firebadnofire
/
SecLists
mirror of https://github.com/danielmiessler/SecLists.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
SecLists/Discovery/Web-Content
History
GitHub Action 7fa58a2a26 [Github Action] Updated combined_words.txt 2023-03-09 12:37:53 +00:00
..
BurpSuite-ParamMiner Rename "_" -> "-" & found a few new homes 2018-10-15 13:08:10 +01:00
CMS Adding wordlist for DotNetNuke resources 2022-12-20 14:18:21 -06:00
Domino-Hunter strip trailing whitespace 2020-05-27 14:26:51 +01:00
RobotsTxtPaths-Trickest-Wordlists Use more descriptive names for Trickest wordlists 2023-01-16 13:58:06 +02:00
SVNDigger Update js.txt 2022-08-27 01:14:03 +05:30
URLs strip trailing whitespace 2020-05-27 14:26:51 +01:00
Web-Services Fix #259 - Recover from bad merge 2019-01-07 15:40:56 +00:00
WebTechnologyPaths-Trickest-Wordlists Use more descriptive names for Trickest wordlists 2023-01-16 13:58:06 +02:00
api Merge pull request #811 from tacticthreat/patch-2 2022-11-22 12:12:18 +00:00
AdobeCQ-AEM.txt Cleanup and enhancement 2022-08-08 18:28:59 +02:00
AdobeXML.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Apache.fuzz.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
ApacheTomcat.fuzz.txt Close #153 - Update ApacheTomcat.fuzz.txt 2018-03-21 16:10:27 +00:00
CGI-HTTP-POST-Windows.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
CGI-HTTP-POST.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
CGI-Microsoft.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
CGI-XPlatform.fuzz.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
CGIs.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Common-DB-Backups.txt Some New DB Extensions 2020-09-13 20:04:25 +03:00
Common-PHP-Filenames.txt Close #145 - Update Common_PHP_Filenames.txt (admin*.php) 2018-03-21 16:14:59 +00:00
CommonBackdoors-ASP.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
CommonBackdoors-JSP.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
CommonBackdoors-PHP.fuzz.txt removed non php shells 2022-02-09 21:42:25 -05:00
CommonBackdoors-PL.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
FatwireCMS.fuzz.txt merged FatwireCMS.fuzz.txt fatwire.txt 2018-12-11 04:32:05 +02:00
Frontpage.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
HTTP-POST-Microsoft.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Hyperion.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
IIS.fuzz.txt Add NDES and SCEP URLs 2020-09-23 14:49:24 +02:00
JRun.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
JavaScript-Miners.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
JavaServlets-Common.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Jenkins-Hudson.txt Cleanup 2021-10-05 18:41:44 +02:00
KitchensinkDirectories.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
LinuxFileList.txt Fix #259 - Recover from bad merge 2019-01-07 15:40:56 +00:00
Logins.fuzz.txt Add "cms" word to list 2021-05-05 10:51:29 -03:00
LotusNotes.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Oracle-EBS-wordlist.txt Added more we shells 2022-02-09 21:37:00 -05:00
Oracle9i.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
OracleAppServer.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
PHP.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Passwords.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Public-Source-Repo-Issues.json Rename Public-Source-Repo-Issues.txt to Public-Source-Repo-Issues.json 2020-05-24 13:07:50 +02:00
README.md Merge branch 'master' into dsstore 2022-11-23 04:21:05 +00:00
Randomfiles.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
RobotsDisallowed-Top10.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
RobotsDisallowed-Top100.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
RobotsDisallowed-Top500.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
RobotsDisallowed-Top1000.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
Roundcube-123.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
SunAppServerGlassfish.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
SuniPlanet.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
UnixDotfiles.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Vignette.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
WEB-INF-dict.txt chore: Add new entries 2023-01-05 22:20:49 +03:00
aem2.txt Create aem2.txt 2021-08-25 15:22:35 -05:00
apache.txt Add balancer for apache 2021-04-26 18:26:17 +02:00
axis.txt standardisze line endings 2020-05-27 14:10:50 +01:00
big.txt adding "dismiss" to big.txt 2021-08-22 22:54:33 +02:00
burp-parameter-names.txt Sync with param-miner master repo 2022-04-10 10:04:13 +02:00
coldfusion.txt standardisze line endings 2020-05-27 14:10:50 +01:00
combined_directories.txt [Github Action] Updated combined_directories.txt 2022-08-02 09:54:34 +00:00
combined_words.txt [Github Action] Updated combined_words.txt 2023-03-09 12:37:53 +00:00
common-and-dutch.txt Adds activation to common.txt 2022-07-23 16:42:03 +02:00
common-and-french.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
common-and-italian.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
common-and-portuguese.txt renamed to correct name 2020-04-07 08:52:35 -03:00
common-and-spanish.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
common-api-endpoints-mazen160.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
common.txt Update common.txt 2023-03-09 13:34:32 +01:00
confluence-administration.txt Close #195 - Confluence administration 2018-07-05 07:21:57 +01:00
default-web-root-directory-linux.txt Quick move about 2018-03-21 17:47:29 +00:00
default-web-root-directory-windows.txt Quick move about 2018-03-21 17:47:29 +00:00
directory-list-1.0.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
directory-list-2.3-big.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
directory-list-2.3-medium.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
