34 commits

Author	SHA1	Message	Date
Jhayrolandero	122cc78a22	feat(wordlist): Added /etc/apache2/.htpasswd to LFI fuzzing lists (PR #1223)	2025-06-29 12:19:43 -03:00
ola456	ad823b523e	syntax:fix(wordlist): Fixed whitespace in "LFI-gracefulsecurity-windows.txt" ... space > newline	2024-11-23 09:40:25 +01:00
exploide	6afacc2a9d	LFI: added absolute C:\Windows\win.ini paths and web.config to LFI-Jhaddix.txt	2024-05-30 19:24:24 +02:00
Maksym Vatsyk	4e153fbc56	fix typo	2024-03-19 15:53:23 +01:00
Maksym Vatsyk	6e4f0e08a8	Add more paths with alternating separators	2024-03-19 15:52:52 +01:00
adeadfed	d72aadd8ce	add more valid windows paths	2024-03-12 21:04:56 +01:00
adeadfed	3c78d52e15	Add new dictionary for Windows LFI fuzzing	2024-03-05 15:11:59 +01:00
g0tmi1k	03002fbc27	Merge pull request #900 from nekonugget/master-1 ... Create OMI-Agent-Linux.txt Source: https://github.com/nekonugget/lfi-stuff/blob/main/OMI-Agent-Linux.txt	2023-11-23 17:35:52 +00:00
g0tmi1k	0c8af0a18b	Merge pull request #901 from stefanman125/patch-1 ... Update LFI-gracefulsecurity-linux.txt to include older SSH key format "ECDSA"	2023-11-23 17:33:38 +00:00
Ignacio J. Perez Portal	306339aff6	feat(wordlist): Added LFI-linux-and-windows_by-1N3@CrowdShield.txt ... This wordlist has duplicate lines removed, and normalized Windows paths	2023-10-10 09:15:00 -03:00
Stefan	96940203b1	Update LFI-gracefulsecurity-linux.txt ... Includes older SSH key format "ECDSA"	2023-09-06 14:21:17 -04:00
not main acc	e36dfa24fa	Create OMI-Agent-Linux.txt ... from (my mistaken) issue: https://github.com/danielmiessler/SecLists/issues/891#issuecomment-1679646712	2023-08-20 23:57:17 +02:00
ClutchTech	fb4298a4cb	Update LFI-gracefulsecurity-linux.txt	2023-04-23 22:00:00 -04:00
Miguel Gómez	ec227174cd	Update LFI-Jhaddix.txt ... Double URL-encode '../' with %252e%252e%252f	2022-09-27 16:36:41 -05:00
Taleb Qasem	b5116c1031	Update LFI-gracefulsecurity-windows.txt ... Added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Windows).	2022-08-02 16:25:02 +06:00
g0tmi1k	b49003fdbc	Merge pull request #785 from nicholas-long/master ... Create list of files in that could go in /etc for fuzzing	2022-08-02 07:22:22 +01:00
Taleb Qasem	294ee04ad3	Update LFI-gracefulsecurity-linux.txt ... Removed 3 duplicates (/etc/passwd, /etc/mod, and /etc/php4/apache2/php.ini). Then added word list from (https://raw.githubusercontent.com/DragonJAR/Security-Wordlist/main/LFI-WordList-Linux).	2022-07-27 21:16:50 +06:00
Nicholas Long	ca4f454d13	update auto commit message, rename wordlist and references to it, title case in markdown headings	2022-07-25 16:26:11 +00:00
nicholas-long	5850a8a1fb	update autogenerated files	2022-07-12 23:27:17 +00:00
nicholas-long	3c181f15fe	all files installed into etc by all deb packages from the debian and ubuntu apt repositories	2022-06-28 00:57:39 -05:00
indigo-sadland	694b4873eb	Nginx merge slashes path traversal vulnerability payload	2022-04-18 00:26:27 -07:00
indigo-sadland	46671534b5	unicode encoded lfi payload	2022-04-16 19:26:33 +03:00
indigo-sadland	6117632c0d	unicode encoded lfi payload	2022-04-16 19:05:01 +03:00
indigo-sadland	c49917ce1a	unicode encoded lfi payload	2022-04-16 18:58:45 +03:00
indigo-sadland	ce75be351d	unicode encoded lfi payload	2022-04-16 18:50:38 +03:00
Alex G	66e5827639	Add master.mdf MSSQL path to Windows LFI	2021-02-19 22:42:27 +01:00
g0tmi1k	d76b8f6691	Merge pull request #452 from noraj/patch-1 ... Create LFI-gracefulsecurity-windows.txt Source: https://gracefulsecurity.com/path-traversal-cheat-sheet-windows/	2020-06-12 09:57:44 +01:00
Alexandre ZANNI	7dd955a544	Create LFI-gracefulsecurity-linux.txt	2020-06-11 16:49:45 +02:00
Alexandre ZANNI	6945f3e779	Create LFI-gracefulsecurity-windows.txt	2020-06-11 16:48:39 +02:00
Karim Kanso	607c3293b4	strip trailing whitespace	2020-05-27 14:26:51 +01:00
kegan	54ac7074da	add nested traversal strings for /etc/passwd	2020-05-18 18:12:12 -05:00
Antoine Guilbaud	13b1f18901	add a common windows lfi path	2020-04-15 12:49:42 +02:00
g0tmi1k	a65f6bd665	Close #291 - Fix encoding issues ... $ for x in $( find . -type f ); do iconv -f utf-8 -t utf-8 -c ${x} | sed '/^$/d' > tmp; mv tmp ${x}; done	2019-05-08 11:04:00 +01:00
g0tmi1k	3f2c0d33d2	Quick clean up of locations	2019-04-10 13:22:39 +01:00