Commit Graph

1518 Commits

Author SHA1 Message Date
g0tmi1k ca9d413d7e Merge pull request #813 from abhishekmorla/master
added new backupfiles in wordpress fuzz list

Source: https://www.linkedin.com/feed/update/urn:li:activity:6979486318774923264/
2022-11-22 12:14:19 +00:00
g0tmi1k 8d52809a0a Merge pull request #812 from tacticthreat/patch-1
Create hashicorp-consul-api.txt

Source: HashiCorp documentation
2022-11-22 12:13:03 +00:00
g0tmi1k e870061b86 Merge pull request #811 from tacticthreat/patch-2
Create salesforce-aura-objects.txt

Source: Salesforces' documentation
2022-11-22 12:12:18 +00:00
g0tmi1k 4296f91216 Merge pull request #810 from gypsydiver/wp-plugins-update
add site-editor and mail-masta to wp-plugins.fuzz.txt
2022-11-22 12:11:39 +00:00
g0tmi1k 517c44b24e Merge pull request #808 from InTruder-Sec/master
Added more API directories for web application  enumeration
2022-11-22 12:10:51 +00:00
g0tmi1k 2ce0271683 Merge pull request #807 from righettod/feature_update_springboot
[spring-boot.txt] Add new endpoints

- https://docs.spring.io/spring-boot/docs/current/reference/html/application-properties.html#application-properties.actuator.management.server.base-path
- https://docs.spring.io/spring-boot/docs/current/reference/html/actuator.html#actuator.endpoints
2022-11-22 12:09:25 +00:00
g0tmi1k 76d436287d Merge pull request #805 from its0x08/patch-1
chore: Add WEB-INF list

Source:
- https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3
- https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml
- https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java
2022-11-22 12:08:32 +00:00
g0tmi1k f2dda11292 Merge pull request #803 from vah13/patch-1
update default-passwords.csv

Source: https://redrays.io/cve-2020-6369-patch-bypass/
2022-11-22 12:06:44 +00:00
g0tmi1k ad20e71dbc Merge pull request #801 from righettod/feature_adobe_aem
[AdobeCQ-AEM.txt] Cleanup and enrichment.

Source: 

- https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/getting-started/security-checklist.html#restrict-access
- https://experienceleague.adobe.com/docs/experience-manager-dispatcher/using/configuring/dispatcher-configuration.html?lang=en#testing-dispatcher-security
2022-11-22 12:05:49 +00:00
g0tmi1k 56c8071b6d Merge pull request #800 from righettod/feature_gha_check_file_slash
Add Github workflow to check for entries starting with "/".
2022-11-22 12:02:46 +00:00
g0tmi1k 2752f1bf21 Merge pull request #746 from cyberpathogen2018/patch-1
Fixed typo on line 26

Source: https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/
2022-11-22 12:00:42 +00:00
g0tmi1k 8d08bb324d Merge pull request #798 from rodnt/patch-1
Spring Boot RCE involving JMX enabled