directory-list-2.3-small.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
directory-list-lowercase-2.3-big.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
directory-list-lowercase-2.3-medium.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
directory-list-lowercase-2.3-small.txt Discovery: Fix spelling and hyphenate some words 2021-03-13 23:23:27 +01:00
dirsearch.txt Update dirsearch.txt 2022-06-18 13:52:57 +07:00
domino-dirs-coldfusion39.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
domino-endpoints-coldfusion39.txt merged two domino endpoints files 2018-12-11 04:01:38 +02:00
dsstorewordlist.txt Added dsstorewordlist.txt 2022-11-08 19:15:13 -03:00
elmah.txt Add ELMAH files and directories 2020-11-05 16:39:29 +01:00
fnf-fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
forefront-identity-management.txt Rename forefront-identity-management to forefront-identity-management.txt 2022-06-28 15:37:41 +02:00
frontpage.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
golang.txt Revert "Merge pull request #4 from danielmiessler/master" 2020-08-11 14:25:56 +02:00
graphql.txt add ___graphql to Discovery/Web-Content/graphql.txt,https://github.com/danielmiessler/SecLists/issues/642 2021-08-28 11:44:02 +08:00
hashicorp-consul-api.txt Update hashicorp-consul-api.txt 2022-10-03 14:54:49 -04:00
hashicorp-vault.txt Avoid 301 2021-11-08 17:06:31 +01:00
hpsmh.txt standardisze line endings 2020-05-27 14:10:50 +01:00
hyperion.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
iis-systemweb.txt Create iis-systemweb.txt 2022-06-27 19:20:19 +02:00
iplanet.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
jboss.txt standardisze line endings 2020-05-27 14:10:50 +01:00
jrun.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
local-ports.txt Add local ports for scan 2019-10-21 17:49:56 +02:00
netware.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
nginx.txt Update nginx.txt 2021-07-31 10:28:09 +05:30
oauth-oidc-scopes.txt Added a couple of scopes 2021-10-18 01:36:33 +00:00
oracle.txt standardisze line endings 2020-05-27 14:10:50 +01:00
proxy-conf.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
quickhits.txt Fresher backups in Discovery/Web-Content/quickhits.txt 2022-11-25 13:32:56 +01:00
raft-large-directories-lowercase.txt add opcache to raft large directory list, #683 2022-02-01 15:32:17 +01:00
raft-large-directories.txt add opcache to raft large directory list, #683 2022-02-01 15:32:17 +01:00
raft-large-extensions-lowercase.txt Add server.js extension 2022-12-22 15:09:37 +00:00
raft-large-extensions.txt Add server.js extension 2022-12-22 15:09:37 +00:00
raft-large-files-lowercase.txt Add waybackverify.txt filename to raft medium and large lists 2021-07-13 13:09:49 +02:00
raft-large-files.txt Merge pull request #626 from 7PH/master 2021-08-27 21:13:55 +01:00
raft-large-words-lowercase.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-large-words.txt Fix #259 - Recover from bad merge 2019-01-07 15:40:56 +00:00
raft-medium-directories-lowercase.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
raft-medium-directories.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
raft-medium-extensions-lowercase.txt Add server.js extension 2022-12-22 15:09:37 +00:00
raft-medium-extensions.txt Add server.js extension 2022-12-22 15:09:37 +00:00
raft-medium-files-lowercase.txt Add waybackverify.txt filename to raft medium and large lists 2021-07-13 13:09:49 +02:00
raft-medium-files.txt Add waybackverify.txt filename to raft medium and large lists 2021-07-13 13:09:49 +02:00
raft-medium-words-lowercase.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-medium-words.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-small-directories-lowercase.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
raft-small-directories.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
raft-small-extensions-lowercase.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-small-extensions.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-small-files-lowercase.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-small-files.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-small-words-lowercase.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
raft-small-words.txt raft-small-words.txt: Added more source code versioning systems 2022-06-23 19:36:36 -03:00
reverse-proxy-inconsistencies.txt Fixed typo on line 26 2022-04-30 23:19:40 -04:00
ror.txt Update Ruby on Rails wordlists 2021-03-26 12:56:05 +05:00
sap.txt Revert "Merge pull request #4 from danielmiessler/master" 2020-08-11 14:25:56 +02:00
sharepoint-ennumeration.txt Update sharepoint-ennumeration.txt 2022-06-29 11:00:16 +02:00
spring-boot.txt Merge pull request #807 from righettod/feature_update_springboot 2022-11-22 12:09:25 +00:00
sunas.txt standardisze line endings 2020-05-27 14:10:50 +01:00
swagger.txt remove old invalid entries of swagger-ui 2023-02-11 03:55:38 -03:00
tests.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
tftp.fuzz.txt rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
tomcat.txt standardisze line endings 2020-05-27 14:10:50 +01:00
uri-from-top-55-most-popular-apps.txt Update uri-from-top-55-most-popular-apps.txt 2022-06-29 11:10:56 +02:00
url-params_from-top-55-most-popular-apps.txt Update and rename top-apk-params.txt to url-params_from-top-55-most-popular-apps.txt 2022-06-28 15:15:08 +02:00
versioning_metafiles.txt Create versioning_metafiles.txt 2021-02-20 20:41:53 +01:00
web-all-content-types.txt refreshed content-types from www.iana.org/assignments/media-types/media-types.xml 2020-11-17 11:48:56 +00:00
web-extensions.txt Add .hta to web-extensions.txt 2023-02-25 21:09:55 -05:00
web-mutations.txt Add VIM and NANO backup file 2019-10-11 15:55:38 +02:00
weblogic.txt Minor change 2020-06-18 14:15:16 +00:00
websphere.txt Fix #255 - Add more wps 2019-01-07 15:55:10 +00:00

