sourced from https://github.com/GainSec/TreeHouse-Wordlists/blob/master/Microsoft%20SharePoint.txt

A Microsoft Sharepoint wordlist
 2022-06-27 19:18:05 +02:00
J-GainSec 9a6b80ed19 Create top-apk-params.txt 
Parameters from the Top 55 Android applications.
 2022-06-27 19:06:01 +02:00
PinkDev1 ba70a134d9 raft-small-words.txt: Added more source code versioning systems 
Source: https://nitter.kavin.rocks/intigriti/status/1533050946212839424
 2022-06-23 19:36:36 -03:00
Pham Sy Minh 355b691d5e Update dirsearch.txt 2022-06-18 13:52:57 +07:00
cyberpathogen2018 ab7098789d Fixed typo on line 26 
typo could result in false negative results.
 2022-04-30 23:19:40 -04:00
GitHub Action 4eb28683ab [Github Action] Updated combined_words.txt 2022-04-26 16:51:13 +00:00
GitHub Action 939734974b [Github Action] Updated combined_directories.txt 2022-04-26 16:33:54 +00:00
g0tmi1k 9bf9f2ea2a Merge pull request #696 from ItsIgnacioPortal/master 
Create universally useful combined web discovery wordlists which auto-update
 2022-04-26 17:32:16 +01:00
g0tmi1k 2e82613b9b Merge pull request #712 from righettod/master 
Sync with param-miner master repository.

1. Take content of the file **params** from the [PortSwigger/param-miner](https://github.com/PortSwigger/param-miner/blob/master/resources/params) repository (master branch).
2. Take the content of the file **burp-parameter-names.txt** from the [SecLists](https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/burp-parameter-names.txt) repository (master branch).
3. Unify the both content removing the duplicates via `cat params  burp-parameter-names.txt | sort -u > burp-parameter-names.txt`.
4. Add the parameter named **api-version** found into this [blog post](https://medium.com/xm-cyber/10-ways-of-gaining-control-over-azure-function-apps-7e7b84367ce6) about attacking Azure function apps.
 2022-04-26 17:25:07 +01:00
Ben M Stokland a7d0fc30a1 Add Hangfire console 
https://docs.hangfire.io/en/latest/configuration/using-dashboard.html
https://www.shodan.io/search?query=http.title%3A%22hangfire%22
 2022-04-20 21:32:18 +02:00
Anatoliy dcb3b852f9 Add files via upload 2022-04-13 23:44:43 +03:00
Dominique RIGHETTO ac544a1876 Sync with param-miner master repo 2022-04-10 10:04:13 +02:00
PinkDev1 2147ad87f7 quickhits.txt: restored to its initial state 
My previous two commits should've been on a different branch, Woops
 2022-02-21 06:41:14 +00:00
PinkDev1 66672f7299 quickhits.txt: Added more files 
Extracted from ShhGit: https://github.com/eth0izzle/shhgit/blob/master/config.yaml
 2022-02-21 06:34:36 +00:00
PinkDev1 58df3b3401 quickhits.txt: Removed trailing "/" 2022-02-21 06:32:19 +00:00
chashtag a6f336de8c removed non php shells 2022-02-09 21:42:25 -05:00
chashtag 6428e57575 Added more we shells 
Removed spaces from file name
 2022-02-09 21:37:00 -05:00
g0tmi1k 168584fdc6 Merge pull request #651 from cbk914/master 
Spring paths update
 2022-02-02 23:41:04 +00:00
Paul Werther 8b17578f93 add opcache to raft large directory list, #683 2022-02-01 15:32:17 +01:00
g0tmi1k 58370984a4 Merge pull request #687 from righettod/master 
Add "h2-console" word

https://mp.weixin.qq.com/s/Yn5U8WHGJZbTJsxwUU3UiQ
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console
https://www.shodan.io/search?query=http.title%3A%22H2+Console%22
 2022-01-31 23:22:06 +00:00
g0tmi1k 2dac179038 Merge pull request #685 from wdahlenburg/master 
Adding Spring Boot Gateway Actuator

