mirror of
https://github.com/danielmiessler/SecLists
synced 2026-02-16 12:35:51 +01:00
fix(docs): Moved 'Oracle-EBS-wordlist.txt' into the CMS directory
This commit is contained in:
parent
c64816af73
commit
fc763093b5
2 changed files with 1 additions and 31 deletions
|
|
@ -110,34 +110,4 @@ References:
|
|||
Use for: Fuzzing for common filepaths in webpages designed with **[Microsoft Frontpage](https://en.wikipedia.org/wiki/Microsoft_FrontPage)**
|
||||
|
||||
Year of the first release of Microsoft Frontpage: 1997
|
||||
Year of the last release of Microsoft Frontpage: 2003
|
||||
|
||||
## Oracle-EBS-wordlist.txt
|
||||
Use for: Fuzzing for common filepaths of [Oracle E-Business Suite](https://www.oracle.com/applications/ebusiness/) (EBS) version 11.
|
||||
|
||||
EBS v11 exposes:
|
||||
- usernames
|
||||
- ports
|
||||
- OS information
|
||||
- protocol information
|
||||
- Unauthenticated file upload
|
||||
- Cookie contents
|
||||
- SHA-1 hashed passwords
|
||||
|
||||
As an Unauthenticated user it's also possible to:
|
||||
- Create forms
|
||||
- Get servlets status
|
||||
- Get certain configuration files
|
||||
|
||||
Reference: https://the-infosec.com/2017/03/29/do-you-know-what-your-erp-is-telling-us/
|
||||
|
||||
Date of last update: Oct 7, 2019
|
||||
|
||||
|
||||
## iis-systemweb.txt
|
||||
Use for: Fuzzing the `/aspnet_client/system_web/` directory on [Microsoft IIS](https://www.iis.net/) servers to detect **CGIs** and **scripts** even even if the two ladder directories are inaccessible.
|
||||
|
||||
Reference: https://github.com/irsdl/IIS-ShortName-Scanner
|
||||
Discussion: https://github.com/danielmiessler/SecLists/pull/783
|
||||
|
||||
Date of last update: Jun 27, 2022
|
||||
Year of the last release of Microsoft Frontpage: 2003
|
||||
Loading…
Reference in a new issue