Commit Graph

37 Commits

Author SHA1 Message Date
ItsIgnacioPortal fdd59a8ee1 chore(wordlist): Renamed Windows LFI wordlist from adeadfed 2026-03-06 20:56:28 -03:00
ItsIgnacioPortal 320ef285f9 feat(wordlist): Added SOfensive LFI wordlist and removed redundant GracefulSecurity wordlist
Closes #1291

Co-authored-by: ghsdpolley <ghsdpolley@users.noreply.github.com>
2026-03-06 20:45:15 -03:00
ItsIgnacioPortal 233dd95550 chore(wordlist): Classify LFI wordlists by OS 2026-03-06 20:31:00 -03:00
Jhayrolandero 122cc78a22 feat(wordlist): Added /etc/apache2/.htpasswd to LFI fuzzing lists (PR #1223) 2025-06-29 12:19:43 -03:00
ola456 ad823b523e syntax:fix(wordlist): Fixed whitespace in "LFI-gracefulsecurity-windows.txt"
space > newline
2024-11-23 09:40:25 +01:00
exploide 6afacc2a9d LFI: added absolute C:\Windows\win.ini paths and web.config to LFI-Jhaddix.txt 2024-05-30 19:24:24 +02:00
Maksym Vatsyk 4e153fbc56 fix typo 2024-03-19 15:53:23 +01:00
Maksym Vatsyk 6e4f0e08a8 Add more paths with alternating separators 2024-03-19 15:52:52 +01:00
adeadfed d72aadd8ce add more valid windows paths 2024-03-12 21:04:56 +01:00
adeadfed 3c78d52e15 Add new dictionary for Windows LFI fuzzing 2024-03-05 15:11:59 +01:00
g0tmi1k 03002fbc27 Merge pull request #900 from nekonugget/master-1
Create OMI-Agent-Linux.txt

Source: https://github.com/nekonugget/lfi-stuff/blob/main/OMI-Agent-Linux.txt
2023-11-23 17:35:52 +00:00
g0tmi1k 0c8af0a18b Merge pull request #901 from stefanman125/patch-1
Update LFI-gracefulsecurity-linux.txt to include older SSH key format "ECDSA"
2023-11-23 17:33:38 +00:00
Ignacio J. Perez Portal 306339aff6 feat(wordlist): Added LFI-linux-and-windows_by-1N3@CrowdShield.txt
This wordlist has duplicate lines removed, and normalized Windows paths
2023-10-10 09:15:00 -03:00
Stefan 96940203b1 Update LFI-gracefulsecurity-linux.txt
Includes older SSH key format "ECDSA"
2023-09-06 14:21:17 -04:00
not main acc e36dfa24fa Create OMI-Agent-Linux.txt
from (my mistaken) issue: https://github.com/danielmiessler/SecLists/issues/891#issuecomment-1679646712
2023-08-20 23:57:17 +02:00
ClutchTech fb4298a4cb Update LFI-gracefulsecurity-linux.txt 2023-04-23 22:00:00 -04:00
Miguel Gómez ec227174cd Update LFI-Jhaddix.txt
Double URL-encode '../' with %252e%252e%252f
2022-09-27 16:36:41 -05:00
Taleb Qasem b5116c1031 Update LFI-gracefulsecurity-windows.txt
Added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Windows).
2022-08-02 16:25:02 +06:00
g0tmi1k b49003fdbc Merge pull request #785 from nicholas-long/master
Create list of files in that could go in /etc for fuzzing
2022-08-02 07:22:22 +01:00
Taleb Qasem 294ee04ad3 Update LFI-gracefulsecurity-linux.txt
Removed 3 duplicates (/etc/passwd, /etc/mod, and /etc/php4/apache2/php.ini). Then added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Linux).
2022-07-27 21:16:50 +06:00
Nicholas Long ca4f454d13 update auto commit message, rename wordlist and references to it, title case in markdown headings 2022-07-25 16:26:11 +00:00
nicholas-long 5850a8a1fb update autogenerated files 2022-07-12 23:27:17 +00:00
nicholas-long 3c181f15fe all files installed into etc by all deb packages from the debian and ubuntu apt repositories 2022-06-28 00:57:39 -05:00
indigo-sadland 694b4873eb Nginx merge slashes path traversal vulnerability payload 2022-04-18 00:26:27 -07:00
indigo-sadland 46671534b5 unicode encoded lfi payload 2022-04-16 19:26:33 +03:00
indigo-sadland 6117632c0d unicode encoded lfi payload 2022-04-16 19:05:01 +03:00
indigo-sadland c49917ce1a unicode encoded lfi payload 2022-04-16 18:58:45 +03:00
indigo-sadland ce75be351d unicode encoded lfi payload 2022-04-16 18:50:38 +03:00
Alex G 66e5827639 Add master.mdf MSSQL path to Windows LFI 2021-02-19 22:42:27 +01:00
g0tmi1k d76b8f6691 Merge pull request #452 from noraj/patch-1
Create LFI-gracefulsecurity-windows.txt

Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/
2020-06-12 09:57:44 +01:00
Alexandre ZANNI 7dd955a544 Create LFI-gracefulsecurity-linux.txt 2020-06-11 16:49:45 +02:00
Alexandre ZANNI 6945f3e779 Create LFI-gracefulsecurity-windows.txt 2020-06-11 16:48:39 +02:00
Karim Kanso 607c3293b4 strip trailing whitespace 2020-05-27 14:26:51 +01:00
kegan 54ac7074da add nested traversal strings for /etc/passwd 2020-05-18 18:12:12 -05:00
Antoine Guilbaud 13b1f18901 add a common windows lfi path 2020-04-15 12:49:42 +02:00
g0tmi1k a65f6bd665 Close #291 - Fix encoding issues
$ for x in $( find . -type f ); do iconv -f utf-8 -t utf-8 -c ${x} | sed '/^$/d' > tmp; mv tmp ${x}; done
2019-05-08 11:04:00 +01:00
g0tmi1k 3f2c0d33d2 Quick clean up of locations 2019-04-10 13:22:39 +01:00