6575cb17ac
Merge pull request #1 from aadarsh-screamy/aadarsh-screamy-patch-1
...
Added tlds.
2022-05-11 18:48:57 +05:30
b5e43148d2
Added tlds.
2022-05-11 18:47:43 +05:30
697ff095b7
Add Dysco(Dynamic PHP Shell Command for RCE)
...
Dysco(Dynamic PHP Shell Command for RCE). This is example PHP Shell with support for dynamic RCE command, it's useful when you are don't know which php function is disabled.
2022-05-06 01:42:28 +07:00
9255b8090b
Converting 500-worst-passwords.txt.bz2 to .txt
2022-05-05 19:24:56 +04:30
b5d309c4d0
README.md: Added 'Cook' to related projects
2022-05-03 04:16:45 -03:00
3369b7df87
Update country-codes.txt
...
Added uppercase codes
2022-04-26 19:50:07 +02:00
4eb28683ab
[Github Action] Updated combined_words.txt
2022-04-26 16:51:13 +00:00
f5fa9786d1
Merge pull request #717 from g0tmi1k/release
...
Update for 2022.2
2022-04-26 17:49:00 +01:00
515d85b83c
Update for 2022.2
2022-04-26 17:46:18 +01:00
939734974b
[Github Action] Updated combined_directories.txt
2022-04-26 16:33:54 +00:00
9bf9f2ea2a
Merge pull request #696 from ItsIgnacioPortal/master
...
Create universally useful combined web discovery wordlists which auto-update
2022-04-26 17:32:16 +01:00
0db72b1dfc
Merge pull request #707 from zevlag/patch-1
...
Add Baicells default creds from CVE-2022-24693
Source: https://github.com/advisories/GHSA-7vmv-mpx6-985j
2022-04-26 17:26:41 +01:00
635fadadf8
Merge pull request #708 from D3vil0per/patch-2
...
Added methods from IANA source
Source: http://www.iana.org/assignments/http-methods/http-methods.xhtml#methods
2022-04-26 17:26:16 +01:00
839b262087
Merge pull request #709 from azams/master
...
Add another obfuscated php shell and check the disable_functions.
2022-04-26 17:25:56 +01:00
2e82613b9b
Merge pull request #712 from righettod/master
...
Sync with param-miner master repository.
1. Take content of the file **params** from the [PortSwigger/param-miner](https://github.com/PortSwigger/param-miner/blob/master/resources/params ) repository (master branch).
2. Take the content of the file **burp-parameter-names.txt** from the [SecLists](https://github.com/danielmiessler/SecLists/blob/master/Discovery/Web-Content/burp-parameter-names.txt ) repository (master branch).
3. Unify the both content removing the duplicates via `cat params burp-parameter-names.txt | sort -u > burp-parameter-names.txt`.
4. Add the parameter named **api-version** found into this [blog post](https://medium.com/xm-cyber/10-ways-of-gaining-control-over-azure-function-apps-7e7b84367ce6 ) about attacking Azure function apps.
2022-04-26 17:25:07 +01:00
c12ada51d2
Merge pull request #714 from indigo-sadland/master
...
Unicode encoded LFI payload
2022-04-26 17:22:03 +01:00
115aace394
Merge pull request #715 from camercu/patch-1
...
fix logic bug setting port number
2022-04-26 17:21:21 +01:00
56a9cf192b
Merge pull request #716 from stoben/master
...
Add Hangfire console
Source: https://docs.hangfire.io/en/latest/configuration/using-dashboard.html
https://www.shodan.io/search?query=http.title%3A%22hangfire%22
2022-04-26 17:20:45 +01:00
a7d0fc30a1
Add Hangfire console
...
https://docs.hangfire.io/en/latest/configuration/using-dashboard.html
https://www.shodan.io/search?query=http.title%3A%22hangfire%22
2022-04-20 21:32:18 +02:00
60ac224950
fix logic bug setting port number
2022-04-18 20:54:43 -04:00
694b4873eb
Nginx merge slashes path traversal vulnerability payload
2022-04-18 00:26:27 -07:00
46671534b5
unicode encoded lfi payload
2022-04-16 19:26:33 +03:00
6117632c0d
unicode encoded lfi payload
2022-04-16 19:05:01 +03:00
c49917ce1a
unicode encoded lfi payload
2022-04-16 18:58:45 +03:00
ce75be351d
unicode encoded lfi payload
2022-04-16 18:50:38 +03:00
dcb3b852f9
Add files via upload
2022-04-13 23:44:43 +03:00
ac544a1876
Sync with param-miner master repo
2022-04-10 10:04:13 +02:00
090addc816
Add another obfuscated php shell.
