weyne/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists.git synced 2026-07-24 13:59:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,561 Commits 2 Branches 31 Tags
2b5942e92f6a40ca1a87b860d095ca84ec50f276
Commit Graph

1561 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
g0tmi1k 2b5942e92f Merge pull request #850 from n0kovo/danish_wordlists 
Add misc Danish wordlists

Source: https://github.com/n0kovo/danish-wordlists
 2023-03-09 12:04:49 +00:00
g0tmi1k d45a87ecaf Merge pull request #853 from cosad3s/master 
Add PHP magic methods list

Source: https://www.php.net/manual/en/language.oop5.magic.php
 2023-03-09 12:00:43 +00:00
g0tmi1k 6102f31b24 Merge pull request #855 from Pri3st/update-1 
Added some commonly used rotated corpotate passwords.
 2023-03-09 12:00:22 +00:00
g0tmi1k 734b6556ab Merge pull request #857 from akatora28/patch-1 
Add .hta to web-extensions.txt
 2023-03-09 11:59:22 +00:00
Adam Katora 3f7ca8a35d Add .hta to web-extensions.txt 2023-02-25 21:09:55 -05:00
Marios K. Pappas b8a5b67a5a Added some commonly used rotated passwords. 
This wordlist contains some commonly used passwords that can be found in O365, OWA, and Active Directory environments. They are oriented toward password spraying once the tester gets hold of a list of valid email addresses. The wordlist can be easily modified (e.g testers can change the COMPANY SPORTS_TEAM/HOBBY, LOCATION, and DEPARTMENT values to match their current target).
 2023-02-22 19:42:58 +02:00
Sébastien Copin 18120d94f2 Add PHP magic methods list 
See: https://www.php.net/manual/en/language.oop5.magic.php
 2023-02-21 21:01:07 +01:00
n0kovo a11cdca317 Change directory name 2023-02-18 03:04:40 +01:00
n0kovo 1d4d11d07b Add misc Danish wordlists 2023-02-18 03:02:32 +01:00
g0tmi1k decd3cb559 Merge pull request #831 from g0tmi1k/master 
Update contributors (2022.4)
2022.4 		2022-11-22 12:56:36 +00:00
g0t mi1k c44e49aa3c Update contributors (2022.4) 2022-11-22 12:54:06 +00:00
g0tmi1k 7575cbdf93 Merge pull request #828 from CountablyInfinite/master 
Added content discovery for Liferay DXP default portlets
 2022-11-22 12:24:31 +00:00
g0tmi1k 9df8137868 Merge pull request #825 from its0x08/patch-2 
Dedupe wordlists
 2022-11-22 12:23:09 +00:00
g0tmi1k cd30475c1a Merge pull request #824 from cosad3s/master 
fuzz-Bo0oM.txt: "WAF friendly" version
 2022-11-22 12:22:36 +00:00
g0tmi1k 65a2170f83 Merge pull request #822 from ItsIgnacioPortal/etc_files_github_action 
Fixed etc files github action
 2022-11-22 12:20:55 +00:00
g0tmi1k 88552f1608 Merge pull request #804 from 0xbuz3R/patch-1 
Update js.txt
 2022-11-22 12:16:37 +00:00
g0tmi1k ad92e2255c Merge pull request #817 from ItsIgnacioPortal/master 
Fix github action "Wordlist Updater - Awesome list of secrets in environment variables"
 2022-11-22 12:16:00 +00:00
g0tmi1k eb3803c324 Merge pull request #815 from hakxcore/patch-1 
Update CommonAdminBase64.txt
 2022-11-22 12:15:19 +00:00
g0tmi1k b8b0cde981 Merge pull request #814 from xmagor/master 
Update LFI-Jhaddix.txt
 2022-11-22 12:14:41 +00:00
g0tmi1k ca9d413d7e Merge pull request #813 from abhishekmorla/master 
added new backupfiles in wordpress fuzz list

Source: https://www.linkedin.com/feed/update/urn:li:activity:6979486318774923264/
 2022-11-22 12:14:19 +00:00
g0tmi1k 8d52809a0a Merge pull request #812 from tacticthreat/patch-1 
Create hashicorp-consul-api.txt

Source: HashiCorp documentation
 2022-11-22 12:13:03 +00:00
g0tmi1k e870061b86 Merge pull request #811 from tacticthreat/patch-2 
Create salesforce-aura-objects.txt

