diff --git a/Discovery/Web-Content/README.md b/Discovery/Web-Content/README.md index 2e440a26..e2689a04 100644 --- a/Discovery/Web-Content/README.md +++ b/Discovery/Web-Content/README.md @@ -35,3 +35,14 @@ This list is a combination of the following wordlists: - raft-medium-directories.txt - raft-small-directories-lowercase.txt - raft-small-directories.txt + + +## WEB-INF-dict.txt +Use for: discovering sensitive j2ee files exploiting a lfi + +References: + +- https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3 +- https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml +- https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java +