Source: https://github.com/pyn3rd/Spring-Boot-Vulnerability#0x05-spring-boot-rce-involving-jmx-enabled
2022-11-22 11:58:45 +00:00
0x08 f5cbff84dc Merge branch 'danielmiessler:master' into patch-1 2022-11-03 12:58:32 +03:00
g0tmi1k 74a331a039 [Github Action] Updated LFI-etc-files-of-all-linux-packages.txt 2022-11-01 20:38:52 +00:00
Dominique RIGHETTO fa80ebcc92 Remove test data 2022-11-01 16:09:57 +01:00
Dominique RIGHETTO 21009d0f90 Update default_cics_transactions.txt 2022-11-01 16:07:41 +01:00
Dominique RIGHETTO 4f9d7ea8f9 Fix error 2022-11-01 16:07:27 +01:00
Dominique RIGHETTO ee7654154f Update default_cics_transactions.txt 2022-11-01 16:05:44 +01:00
Dominique RIGHETTO d29e1b281e Update check-file-for-starting-slash 2022-11-01 16:05:09 +01:00
Dominique RIGHETTO 2522c0e676 Update default_cics_transactions.txt 2022-11-01 16:02:44 +01:00
Dominique RIGHETTO 0b84c0180c Fix error 2022-11-01 16:02:23 +01:00
Dominique RIGHETTO 03fcf37318 Update default_cics_transactions.txt 2022-11-01 15:58:01 +01:00
Dominique RIGHETTO 6f084283ff Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:57:43 +01:00
Dominique RIGHETTO 24f756e4b9 Update default_cics_transactions.txt 2022-11-01 15:56:15 +01:00
Dominique RIGHETTO 063b3f4593 Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:56:05 +01:00
Dominique RIGHETTO e8c5a5346b Update and rename check-file-for starting-slash to check-file-for-starting-slash 2022-11-01 15:55:59 +01:00
Dominique RIGHETTO cbf9e0ff56 Update default_cics_transactions.txt 2022-11-01 15:52:09 +01:00
Dominique RIGHETTO 08ef31d5d2 Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:51:53 +01:00
Dominique RIGHETTO 5a9dcad637 Create check-file-for starting-slash 2022-11-01 15:49:11 +01:00
Dominique RIGHETTO df2a292dbb Update default_cics_transactions.txt 2022-11-01 15:39:28 +01:00
Dominique RIGHETTO dcd04ba2f7 Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:39:18 +01:00
Dominique RIGHETTO 18e858ded3 Update default_cics_transactions.txt 2022-11-01 15:31:37 +01:00
Dominique RIGHETTO c0f3478eda Change approach 2022-11-01 15:31:27 +01:00
Dominique RIGHETTO 9047c31fdb Update default_cics_transactions.txt 2022-11-01 15:26:07 +01:00
Dominique RIGHETTO 5bc97eba06 Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:25:57 +01:00
Dominique RIGHETTO 0a7cb0d44e Update default_cics_transactions.txt 2022-11-01 15:23:05 +01:00
Dominique RIGHETTO f7841cffbc Update wordlist-validator_verify_entries_for_starting_with_slash.yml 2022-11-01 15:22:43 +01:00
Dominique RIGHETTO 3a6adeb274 Update default_cics_transactions.txt 2022-11-01 15:17:41 +01:00
Dominique RIGHETTO 3e8113fbad Add debug message 2022-11-01 15:17:07 +01:00
Dominique RIGHETTO 6fe2142da2 Update default_cics_transactions.txt 2022-11-01 15:12:36 +01:00
Dominique RIGHETTO 0bb7d481ed Add debug log 2022-11-01 15:08:50 +01:00
Dominique RIGHETTO 441c8f1c5f Upgrade actions component used 2022-11-01 15:05:55 +01:00
Dominique RIGHETTO 822c0d7055 Debug problem 2022-11-01 15:02:02 +01:00
0x08 5a241e18cb Merge branch 'danielmiessler:master' into patch-1 2022-10-26 16:45:44 +03:00
RR aacc4cd2c1 Removed duplicate entries
applied unique to the wordlist removing any duplicates from list
2022-10-20 11:31:56 -04:00
g0tmi1k b06df834ae [Github Action] Updated LFI-etc-files-of-all-linux-packages.txt 2022-10-15 20:43:27 +00:00
0x08 a218cf1a62 Merge branch 'danielmiessler:master' into patch-1 2022-10-14 15:04:02 +03:00
Deep Dhakate 25f6130e5a Merge branch 'danielmiessler:master' into master 2022-10-13 15:49:51 +05:30
RR 69388e96f9 Update hashicorp-consul-api.txt
removed two comment lines
2022-10-03 14:54:49 -04:00
RR 5c356da2f6 Update salesforce-aura-objects.txt
removed comment lines
2022-10-03 13:24:28 -04:00