https://wya.pl/2021/12/20/bring-your-own-ssrf-the-gateway-actuator/
 2022-01-31 23:20:57 +00:00
PinkDev1 90a1f6ad0a Delete test.txt 2022-01-29 06:24:47 +00:00
PinkDev1 136146f3ef Create README.md at Discovery/Web-Content 
I feel like every folder on this repo should have a README. Some wordlists have very confusing names
 2022-01-29 06:23:04 +00:00
GitHub Action 590c1e39ed [Github Action] Updated combined_words.txt 2022-01-29 06:07:16 +00:00
PinkDev1 35149384ca This is a github action test 2022-01-29 06:06:05 +00:00
GitHub Action 07375693f8 [Github Action] Updated combined_directories.txt 2022-01-29 06:05:17 +00:00
PinkDev1 c5857eefaf Delete combined_words.txt 2022-01-29 06:04:02 +00:00
GitHub Action 7271aab5ab [Github Action] Updated combined_words.txt 2022-01-29 05:48:35 +00:00
PinkDev1 b2ee580771 This is a github action test 2022-01-29 05:47:26 +00:00
PinkDev1 4158fd7b53 Delete combined_words.txt 2022-01-29 05:47:05 +00:00
PinkDev1 8b78386e0f This is a github action test 2022-01-29 05:43:30 +00:00
GitHub Action 2fcef417cc [Github Action] Updated combined_words.txt 2022-01-29 05:35:07 +00:00
PinkDev1 3ee621ca17 This is a github action test 2022-01-29 05:33:55 +00:00
PinkDev1 2d6d06d534 This is a github action test 2022-01-29 05:25:09 +00:00
PinkDev1 c3392900fe This is a github action test 2022-01-29 05:21:46 +00:00
PinkDev1 5cfb4fc8a5 This is a github action test 2022-01-29 05:12:38 +00:00
Dominique RIGHETTO 22908368be Add "h2-console" word 2022-01-08 13:45:09 +01:00
cbk914 c618890458 Merge branch 'danielmiessler:master' into master 2021-12-21 21:43:48 +01:00
Wyatt Dahlenburg ecf264f825 Adding the springboot gateway actuator 2021-12-20 15:25:09 -06:00
Varun Kakumani 31a89fd18d Added latest years to dictionary 2021-12-02 02:04:03 +05:30
g0tmi1k 23469eb06f Merge pull request #633 from basubanakar/patch-1 
Update nginx.txt
 2021-11-24 10:00:07 +00:00
g0tmi1k c129a01483 Merge pull request #640 from mxrch/patch-1 
adding "dismiss" to big.txt
 2021-11-24 09:59:49 +00:00
g0tmi1k d1a222afff Merge pull request #649 from PinkDev1/master 
Many more scopes, and cleanup of oauth-oidc-scopes.txt

- https://developers.google.com/identity/protocols/oauth2/scopes
- https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps
- https://api.slack.com/legacy/oauth-scopes
- https://developers.dropbox.com/oauth-guide 
- https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims
 2021-11-24 09:57:54 +00:00
g0tmi1k 94f8cd291e Merge pull request #659 from righettod/feature_enrich_jenkins 
Add new endpoints to the jenkins dict.

Source: https://www.jenkins.io/download/
 2021-11-24 09:54:24 +00:00
Dirk Wetter 6e13335da2 Avoid 301 
trailing slash is needed here
 2021-11-08 17:06:31 +01:00
Dirk Wetter 5439c5ee29 Create hashicorp-vault.txt 
see https://www.vaultproject.io/api/system/seal 

Had to close #665 as leading v1 was missing. This one works (confirmed myself)
 2021-11-08 16:17:03 +01:00
PinkDev1 61c5f5a018 Added a couple of scopes 
https://infosecwriteups.com/how-did-i-earned-6000-from-tokens-and-scopes-in-one-day-12f95c6bf8aa?source=rss----7b722bfd1b8d---4&gi=1e1df8e602a6
 2021-10-18 01:36:33 +00:00