README.md

Web discovery wordlists

combined_words.txt

Use for: discovering files
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.

This list is a combination of the following wordlists:

  • big.txt
  • common.txt
  • raft-large-words-lowercase.txt
  • raft-large-words.txt
  • raft-medium-words-lowercase.txt
  • raft-medium-words.txt
  • raft-small-words-lowercase.txt
  • raft-small-words.txt

combined_directories.txt

Use for: discovering files and directories
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.

This list is a combination of the following wordlists:

  • apache.txt
  • combined_words.txt
  • directory-list-1.0.txt
  • directory-list-2.3-big.txt
  • directory-list-2.3-medium.txt
  • directory-list-2.3-small.txt
  • raft-large-directories-lowercase.txt
  • raft-large-directories.txt
  • raft-medium-directories-lowercase.txt
  • raft-medium-directories.txt
  • raft-small-directories-lowercase.txt
  • raft-small-directories.txt

dsstorewordlist.txt

SOURCE: https://github.com/aels/subdirectories-discover

Perfect wordlist to discover directories and files on target site with tools like ffuf.

  • It was collected by parsing Alexa top-million sites for .DS_Store files (https://en.wikipedia.org/wiki/.DS_Store), extracting all the found files, and then extracting found file and directory names from around 300k real websites.
  • Then sorted by probability and removed strings with one occurrence.
  • resulted file you can download is below. Happy Hunting!

WEB-INF-dict.txt

Use for: discovering sensitive j2ee files exploiting a lfi

References: