From 2191d02d4f119473664b132fb9486688f3c5e32c Mon Sep 17 00:00:00 2001 From: "Ignacio J. Perez Portal" <5990@protonmail.com> Date: Wed, 9 Oct 2024 21:51:59 -0300 Subject: [PATCH] feat(docs): Added documentation for 'Apache-Axis.txt' wordlist --- Discovery/Web-Content/Web-Servers/README.md | 66 +++++++++++++++++++++ 1 file changed, 66 insertions(+) create mode 100644 Discovery/Web-Content/Web-Servers/README.md diff --git a/Discovery/Web-Content/Web-Servers/README.md b/Discovery/Web-Content/Web-Servers/README.md new file mode 100644 index 00000000..d9197da5 --- /dev/null +++ b/Discovery/Web-Content/Web-Servers/README.md @@ -0,0 +1,66 @@ +# Web-Server wordlists + +The wordlists contained in this directory are specific for testing certain **web server software**. + +## Java-Servlet-Runner-Adobe-JRun +Use for: Fuzzing for common filepaths in webpages served with **[Java Servlet Runner (Adobe JRun)](https://adobe.fandom.com/wiki/JRun)** + +Year of the first release of Java Servlet Runner (Adobe JRun): 1997 +Year of the last release of Java Servlet Runner (Adobe JRun): 2007 + +Date of last update: Oct 14, 2010 + + +## Oracle-Sun-iPlanet.txt +Use for: Fuzzing for common filepaths in webpages served with **[Oracle Sun iPlanet](https://www.oracle.com/middleware/technologies/webtier.html)** + +Year of the first release of Sun-iPlanet (Adobe JRun): 1994 +Year of the last release of Sun-iPlanet (Adobe JRun): 2017 + +Date of last update: Oct 14, 2010 + + +## Glassfish-Sun-Microsystems.txt +Use for: Fuzzing for common filepaths in webpages served with **[Glassfish - Sun Microsystems](https://glassfish.org/)** + +Year of the first release of Glassfish: [2005](https://en.wikipedia.org/wiki/GlassFish) +Glassfish is still in recieving updates as of 2024. + +Date of last update: Oct 14, 2010 + + +## Apache.fuzz.txt +Use for: Discvering sensitive content in Apache web servers. +Date of last update: Jan 26, 2015 + + +## Apache-Tomcat.txt +Use for: Discovering sensitive content in Apache Tomcat servers. +Date of last update: Dec 14, 2017 + + +## iis-systemweb.txt +Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](https://www.iis.net/) servers to detect **CGIs** and **scripts** even even if the two ladder directories are inaccessible. + +Reference: https://github.com/irsdl/IIS-ShortName-Scanner +Discussion: https://github.com/danielmiessler/SecLists/pull/783 + +Date of last update: Jun 27, 2022 + + +## JBoss.txt +Use for: Fuzzing for common filepaths in webpages served with **[JBoss - RedHat](https://jbossas.jboss.org)** (not to be confused with "JBoss EAP"). + +Date of the first release of JBoss: [2002-05-29](https://jbossas.jboss.org/downloads/) +Date of the last release of JBoss: 2012-03-09 + +Date of last wordlist update: Feb 27, 2014 + + +## Apache-Axis.txt +Use for: Fuzzing for common filepaths in webpages created with **[Apache Axis](https://axis.apache.org/axis/)** + +Date of the first release of Apache Axis: [2002-10-07](https://jbossas.jboss.org/downloads/) +Date of the last release of Apache Axis: 2006-04-22 + +Date of last wordlist update: Feb 27, 2014 \ No newline at end of file