63b85cbdf1
Update os-names-mutation.txt
2023-11-03 09:33:14 +08:00
31f04833aa
Os-names but with mutation
2023-11-03 09:29:09 +08:00
764155f83f
Update os-names.txt
...
stripped extra space
space
2023-11-03 09:12:13 +08:00
1588c54106
Create os-names.txt
2023-11-03 09:04:27 +08:00
afc5439c00
Merge pull request #870 from ivan-sincek/master
...
Hexadecimal ASCII and Hexadecimal Unicode
Source: https://github.com/ivan-sincek/amounts
2023-05-16 07:51:53 +01:00
fb4298a4cb
Update LFI-gracefulsecurity-linux.txt
2023-04-23 22:00:00 -04:00
2121ac1bbb
Hexadecimal ASCII and Hexadecimal Unicode
...
Added few more representations of numerical values.
2023-04-18 13:44:57 +02:00
18120d94f2
Add PHP magic methods list
...
See: https://www.php.net/manual/en/language.oop5.magic.php
2023-02-21 21:01:07 +01:00
cd30475c1a
Merge pull request #824 from cosad3s/master
...
fuzz-Bo0oM.txt: "WAF friendly" version
2022-11-22 12:22:36 +00:00
db6c286085
fuzz-Bo0oM.txt: "WAF friendly" version
...
sed -r '/(passwd|.htaccess|.asa|.ini|var\/log|%252e%252e|%2e%2e|^\..+)/d' ./fuzz-Bo0oM.txt > ./fuzz-Bo0oM-friendly.txt
Tested against Akamai. For less "Access Denied" issues.
2022-11-01 16:54:15 +01:00
ec227174cd
Update LFI-Jhaddix.txt
...
Double URL-encode '../' with %252e%252e%252f
2022-09-27 16:36:41 -05:00
b5116c1031
Update LFI-gracefulsecurity-windows.txt
...
Added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Windows ).
2022-08-02 16:25:02 +06:00
b49003fdbc
Merge pull request #785 from nicholas-long/master
...
Create list of files in that could go in /etc for fuzzing
2022-08-02 07:22:22 +01:00
7c82ca12db
Merge pull request #702 from TheTechromancer/master
...
Added devops extensions - .test, .qa., etc. to Fuzzing/extensions-Bo0oM.txt
2022-08-02 06:59:33 +01:00
4c29963899
Merge pull request #706 from D3vil0per/patch-1
...
Create country-codes.txt
Source: https://www.iso.org/obp/ui/#search
2022-08-02 06:59:08 +01:00
c0be11b9e4
Merge pull request #769 from ivan-sincek/master
...
Fuzz amounts, quantities, or any other numerical values.
Source: https://research.nccgroup.com/wp-content/uploads/2020/07/common_security_issues_in_financially-orientated_web.pdf
https://github.com/ivan-sincek/amounts
2022-08-02 06:43:14 +01:00
3217b9b8f2
Merge pull request #774 from bigshika/envIds
...
Add common Environment identifiers
2022-08-02 06:39:31 +01:00
294ee04ad3
Update LFI-gracefulsecurity-linux.txt
...
Removed 3 duplicates (/etc/passwd, /etc/mod, and /etc/php4/apache2/php.ini). Then added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Linux ).
2022-07-27 21:16:50 +06:00
ca4f454d13
update auto commit message, rename wordlist and references to it, title case in markdown headings
2022-07-25 16:26:11 +00:00
5850a8a1fb
update autogenerated files
2022-07-12 23:27:17 +00:00
3c181f15fe
all files installed into etc by all deb packages from the debian and ubuntu apt repositories
2022-06-28 00:57:39 -05:00
795bd9e37b
Add sandbox, sb and stage
2022-06-27 12:31:20 +12:00
f1613446e9
Add common 2 letter environment abbreviations
2022-06-23 14:48:28 +12:00
28152a11f3
Added README
2022-06-21 08:05:20 +02:00
1753648b46
More Wordlists Added 2nd
2022-06-20 23:54:15 +02:00
0e73109916
More Wordlists Added
2022-06-20 23:49:32 +02:00
d9c1ab4d08
Update Amounts
2022-06-20 22:01:18 +02:00
45abeea9ae
Added Amounts
2022-06-20 21:30:28 +02:00
3369b7df87
Update country-codes.txt
...
Added uppercase codes
2022-04-26 19:50:07 +02:00
635fadadf8
Merge pull request #708 from D3vil0per/patch-2
...
Added methods from IANA source
Source: http://www.iana.org/assignments/http-methods/http-methods.xhtml#methods
2022-04-26 17:26:16 +01:00
694b4873eb
Nginx merge slashes path traversal vulnerability payload
2022-04-18 00:26:27 -07:00
46671534b5
unicode encoded lfi payload
2022-04-16 19:26:33 +03:00
6117632c0d
unicode encoded lfi payload
2022-04-16 19:05:01 +03:00
c49917ce1a
unicode encoded lfi payload
2022-04-16 18:58:45 +03:00
ce75be351d
unicode encoded lfi payload
2022-04-16 18:50:38 +03:00
7a42879a46
Added methods from IANA source
...
Source: http://www.iana.org/assignments/http-methods/http-methods.xhtml#methods
2022-04-02 14:25:20 +02:00
3ad6e8ff8c
Create country-codes.txt
...
According to the ISO 3166-1 standard. Useful for fuzzing elements like usernames as 'support-us' 'admin.us' 'helpdesk-US' and so on.
2022-03-26 22:54:02 +01:00
a8d0850534
added devops extensions - .text, .qa. etc.
2022-03-03 11:23:21 -05:00
c54e07f5d8
Merge pull request #671 from righettod/feature_issue_654
...
PR for issue 654 (environment identifiers dict)
2022-02-02 23:39:00 +00:00
9e778c6046
Add results from FR + BE sub domains
2021-11-26 11:48:46 +01:00
f86abe0dde
Add new entries after extraction from LU domains from MAjestic file
...
See PR comment
2021-11-24 14:00:08 +01:00
3c543908bf
Add PURGE method
2021-11-24 11:19:38 +00:00
55dcca61cf
Sorting ASC
2021-11-24 11:57:48 +01:00
57fa66e37e
Enrich with results from auchan.lu
2021-11-24 11:46:57 +01:00
d68129fe2d
Add missing entries from sgbt.lu
2021-11-24 11:44:29 +01:00
9b653b08af
Enrich with sgbt.lu results
...
Cmd: `curl -sk "https://crt.sh/?q=sgbt.lu&output=json " | jq -r ".[].name_value" | cut -d'.' -f1 | sort -u`
2021-11-24 11:42:45 +01:00
6d37719fd4
Enrich with total.com sub domains results
...
Command: `curl -sk "https://crt.sh/?q=total.com&output=json " | jq -r ".[].name_value" | cut -d'.' -f1 | sort -u`
2021-11-24 11:41:17 +01:00
0c61f25372
Add UAG
2021-11-24 11:33:31 +01:00
9d3ac03fd0
Initial adding
2021-11-24 11:25:10 +01:00
6b00e5cf53
Fix formatting
2021-11-24 10:13:43 +00:00
Mo Langning