Source: Salesforces' documentation
 2022-11-22 12:12:18 +00:00
g0tmi1k 4296f91216 Merge pull request #810 from gypsydiver/wp-plugins-update 
add site-editor and mail-masta to wp-plugins.fuzz.txt
 2022-11-22 12:11:39 +00:00
g0tmi1k 517c44b24e Merge pull request #808 from InTruder-Sec/master 
Added more API directories for web application  enumeration
 2022-11-22 12:10:51 +00:00
g0tmi1k 2ce0271683 Merge pull request #807 from righettod/feature_update_springboot 
[spring-boot.txt] Add new endpoints

- https://docs.spring.io/spring-boot/docs/current/reference/html/application-properties.html#application-properties.actuator.management.server.base-path
- https://docs.spring.io/spring-boot/docs/current/reference/html/actuator.html#actuator.endpoints
 2022-11-22 12:09:25 +00:00
g0tmi1k 76d436287d Merge pull request #805 from its0x08/patch-1 
chore: Add WEB-INF list

Source:
- https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3
- https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml
- https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java
 2022-11-22 12:08:32 +00:00
g0tmi1k f2dda11292 Merge pull request #803 from vah13/patch-1 
update default-passwords.csv

Source: https://redrays.io/cve-2020-6369-patch-bypass/
 2022-11-22 12:06:44 +00:00
g0tmi1k ad20e71dbc Merge pull request #801 from righettod/feature_adobe_aem 
[AdobeCQ-AEM.txt] Cleanup and enrichment.

Source: 

- https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/getting-started/security-checklist.html#restrict-access
- https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#testing-dispatcher-security
 2022-11-22 12:05:49 +00:00
g0tmi1k 56c8071b6d Merge pull request #800 from righettod/feature_gha_check_file_slash 
Add Github workflow to check for entries starting with "/".
 2022-11-22 12:02:46 +00:00
g0tmi1k 2752f1bf21 Merge pull request #746 from cyberpathogen2018/patch-1 
Fixed typo on line 26

Source: https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/
 2022-11-22 12:00:42 +00:00
g0tmi1k 8d08bb324d Merge pull request #798 from rodnt/patch-1 
Spring Boot RCE involving JMX enabled

Source: https://github.com/pyn3rd/Spring-Boot-Vulnerability#0x05-spring-boot-rce-involving-jmx-enabled
 2022-11-22 11:58:45 +00:00
CountablyInfinite 59ca9892ba added content discovery for liferay dxp portlets 2022-11-17 20:19:41 +01:00
0x08 5a4acd41bd fix: Dedupe wordlist 2022-11-07 13:01:06 +03:00
0x08 2b6d44ccc4 fix: Dedupe wordlist 2022-11-07 12:34:57 +03:00
0x08 256f4f7d35 fix: Dedupe wordlist 2022-11-07 12:32:42 +03:00
0x08 21b131cd57 fix: Dedupe wordlist 2022-11-07 12:23:37 +03:00
0x08 b9a53f09be fix: Dedupe wordlist 
- Removed duplicated entries.
 2022-11-07 12:18:49 +03:00
0x08 f5cbff84dc Merge branch 'danielmiessler:master' into patch-1 2022-11-03 12:58:32 +03:00
g0tmi1k 74a331a039 [Github Action] Updated LFI-etc-files-of-all-linux-packages.txt 2022-11-01 20:38:52 +00:00
Sébastien Copin db6c286085 fuzz-Bo0oM.txt: "WAF friendly" version 
sed  -r '/(passwd|.htaccess|.asa|.ini|var\/log|%252e%252e|%2e%2e|^\..+)/d' ./fuzz-Bo0oM.txt > ./fuzz-Bo0oM-friendly.txt

Tested against Akamai. For less "Access Denied" issues.
 2022-11-01 16:54:15 +01:00
Dominique RIGHETTO fa80ebcc92 Remove test data 2022-11-01 16:09:57 +01:00
Dominique RIGHETTO 21009d0f90 Update default_cics_transactions.txt 2022-11-01 16:07:41 +01:00
Dominique RIGHETTO 4f9d7ea8f9 Fix error 2022-11-01 16:07:27 +01:00
Dominique RIGHETTO ee7654154f Update default_cics_transactions.txt 2022-11-01 16:05:44 +01:00
Dominique RIGHETTO d29e1b281e Update check-file-for-starting-slash 2022-11-01 16:05:09 +01:00
Dominique RIGHETTO 2522c0e676 Update default_cics_transactions.txt 2022-11-01 16:02:44 +01:00
Dominique RIGHETTO 0b84c0180c Fix error 2022-11-01 16:02:23 +01:00
Dominique RIGHETTO 03fcf37318 Update default_cics_transactions.txt 2022-11-01 15:58:01 +01:00
Dominique RIGHETTO 6f084283ff Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:57:43 +01:00
Dominique RIGHETTO 24f756e4b9 Update default_cics_transactions.txt 2022-11-01 15:56:15 +01:00