SecLists/Discovery/Web-Content/Web-Servers
2025-02-21 23:03:11 -03:00
..
Apache-Axis.txt feat(docs): Renamed 'axis.txt' to 'Apache-Axis.txt' 2025-02-21 20:10:17 -03:00
Apache-Tomcat.txt fix(wordlist): merged duplicate 'Apache Tomcat' wordlists 2025-02-21 20:54:42 -03:00
Apache.txt fix(wordlist): merged duplicate Apache wordlists 2025-02-21 20:54:44 -03:00
Glassfish-Sun-Microsystems.txt feat(docs): Moved Web-Server wordlists into their own directory 2025-02-18 02:45:37 -03:00
IIS-POST.txt feat(docs): Added documentation for 'IIS-POST.txt' 2025-02-21 23:03:11 -03:00
IIS-systemweb.txt feat(docs): Moved Web-Server wordlists into their own directory 2025-02-18 02:45:37 -03:00
IIS.txt fix(wordlist): renamed wordlist 'IIS.fuzz.txt' to 'IIS.txt' 2025-02-21 20:58:54 -03:00
Java-Servlet-Runner-Adobe-JRun.txt feat(docs): Moved Web-Server wordlists into their own directory 2025-02-18 02:45:37 -03:00
JBoss.txt fix(docs): Moved 'jboss.txt' into the Web-Servers directory 2025-02-21 20:35:25 -03:00
nginx.txt fix(docs): Moved 'nginx.txt' into the Web-Servers directory 2025-02-21 20:35:26 -03:00
Oracle-Sun-iPlanet.txt feat(docs): Moved Web-Server wordlists into their own directory 2025-02-18 02:45:37 -03:00
README.md feat(docs): Added documentation for 'IIS-POST.txt' 2025-02-21 23:03:11 -03:00

Web-Server wordlists

The wordlists contained in this directory are specific for testing certain web server software.

Java-Servlet-Runner-Adobe-JRun

Use for: Fuzzing for common filepaths in webpages served with Java Servlet Runner (Adobe JRun)

Year of the first release of Java Servlet Runner (Adobe JRun): 1997
Year of the last release of Java Servlet Runner (Adobe JRun): 2007

Date of last update: Oct 14, 2010

Oracle-Sun-iPlanet.txt

Use for: Fuzzing for common filepaths in webpages served with Oracle Sun iPlanet

Year of the first release of Sun-iPlanet (Adobe JRun): 1994
Year of the last release of Sun-iPlanet (Adobe JRun): 2017

Date of last update: Oct 14, 2010

Glassfish-Sun-Microsystems.txt

Use for: Fuzzing for common filepaths in webpages served with Glassfish - Sun Microsystems

Year of the first release of Glassfish: 2005
Glassfish is still in recieving updates as of 2024.

Date of last update: Oct 14, 2010

Apache.fuzz.txt

Use for: Discvering sensitive content in Apache web servers.

Date of last update: Jan 26, 2015

Apache-Tomcat.txt

Use for: Discovering sensitive content in Apache Tomcat servers.

Date of last update: Dec 14, 2017

iis-systemweb.txt

Use for: Fuzzing the /aspnet_client/system_web/ directory on Microsoft IIS servers to detect CGIs and scripts even even if the two ladder directories are inaccessible.

Reference: https://github.com/irsdl/IIS-ShortName-Scanner

Discussion: https://github.com/danielmiessler/SecLists/pull/783

Date of last update: Jun 27, 2022

JBoss.txt

Use for: Fuzzing for common filepaths in webpages served with JBoss - RedHat (not to be confused with "JBoss EAP").

Date of the first release of JBoss: 2002-05-29
Date of the last release of JBoss: 2012-03-09

Date of last wordlist update: Feb 27, 2014

Apache-Axis.txt

Use for: Fuzzing for common filepaths in webpages created with Apache Axis

Date of the first release of Apache Axis: 2002-10-07
Date of the last release of Apache Axis: 2006-04-22

IIS-POST.txt

Use for: Fuzzing for Microsoft IIS files which require being scanned for with the HTTP POST verb