2022-04-02 05:25:23 -07:00
7a42879a46
Added methods from IANA source
...
Source: http://www.iana.org/assignments/http-methods/http-methods.xhtml#methods
2022-04-02 14:25:20 +02:00
806526b1dd
Add Baicells default creds from CVE-2022-24693
2022-03-30 10:37:15 -04:00
3ad6e8ff8c
Create country-codes.txt
...
According to the ISO 3166-1 standard. Useful for fuzzing elements like usernames as 'support-us' 'admin.us' 'helpdesk-US' and so on.
2022-03-26 22:54:02 +01:00
a8d0850534
added devops extensions - .text, .qa. etc.
2022-03-03 11:23:21 -05:00
2147ad87f7
quickhits.txt: restored to its initial state
...
My previous two commits should've been on a different branch, Woops
2022-02-21 06:41:14 +00:00
66672f7299
quickhits.txt: Added more files
...
Extracted from ShhGit: https://github.com/eth0izzle/shhgit/blob/master/config.yaml
2022-02-21 06:34:36 +00:00
58df3b3401
quickhits.txt: Removed trailing "/"
2022-02-21 06:32:19 +00:00
a6f336de8c
removed non php shells
2022-02-09 21:42:25 -05:00
6428e57575
Added more we shells
...
Removed spaces from file name
2022-02-09 21:37:00 -05:00
168584fdc6
Merge pull request #651 from cbk914/master
...
Spring paths update
2022-02-02 23:41:04 +00:00
c9ffe7f73c
Merge pull request #656 from A1vinSmith/master
...
Update content-type.txt
https://cweiske.de/tagebuch/php-mimetype.htm
2022-02-02 23:40:50 +00:00
c54e07f5d8
Merge pull request #671 from righettod/feature_issue_654
...
PR for issue 654 (environment identifiers dict)
2022-02-02 23:39:00 +00:00
6a51a9b354
Merge pull request #675 from RAOexe/master
...
Add: Top common Indian forenames
2022-02-02 23:37:48 +00:00
52fbc4a631
Merge pull request #680 from 5tr1x/patch-3
...
Create months.txt
for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:36:41 +00:00
bf2d2a996d
Merge pull request #681 from 5tr1x/patch-4
...
Create days.txt
for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:36:21 +00:00
0d9870d28d
Merge pull request #679 from 5tr1x/patch-2
...
Create seasons.txt
for i in `cat $1`; do echo ${i}; echo ${i}2019; echo ${i}2020; echo ${i}2021; echo ${i}2022; echo ${i}1; echo ${i}123; done >> n
for i in `cat n`; do echo ${i}; echo ${i}'!'; echo ${i}'@'; echo ${i}'#'; echo ${i}'$'; echo ${i}'%'; echo ${i}'^'; echo ${i}'&'; echo ${i}'*'; echo ${i}'?'; done >> s
hashcat s -r /usr/share/hashcat/rules/leetspeak.rule --stdout > hc
wordlister --input s --perm 1 --min 4 --max 48 --leet &>/dev/null
mv output.txt wl
cat hc wl | sort -u > vvv
wordlister --input vvv --perm 1 --min 4 --max 48 --cap --up &>/dev/null
cat output.txt | sort -u > $2
rm n s hc wl vvv output.txt
2022-02-02 23:35:58 +00:00
a537fd9ad4
Merge pull request #693 from giper45/master
...
Added italian subdomains
2022-02-02 23:34:42 +00:00
2e4017493f
Merge pull request #697 from elitejake/master
...
Add wordlists from the Moby Project
https://en.wikipedia.org/wiki/Moby_Project
2022-02-02 23:33:14 +00:00
aadf026ea2
Merge pull request #698 from evait-security/master
...
add opcache to raft large directory list, ref: #683
Source: https://github.com/amnuts/opcache-gui
2022-02-02 23:32:00 +00:00
8b17578f93
add opcache to raft large directory list, #683
2022-02-01 15:32:17 +01:00
fe7c9dfe3d
Create README.md
2022-02-01 09:13:17 +00:00
cecdff7af0
Create README.md
2022-02-01 09:12:09 +00:00
ScreaM