Commit Graph

478 Commits

Author SHA1 Message Date
g0tmi1k 58370984a4 Merge pull request #687 from righettod/master
Add "h2-console" word

https://mp.weixin.qq.com/s/Yn5U8WHGJZbTJsxwUU3UiQ
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console
https://www.shodan.io/search?query=http.title%3A%22H2+Console%22
2022-01-31 23:22:06 +00:00
g0tmi1k 5a4d4f7ebc Merge pull request #686 from AddaxSoft/patch-2
added 8443, tomcat ssl
2022-01-31 23:21:24 +00:00
g0tmi1k 2dac179038 Merge pull request #685 from wdahlenburg/master
Adding Spring Boot Gateway Actuator

https://wya.pl/2021/12/20/bring-your-own-ssrf-the-gateway-actuator/
2022-01-31 23:20:57 +00:00
g0tmi1k 6dd17288aa Merge pull request #678 from righettod/feature_update_namelist
Add new sub domain names

https://github.com/righettod/toolbox-pentest-web/blob/master/scripts/generate-vhost-names-dict.sh
2022-01-31 23:09:45 +00:00
PinkDev1 90a1f6ad0a Delete test.txt 2022-01-29 06:24:47 +00:00
PinkDev1 136146f3ef Create README.md at Discovery/Web-Content
I feel like every folder on this repo should have a README. Some wordlists have very confusing names
2022-01-29 06:23:04 +00:00
GitHub Action 590c1e39ed [Github Action] Updated combined_words.txt 2022-01-29 06:07:16 +00:00
PinkDev1 35149384ca This is a github action test 2022-01-29 06:06:05 +00:00
GitHub Action 07375693f8 [Github Action] Updated combined_directories.txt 2022-01-29 06:05:17 +00:00
PinkDev1 c5857eefaf Delete combined_words.txt 2022-01-29 06:04:02 +00:00
GitHub Action 7271aab5ab [Github Action] Updated combined_words.txt 2022-01-29 05:48:35 +00:00
PinkDev1 b2ee580771 This is a github action test 2022-01-29 05:47:26 +00:00
PinkDev1 4158fd7b53 Delete combined_words.txt 2022-01-29 05:47:05 +00:00
PinkDev1 8b78386e0f This is a github action test 2022-01-29 05:43:30 +00:00
GitHub Action 2fcef417cc [Github Action] Updated combined_words.txt 2022-01-29 05:35:07 +00:00
PinkDev1 3ee621ca17 This is a github action test 2022-01-29 05:33:55 +00:00
PinkDev1 2d6d06d534 This is a github action test 2022-01-29 05:25:09 +00:00
PinkDev1 c3392900fe This is a github action test 2022-01-29 05:21:46 +00:00
PinkDev1 5cfb4fc8a5 This is a github action test 2022-01-29 05:12:38 +00:00
gx1 b5ad433f4d Added italian subdomains 2022-01-25 01:25:49 -05:00
Dominique RIGHETTO 22908368be Add "h2-console" word 2022-01-08 13:45:09 +01:00
cbk914 c618890458 Merge branch 'danielmiessler:master' into master 2021-12-21 21:43:48 +01:00
A.K 6757c71ffe added 8443, tomcat ssl 2021-12-21 11:43:25 +01:00
Wyatt Dahlenburg ecf264f825 Adding the springboot gateway actuator 2021-12-20 15:25:09 -06:00
Dominique RIGHETTO 9fab26bbb6 Add new sub domain names 2021-12-11 07:06:17 +01:00
Varun Kakumani 31a89fd18d Added latest years to dictionary 2021-12-02 02:04:03 +05:30
g0tmi1k 23469eb06f Merge pull request #633 from basubanakar/patch-1
Update nginx.txt
2021-11-24 10:00:07 +00:00
g0tmi1k c129a01483 Merge pull request #640 from mxrch/patch-1
adding "dismiss" to big.txt
2021-11-24 09:59:49 +00:00
g0tmi1k d1a222afff Merge pull request #649 from PinkDev1/master
Many more scopes, and cleanup of oauth-oidc-scopes.txt

- https://developers.google.com/identity/protocols/oauth2/scopes
- https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps
- https://api.slack.com/legacy/oauth-scopes
- https://developers.dropbox.com/oauth-guide 
- https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims
2021-11-24 09:57:54 +00:00
g0tmi1k 94f8cd291e Merge pull request #659 from righettod/feature_enrich_jenkins
Add new endpoints to the jenkins dict.

Source: https://www.jenkins.io/download/
2021-11-24 09:54:24 +00:00
Dirk Wetter 6e13335da2 Avoid 301
trailing slash is needed here
2021-11-08 17:06:31 +01:00
Dirk Wetter 5439c5ee29 Create hashicorp-vault.txt
see https://www.vaultproject.io/api/system/seal 

Had to close #665 as leading v1 was missing. This one works (confirmed myself)
2021-11-08 16:17:03 +01:00
PinkDev1 61c5f5a018 Added a couple of scopes
https://infosecwriteups.com/how-did-i-earned-6000-from-tokens-and-scopes-in-one-day-12f95c6bf8aa?source=rss----7b722bfd1b8d---4&gi=1e1df8e602a6
2021-10-18 01:36:33 +00:00
Dominique RIGHETTO 5c5c2815f2 Cleanup 2021-10-05 18:41:44 +02:00
Dominique RIGHETTO f009b45892 Add new endpoints 2021-10-05 18:40:57 +02:00
cbk914 f01e9aae74 Update spring-boot.txt 2021-09-07 05:44:45 +02:00
cbk914 1719a6af3d Update spring-boot.txt 2021-09-06 10:45:38 +02:00
cbk914 d35d281521 Updated Spring paths 2021-09-06 10:39:10 +02:00
PinkDev1 0bcb01ad6a Sorted and removed duplicates 2021-09-02 19:25:40 +00:00
PinkDev1 e737a0f96b Added officially recognized OpenID scopes
from https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims
2021-09-02 19:24:57 +00:00
PinkDev1 e1c0693292 Added dropbox-app oauth scopes
Scraped internally
2021-09-02 19:21:48 +00:00
PinkDev1 30b2c22d24 Removed scopes with nonces/temporary identifiers
I left `delete-after-date1619708000534-admin` because it seems to have a UNIX timestamp, so it *might* be useful.
2021-09-02 19:03:43 +00:00
PinkDev1 bb991ad09a Sorted and removed duplicates from oauth-oidc-scopes.txt 2021-09-02 19:00:44 +00:00
PinkDev1 647366b113 Added 155 scopes to oauth-oidc-scopes.txt
All of these were manually gathered from:
- https://developers.google.com/identity/protocols/oauth2/scopes
- https://docs.github.com/en/developers/apps/building-oauth-apps/scopes-for-oauth-apps
- https://api.slack.com/legacy/oauth-scopes
- https://dev.fitbit.com/build/reference/web-api/oauth2/#scope
2021-09-02 18:59:51 +00:00
g0tmi1k cb81804316 Merge pull request #647 from g0tmi1k/spaces
dos2unix
2021-08-28 21:36:19 +01:00
g0tmi1k 44523e27a8 Merge pull request #644 from han0x7300/issues-642
add "___graphql" to "Discovery/Web-Content/graphql.txt

https://www.gatsbyjs.com/docs/reference/graphql-data-layer/graphql-api/
https://www.gatsbyjs.com/docs/tutorial/part-4/
2021-08-28 21:31:10 +01:00
g0t mi1k 545e57b02d dos2unix 2021-08-28 21:29:32 +01:00
g0t mi1k efeb38808c Replace ' ' with ' ' (Empty Characters) 2021-08-28 21:05:13 +01:00
han0x7300 ecd9da9dc2 add ___graphql to Discovery/Web-Content/graphql.txt,https://github.com/danielmiessler/SecLists/issues/642 2021-08-28 11:44:02 +08:00
g0tmi1k e017d54a22 Merge pull request #643 from 5tr1x/patch-1
Create aem2.txt
2021-08-27 21:17:43 +01:00