forked from danielmiessler/SecLists
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[pull] master from danielmiessler:master #49
Merged
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
(1) more human injection strings (2) added a section for attacks against LLMs
Source: Wikipedia
List of Dutch words scrape mostly from NL websites and some words collected from other sources.
from (my mistaken) issue: #891 (comment)
Includes older SSH key format "ECDSA"
…information about the target
Adding "actuator" word in the list
This wordlist has duplicate lines removed, and normalized Windows paths
Especially used in IIS servers. Sources: - https://nmap.org/nsedoc/scripts/http-aspnet-debug.html - https://techcommunity.microsoft.com/t5/iis-support-blog/http-track-and-trace-verbs/ba-p/784482
Add port 8000
stripped extra space space
Update common-http-ports.txt
Certstream subdomains analysis
Update HTML tags & HTTP verbs
feat(wordlist): Added clean fortinet-2021 username and passwords wordlists.
feat(wordlists): Added LFI wordlist "[email protected]". Source: 1N3/IntruderPayloads@ec37930
Add a list of Oracle DB common SID. Source: http://www.red-database-security.com/whitepaper/oracle_default_sid.html
Update raft-medium-words.txt Source: https://docs.spring.io/spring-boot/docs/current/reference/html/actuator.html
Typos in discovery files
added wso2 api manager endpoint /services/WorkflowCallbackService?wsdl Source: https://apim.docs.wso2.com/en/3.2.0/develop/extending-api-manager/extending-workflows/invoking-the-api-manager-from-the-bpel-engine/
Update LFI-gracefulsecurity-linux.txt to include older SSH key format "ECDSA"
Create OMI-Agent-Linux.txt Source: https://github.com/nekonugget/lfi-stuff/blob/main/OMI-Agent-Linux.txt
List of Files Extensions & Dutch Wordlists
add localized wikipedia wordlists (Relates to #703) Source: https://github.com/DeveloperOl/wikipediator_v2
more human injection; new LLM section
2023.4 release
missed some
Updated os-names.txt and changed os-names-mutate.py
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by pull[bot]
Can you help keep this open source service alive? 💖 Please sponsor : )